Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: 5Vp61CxvxBS8N7PiNY8zIUsLvPDNxll9IKUA2guBfUg=
Subject key identifier: 55:7F:9D:88:BB:69:E3:E5:2C:8D:6F:00:E3:B1:27:85:4A:8B:D9:F4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B861086647D962EABF7E76B0705F01B412668FD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
Signing time: Fri 07 Aug 2026 12:39:02 +0000
ROA not before: Fri 07 Aug 2026 12:34:02 +0000
ROA not after: Fri 06 Aug 2027 12:39:02 +0000
asID: 57043
IP address blocks: 82.21.7.0/24 maxlen: 24
82.21.53.0/24 maxlen: 24
82.21.114.0/24 maxlen: 24
82.21.117.0/24 maxlen: 24
82.21.150.0/24 maxlen: 24
82.21.153.0/24 maxlen: 24
82.22.3.0/24 maxlen: 24
82.22.6.0/24 maxlen: 24
82.22.35.0/24 maxlen: 24
82.22.36.0/24 maxlen: 24
82.22.38.0/24 maxlen: 24
82.22.47.0/24 maxlen: 24
82.22.50.0/24 maxlen: 24
82.22.53.0/24 maxlen: 24
82.22.146.0/24 maxlen: 24
82.22.175.0/24 maxlen: 24
82.22.187.0/24 maxlen: 24
82.23.138.0/24 maxlen: 24
82.23.162.0/24 maxlen: 24
82.23.163.0/24 maxlen: 24
82.23.173.0/24 maxlen: 24
82.23.177.0/24 maxlen: 24
82.23.248.0/24 maxlen: 24
82.23.249.0/24 maxlen: 24
82.24.19.0/24 maxlen: 24
82.24.110.0/24 maxlen: 24
82.24.123.0/24 maxlen: 24
82.24.174.0/24 maxlen: 24
82.24.195.0/24 maxlen: 24
82.25.12.0/24 maxlen: 24
82.25.39.0/24 maxlen: 24
82.25.58.0/24 maxlen: 24
82.25.60.0/24 maxlen: 24
82.25.61.0/24 maxlen: 24
82.25.161.0/24 maxlen: 24
82.25.174.0/24 maxlen: 24
82.25.185.0/24 maxlen: 24
82.25.190.0/24 maxlen: 24
82.26.86.0/24 maxlen: 24
82.26.91.0/24 maxlen: 24
82.26.94.0/24 maxlen: 24
82.26.136.0/24 maxlen: 24
82.26.150.0/24 maxlen: 24
82.26.151.0/24 maxlen: 24
82.26.152.0/24 maxlen: 24
82.26.171.0/24 maxlen: 24
82.26.193.0/24 maxlen: 24
82.26.198.0/24 maxlen: 24
82.27.117.0/24 maxlen: 24
82.27.118.0/24 maxlen: 24
82.38.40.0/24 maxlen: 24
82.38.64.0/24 maxlen: 24
82.38.65.0/24 maxlen: 24
82.38.66.0/24 maxlen: 24
82.38.67.0/24 maxlen: 24
82.38.70.0/24 maxlen: 24
82.38.71.0/24 maxlen: 24
82.38.135.0/24 maxlen: 24
82.38.139.0/24 maxlen: 24
82.38.171.0/24 maxlen: 24
82.39.165.0/24 maxlen: 24
82.39.215.0/24 maxlen: 24
82.40.37.0/24 maxlen: 24
82.40.38.0/24 maxlen: 24
82.40.49.0/24 maxlen: 24
82.40.56.0/24 maxlen: 24
82.40.57.0/24 maxlen: 24
82.40.58.0/24 maxlen: 24
82.40.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:86:10:86:64:7d:96:2e:ab:f7:e7:6b:07:05:f0:1b:41:26:68:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 12:34:02 2026 GMT
Not After : Aug 6 12:39:02 2027 GMT
Subject: CN=557F9D88BB69E3E52C8D6F00E3B127854A8BD9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:bb:75:e9:56:75:64:06:aa:95:48:c7:29:
4c:51:63:9b:98:8f:b8:5d:01:00:11:96:ed:1b:c3:
de:e2:bc:e1:a2:9b:91:48:b7:36:d0:dd:87:17:27:
c9:b7:3e:ec:66:ae:2b:4d:e3:c3:81:b5:1a:0d:52:
0d:06:7a:30:94:f7:12:ad:c6:d3:10:a1:f8:d9:95:
81:75:42:4e:9a:73:23:c8:9f:a8:39:5a:b2:fa:e1:
68:13:bc:43:91:32:0a:f3:cc:62:36:7f:0b:2b:dd:
33:50:a7:bb:39:1a:8d:fe:9f:ac:70:a9:b6:f0:3d:
27:9b:2c:a0:47:1f:d4:b8:5a:e5:8d:29:2b:ad:0e:
2d:3c:90:36:36:e1:c4:5f:92:91:45:9c:05:7b:ce:
f8:4b:78:47:89:48:96:2b:c9:bc:70:ac:6a:df:85:
c0:fb:d0:85:8f:16:3f:2f:d8:86:34:a8:d2:55:2c:
a6:24:59:45:03:1a:ba:dc:d5:09:8d:60:e8:a9:ab:
cd:96:8d:2f:41:c8:af:a9:5c:5c:75:d4:93:62:9e:
44:d7:bb:86:5a:64:c4:56:53:0c:92:bf:2f:d2:a3:
e3:1d:6a:96:62:ef:f0:36:ef:b4:be:c4:d7:d3:82:
68:70:ef:a4:d9:ca:08:7d:0a:b9:bc:6c:c3:a6:a8:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:9D:88:BB:69:E3:E5:2C:8D:6F:00:E3:B1:27:85:4A:8B:D9:F4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.7.0/24
82.21.53.0/24
82.21.114.0/24
82.21.117.0/24
82.21.150.0/24
82.21.153.0/24
82.22.3.0/24
82.22.6.0/24
82.22.35.0-82.22.36.255
82.22.38.0/24
82.22.47.0/24
82.22.50.0/24
82.22.53.0/24
82.22.146.0/24
82.22.175.0/24
82.22.187.0/24
82.23.138.0/24
82.23.162.0/23
82.23.173.0/24
82.23.177.0/24
82.23.248.0/23
82.24.19.0/24
82.24.110.0/24
82.24.123.0/24
82.24.174.0/24
82.24.195.0/24
82.25.12.0/24
82.25.39.0/24
82.25.58.0/24
82.25.60.0/23
82.25.161.0/24
82.25.174.0/24
82.25.185.0/24
82.25.190.0/24
82.26.86.0/24
82.26.91.0/24
82.26.94.0/24
82.26.136.0/24
82.26.150.0-82.26.152.255
82.26.171.0/24
82.26.193.0/24
82.26.198.0/24
82.27.117.0-82.27.118.255
82.38.40.0/24
82.38.64.0/22
82.38.70.0/23
82.38.135.0/24
82.38.139.0/24
82.38.171.0/24
82.39.165.0/24
82.39.215.0/24
82.40.37.0-82.40.38.255
82.40.49.0/24
82.40.56.0-82.40.58.255
82.40.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f9:a5:31:e5:31:f6:0d:ea:41:7f:b0:f5:1e:be:79:14:ae:
b5:42:a0:7d:9b:22:b8:63:7c:a5:ea:45:71:fc:bc:5a:a1:5e:
01:b8:48:0f:64:3d:19:b3:d2:cc:cd:e0:26:c5:ac:2d:7e:4e:
cf:dd:d9:5b:bf:4e:4a:39:cf:e3:75:45:9d:bd:56:da:09:16:
ba:64:69:89:47:84:42:0d:10:33:ca:07:ec:de:6e:dd:05:df:
98:ef:42:eb:70:d2:8d:05:86:59:1a:7f:58:5d:4b:09:75:65:
c6:59:db:34:78:20:5b:1c:1a:0c:eb:a3:76:d7:80:b6:05:c2:
55:83:f6:7c:4d:da:27:ec:db:3e:ed:65:42:d1:09:17:a1:11:
1c:93:7e:2e:a7:fe:92:34:fd:d5:c1:d4:92:43:17:ea:fe:8b:
a6:28:67:d0:74:a4:98:38:3f:d7:06:7c:41:91:ad:c2:6b:00:
2d:71:01:2f:d2:96:af:f5:63:08:9c:4c:fb:33:a4:f5:10:63:
a3:79:8a:f6:3c:d9:53:05:6f:88:f1:67:ff:f4:60:0e:15:8a:
ee:21:30:84:94:f2:4a:f1:ae:7b:18:a6:f3:13:4e:d9:bf:7a:
ec:bd:4b:7f:49:17:9d:08:f4:c9:d9:11:99:81:d9:16:2b:8f:
ef:de:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:35 2026 by rpki-client