Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57142.roa
File: AS57142.roa (raw, json)
Hash identifier: vsZz2W6fKwJ86G58+J/CigaNa+tl+zoJgyvuACdToxQ=
Subject key identifier: 84:1D:EE:39:F2:40:C3:45:78:66:BF:0E:9C:53:9D:6A:C1:3D:41:D8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1AE971C7EF244C92045EBA7A9CABE904AC931CF7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57142.roa
Signing time: Thu 25 Jun 2026 17:48:41 +0000
ROA not before: Thu 25 Jun 2026 17:43:41 +0000
ROA not after: Thu 24 Jun 2027 17:48:41 +0000
asID: 57142
IP address blocks: 2a13:9500:b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e9:71:c7:ef:24:4c:92:04:5e:ba:7a:9c:ab:e9:04:ac:93:1c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 25 17:43:41 2026 GMT
Not After : Jun 24 17:48:41 2027 GMT
Subject: CN=841DEE39F240C3457866BF0E9C539D6AC13D41D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:a4:59:a8:89:ec:34:34:69:68:68:d3:8b:
9d:f5:66:d4:cf:41:1d:2e:b0:93:04:77:65:79:20:
77:46:92:74:90:3c:03:c9:03:2e:4d:9f:61:17:b0:
af:4e:c2:b0:c7:54:81:ee:1b:3d:31:d1:e1:56:d4:
fb:7d:28:80:e7:a6:d0:26:5e:9c:14:b6:f9:6a:a7:
55:c6:39:76:18:ec:26:3a:13:97:7d:8b:f2:3a:59:
d9:a3:d5:53:3c:a9:43:e3:48:51:1d:2c:be:cb:6a:
af:fe:c8:b1:ea:65:0a:3c:3d:a6:67:5d:15:de:6f:
2f:41:63:8d:2e:5e:5c:a8:22:40:39:be:9f:5a:71:
03:33:06:dd:d9:dc:b1:9e:6c:7f:7b:22:f1:fd:01:
0e:cf:41:d9:ab:c3:ee:d5:2c:4f:8a:ea:e2:a6:0f:
41:65:00:9c:0d:e1:46:b7:85:78:b0:09:c7:7a:46:
7a:2e:0b:41:7b:ea:bc:6f:11:ac:ab:41:d5:1d:d1:
eb:2d:10:59:06:ac:2c:e3:ca:41:a5:01:6c:10:1f:
44:22:fc:8e:35:59:75:82:23:d6:21:7e:37:11:f8:
1f:64:ef:16:98:56:7a:cc:56:23:54:81:3d:e6:72:
61:1a:5b:0e:63:6a:d5:16:33:69:2a:d7:df:05:0b:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:EE:39:F2:40:C3:45:78:66:BF:0E:9C:53:9D:6A:C1:3D:41:D8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b8::/48
Signature Algorithm: sha256WithRSAEncryption
66:4f:5e:f7:89:5d:a1:9d:db:9f:26:15:86:2d:77:ce:1d:08:
ba:32:6c:b3:93:ea:bb:ea:b5:41:7f:f5:59:47:00:00:e5:2f:
8b:8a:1c:73:f4:e6:5c:7f:7d:10:13:03:71:04:6c:41:c1:71:
a0:86:46:01:dc:c7:19:02:ff:04:37:76:07:46:10:5f:49:ae:
33:d6:20:5c:e6:8f:07:ca:c3:7b:a1:d5:44:33:74:ad:69:c4:
8e:5f:12:49:2d:aa:53:1e:a7:fa:da:df:1b:56:e0:5c:a1:27:
8b:c1:5c:d9:73:94:fc:e1:d5:e4:d9:44:38:71:56:6f:41:9d:
0f:ea:f6:90:5e:7c:dd:fc:22:37:78:46:f9:38:be:ff:a4:07:
9a:c3:4f:4a:4e:97:30:c4:21:11:f0:a0:e6:5b:96:85:c6:97:
70:30:16:31:d3:c0:77:08:1c:9c:90:06:b5:07:4a:66:de:17:
d1:1f:83:26:a5:e4:f6:71:93:87:23:54:53:cc:a4:a0:08:01:
aa:68:13:44:d1:d9:31:d2:05:9d:2d:b6:96:da:f0:53:1a:dc:
8f:a7:25:78:c4:df:75:a4:65:a0:53:e3:97:32:14:bb:0e:fc:
3d:00:3a:36:b1:4a:f0:da:2c:37:18:34:ea:38:ce:af:49:38:
6c:90:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:02 2026 by rpki-client