Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: wQu6JAmaHAOxkEgkuSVDCgWU2ENRCUrfWyAu2I+826A=
Subject key identifier: 5F:6E:CA:F5:5D:A3:6C:BE:E2:CE:AF:2B:94:CC:6A:3C:74:B4:6A:CF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0BAFA826A582720CE83E6A876558CEB8991E8897
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57043.roa
Signing time: Tue 16 Jun 2026 13:35:02 +0000
ROA not before: Tue 16 Jun 2026 13:30:02 +0000
ROA not after: Tue 15 Jun 2027 13:35:02 +0000
asID: 57043
IP address blocks: 141.11.0.0/24 maxlen: 24
141.11.209.0/24 maxlen: 24
141.11.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:af:a8:26:a5:82:72:0c:e8:3e:6a:87:65:58:ce:b8:99:1e:88:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 16 13:30:02 2026 GMT
Not After : Jun 15 13:35:02 2027 GMT
Subject: CN=5F6ECAF55DA36CBEE2CEAF2B94CC6A3C74B46ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:77:73:7c:87:6d:68:25:e8:41:be:0f:3a:
c8:c6:a6:77:98:dc:0e:47:f7:4d:66:3f:d9:b3:2c:
50:5d:aa:34:db:74:31:dc:41:b8:a9:b1:70:04:ac:
ed:1b:c3:1f:ae:3b:9a:c0:b8:ab:4c:42:e3:a8:68:
90:3d:23:b5:9a:16:8b:46:4b:ba:cd:97:93:03:19:
38:2c:4a:7c:25:1a:35:53:38:15:78:1e:2c:a1:c1:
01:a9:00:b9:c8:2f:6e:bd:12:4f:ee:3f:9a:73:33:
d7:42:ad:42:b2:c8:d5:27:ee:45:b9:e6:12:58:9d:
96:2b:4f:b4:18:ed:35:4a:9e:97:7c:64:61:36:9b:
7e:58:14:0e:af:41:cd:45:16:de:75:f4:9a:bc:7d:
12:f3:39:c2:9a:01:91:9c:73:83:8a:3a:cc:26:11:
cd:78:a0:37:f4:85:b6:09:bf:43:f0:30:06:e9:8f:
dd:44:0b:e8:e0:a3:1f:6c:86:1e:36:c8:51:a3:98:
50:be:36:d4:f0:7c:81:11:97:71:42:0a:55:fd:c0:
4f:50:7e:17:35:bc:e4:f0:b1:67:db:34:a1:72:bb:
27:3a:0b:d0:dd:6f:88:d0:c8:2e:62:6e:ec:9e:40:
6e:2e:ee:10:c5:d0:e0:48:35:0d:50:85:59:16:37:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:CA:F5:5D:A3:6C:BE:E2:CE:AF:2B:94:CC:6A:3C:74:B4:6A:CF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
141.11.209.0/24
141.11.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:46:2f:62:02:e9:88:6f:07:22:8b:1d:96:f7:be:4d:b5:1d:
63:fa:7c:03:03:2c:2f:14:9f:a5:ed:19:86:70:61:01:60:da:
17:01:b8:6b:d4:04:43:2f:7a:cc:32:47:27:d5:27:41:aa:c9:
c9:22:68:5c:b3:b5:4c:7e:d2:41:73:e2:ab:b0:e5:b5:64:f7:
65:59:55:a6:1c:61:25:69:54:6a:ea:37:de:b8:fe:c7:30:f8:
15:d6:a2:90:08:57:a8:c9:10:ba:48:9b:b6:61:4f:61:70:86:
c7:5d:a5:8f:ed:67:1e:23:78:63:d6:5a:08:35:56:e2:0f:96:
21:dd:7c:b9:80:2c:37:b9:5a:0b:53:3e:f8:d3:71:90:fd:86:
e6:4b:77:3b:4a:a0:ba:d6:e8:aa:71:cb:b3:6d:6a:43:1d:cd:
8d:98:ae:30:54:23:fa:52:35:43:4e:98:05:02:dd:89:c6:23:
c5:23:98:d5:e9:e8:0d:62:2f:4f:4e:73:b6:20:9b:66:6c:e1:
ce:43:93:42:4c:b5:87:5d:8a:9e:8a:97:19:11:61:6c:67:0f:
9a:1b:7a:e4:24:7e:19:a9:b7:29:d3:2e:e1:e7:fa:0d:dd:2f:
dd:47:82:5b:41:16:48:85:ca:f3:5f:7b:3a:02:fc:b5:09:6f:
c7:e1:79:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:40 2026 by rpki-client