Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=
Subject key identifier: B2:3D:FF:C1:3E:B8:97:44:88:04:B0:10:02:A8:62:03:1A:8C:E0:2E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 2A014AEDB3588A2D1A3C913E23FB9A716E291CC6
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS57043.roa
Signing time: Thu 20 Aug 2026 16:42:45 +0000
ROA not before: Thu 20 Aug 2026 16:37:45 +0000
ROA not after: Thu 19 Aug 2027 16:42:45 +0000
asID: 57043
IP address blocks: 177.29.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:01:4a:ed:b3:58:8a:2d:1a:3c:91:3e:23:fb:9a:71:6e:29:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Aug 20 16:37:45 2026 GMT
Not After : Aug 19 16:42:45 2027 GMT
Subject: CN=B23DFFC13EB897448804B01002A862031A8CE02E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:39:37:8f:17:16:bf:72:44:3c:0e:59:57:
b7:cc:34:3c:c0:b8:e2:98:da:53:c3:2d:31:3e:a8:
2b:fb:d0:57:5d:73:db:91:3d:0d:be:64:39:51:e2:
ff:ed:b6:9c:d0:a5:6f:82:e6:e1:b6:c7:fa:1a:7a:
90:25:d7:84:79:7e:89:8f:48:64:5c:8b:ac:5b:59:
da:d3:b3:34:56:47:c2:60:8e:c3:fe:b1:b9:19:99:
f0:8b:2b:a3:4b:76:11:13:8b:d8:d2:fd:55:3b:55:
6f:bc:96:2c:87:13:04:21:ff:d4:97:5c:a3:ef:68:
37:c0:78:a9:3d:10:7f:f1:65:28:3d:18:a7:d1:6c:
91:c0:f6:fc:90:b7:00:3a:1b:e0:45:fc:e5:30:55:
53:e7:61:98:b2:5a:22:a4:75:1d:7c:7b:fb:9a:66:
e9:07:4f:78:6b:a6:0d:17:12:27:fa:f5:68:7d:b0:
bc:04:a7:75:c6:56:e0:82:da:41:9d:85:49:b9:c3:
a1:e6:1c:cb:95:59:cd:60:4e:22:1b:a2:62:95:5f:
ee:fa:c8:cc:04:69:b3:2d:e9:41:96:03:d6:39:e4:
ff:c1:90:dd:25:cb:4e:91:90:2f:01:ea:5b:7a:5b:
eb:0b:be:bd:55:81:ed:e9:38:a2:9d:5c:b6:9b:e5:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:FF:C1:3E:B8:97:44:88:04:B0:10:02:A8:62:03:1A:8C:E0:2E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.247.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d3:22:12:65:43:27:d2:50:a6:81:65:02:05:27:d9:3d:cf:
38:2a:99:58:9f:8b:ba:8c:df:3b:5f:ab:66:90:1b:69:a3:d2:
e0:c6:bb:97:3b:37:38:1b:c3:42:62:cc:4d:67:cf:e1:87:1d:
ab:75:8c:b4:b1:d6:e5:69:05:3d:f6:0b:58:27:7b:bb:a6:de:
8d:e3:7b:96:8e:6e:7b:7d:13:3c:0b:ab:3c:75:b0:c8:fa:b6:
4f:bc:df:5c:a3:90:90:d3:e2:97:e3:72:8d:83:4c:6e:c0:cc:
b2:2e:e5:ad:13:f2:10:6f:4d:95:2b:0a:10:b9:fb:f7:08:2d:
87:47:42:8a:db:a8:24:5b:11:8e:34:f9:d2:88:2a:27:91:d9:
bd:da:1b:e0:0c:16:f1:9f:fb:eb:54:c0:53:e3:30:cd:a5:12:
1d:87:b3:b4:30:b9:3a:6b:9e:85:0b:7d:d2:a1:c5:49:b9:14:
7a:1e:b9:c5:c7:18:f6:3e:01:45:25:69:86:35:ca:04:98:c3:
18:10:0e:a3:a1:26:78:01:2e:b3:ee:13:f1:0a:08:e1:d7:a7:
3e:a1:a1:82:ab:36:07:85:87:06:5d:f3:df:fb:64:cb:3b:3c:
c6:06:92:71:e2:1f:07:53:02:ea:64:fc:6d:99:79:5b:d8:f1:
e0:67:5d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:33 2026 by rpki-client