Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: lXWlvXAFqNv6/1xJX9lSNxkuyjKYBKD2RAWhC56Zt0I=
Subject key identifier: 42:73:30:66:A6:88:A9:FC:39:9A:28:36:61:92:04:32:E5:DD:25:6B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 37BD082A596DFAB04476FC0BBAAD23BDEE22B169
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57043.roa
Signing time: Sun 02 Aug 2026 20:37:30 +0000
ROA not before: Sun 02 Aug 2026 20:32:30 +0000
ROA not after: Sun 01 Aug 2027 20:37:30 +0000
asID: 57043
IP address blocks: 91.124.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 22:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bd:08:2a:59:6d:fa:b0:44:76:fc:0b:ba:ad:23:bd:ee:22:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 2 20:32:30 2026 GMT
Not After : Aug 1 20:37:30 2027 GMT
Subject: CN=42733066A688A9FC399A283661920432E5DD256B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:8e:42:95:22:d5:62:e8:bf:8e:d2:88:03:
f7:1c:2a:8e:96:ae:b5:9f:48:3b:d7:7a:4e:a3:02:
af:fc:14:32:02:7a:d7:58:84:3f:a5:00:c6:33:1e:
ec:ae:e7:3b:89:65:09:96:22:a1:6f:e4:d2:2e:a2:
4e:fd:1a:d4:5b:f1:c6:44:36:79:cc:24:93:ee:be:
cb:f2:16:ae:d4:8f:8a:99:6d:ad:5d:47:70:ae:55:
d0:9e:02:40:f2:ea:12:83:96:ea:c5:c4:97:20:81:
99:9f:7e:bf:3d:d3:c1:a9:1e:1e:be:f9:48:c4:86:
66:28:6f:c4:3b:ad:bc:5d:5e:bf:1e:37:c2:90:58:
c6:55:6a:bb:73:d4:66:37:03:da:a5:02:17:3b:3f:
62:bd:57:a3:5a:40:ea:fc:14:16:f4:29:77:25:8e:
6e:bf:71:7d:ee:d0:26:04:cb:19:56:07:4f:5e:3c:
3a:a7:f6:2a:04:a0:f6:cb:9b:3c:3a:8d:2b:22:ff:
9c:03:99:55:55:59:fe:ae:0c:d5:46:86:0d:3c:57:
af:87:8a:88:23:36:77:d0:67:6c:6e:b6:cf:9a:23:
60:64:87:f1:0b:11:a8:a8:5e:6e:7f:71:d1:1e:47:
81:78:75:09:85:c8:de:ba:21:d6:32:52:69:d6:74:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:30:66:A6:88:A9:FC:39:9A:28:36:61:92:04:32:E5:DD:25:6B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.121.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2a:da:8c:a1:7e:ba:4b:7c:5c:38:fe:61:06:20:af:2f:b5:
9b:0c:bb:0a:66:0c:00:ce:c5:88:ff:1e:af:e2:d3:62:73:0a:
e0:be:db:61:87:0b:0e:f7:30:54:64:87:f4:8b:d5:2f:1e:8c:
f1:10:52:29:15:ec:d0:fa:38:e0:ec:99:9a:63:ff:eb:ef:38:
9d:73:3c:00:c1:da:5f:e3:70:85:7c:f8:a4:2e:46:23:fe:48:
ea:7f:07:55:98:d4:92:88:3f:c7:b2:51:54:fd:69:8a:16:84:
0d:58:78:09:0b:23:2b:ff:46:79:77:dc:c9:86:65:f7:74:19:
3b:4e:d9:89:dd:e1:0e:f6:2d:e7:d4:5b:00:e4:e8:92:c7:e4:
d9:d9:88:73:f2:36:a3:6a:39:52:5d:1d:60:01:26:4e:02:2d:
bc:1e:21:3e:57:8a:90:dc:d7:b2:de:d0:9a:be:8e:5b:42:ee:
44:86:41:2a:e1:d7:1c:c2:e7:94:86:d0:e6:5a:41:89:85:84:
e2:a1:5d:49:28:f8:c5:59:af:20:ac:17:97:a5:f4:60:57:7d:
be:a1:bf:ae:3a:77:e7:6b:04:83:24:35:f0:59:b7:94:ed:0d:
c2:49:97:34:0a:ec:87:4b:f0:56:f3:8c:c7:04:dc:7f:b9:64:
c5:6b:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 04:35:20 2026 by rpki-client