Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: kEbV7w7T+3SG1KdHhju9G+hiWnAkBrMQEegckV3wZEI=
Subject key identifier: 0D:D1:8D:CC:5F:73:20:3F:FE:00:43:17:93:E8:3C:C5:D6:70:EA:0A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 57A48D1A000CDD7F7B26670A9D4B5BBBABA73ED9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57043.roa
Signing time: Sat 29 Aug 2026 10:41:29 +0000
ROA not before: Sat 29 Aug 2026 10:36:29 +0000
ROA not after: Sat 28 Aug 2027 10:41:29 +0000
asID: 57043
IP address blocks: 91.124.121.0/24 maxlen: 24
178.95.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 17:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a4:8d:1a:00:0c:dd:7f:7b:26:67:0a:9d:4b:5b:bb:ab:a7:3e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 29 10:36:29 2026 GMT
Not After : Aug 28 10:41:29 2027 GMT
Subject: CN=0DD18DCC5F73203FFE00431793E83CC5D670EA0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:d2:07:d5:48:17:f9:2a:d7:91:23:2a:0b:
43:1f:b1:a4:7d:78:e2:3f:fa:6c:46:1a:3c:75:b2:
cd:1f:21:aa:2b:11:48:cb:24:93:ef:2c:a5:62:77:
5f:6e:63:77:b2:7c:f9:68:5e:e4:1b:9c:fb:e5:1a:
22:9a:e6:76:b0:b6:f8:1d:ce:ea:fc:49:cb:28:1a:
2e:76:e7:d9:a3:b4:f7:44:cc:5f:f1:ab:12:9f:00:
b6:dc:f6:65:be:03:a5:3b:65:a5:5b:5b:9e:90:59:
c5:ec:68:bc:98:a4:86:ca:d1:16:8c:06:91:95:cc:
88:4e:fa:56:49:4e:45:38:c1:d5:c1:52:d3:ac:6b:
49:bf:72:d4:56:f2:a3:05:08:d8:8c:a3:e9:89:77:
06:ba:c9:d7:e2:45:f5:3d:92:9a:5c:bc:37:e2:9a:
c6:31:0f:01:75:2b:66:b8:84:e9:55:16:77:a8:33:
a2:67:21:37:e9:ee:49:61:e4:76:f7:6c:72:b0:10:
81:b0:60:39:94:6d:e1:81:54:0d:bd:57:8b:35:aa:
87:1a:73:cf:7e:a1:0a:90:d6:5a:f7:15:29:44:56:
50:8d:5a:e6:c7:07:a4:d1:6d:32:8b:63:b6:88:b4:
3b:f8:5f:61:40:f7:e3:44:42:5f:b1:c9:1f:64:ef:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:8D:CC:5F:73:20:3F:FE:00:43:17:93:E8:3C:C5:D6:70:EA:0A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.121.0/24
178.95.160.0/24
Signature Algorithm: sha256WithRSAEncryption
42:aa:61:13:44:ba:4c:30:7b:d4:2d:a8:cf:c1:6b:c8:45:e6:
6f:2d:55:38:a0:11:76:52:09:9c:6e:66:2a:bd:c7:ed:c1:11:
78:a9:43:31:94:93:9b:ce:58:c6:37:17:ab:1a:7e:c4:5c:92:
95:c4:de:67:57:cf:0e:d6:d8:f6:7a:3b:3d:3c:3c:4c:eb:e1:
cc:d2:cf:15:0d:91:98:35:63:ce:a3:ab:c6:38:7b:da:5e:69:
71:7e:0f:d3:a3:92:ae:20:46:bd:9d:29:8c:1f:11:e9:20:c2:
60:0c:07:25:21:52:0c:f3:df:b2:f8:8e:80:62:d1:e1:f5:e3:
d1:29:c3:22:99:19:5e:a3:5d:05:2e:59:3a:e9:6e:c2:02:e1:
ce:96:5b:c0:a2:d4:3d:02:fa:e5:1e:b4:36:c3:ac:9d:0c:59:
70:40:4c:36:c7:1e:83:7b:2e:b9:6a:ee:34:08:a7:32:57:57:
34:f9:fc:7b:9b:8f:45:78:b3:c3:5f:67:b7:ae:9b:11:ee:bf:
a3:dd:fb:6f:ee:63:2a:ef:1a:80:93:39:59:63:8d:7b:b8:bc:
bb:a4:27:99:bc:15:ca:f7:05:97:30:9a:b1:84:6a:58:af:c2:
4a:41:06:19:80:1a:39:62:e7:64:90:89:66:64:08:fe:42:ec:
17:85:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:21:46 2026 by rpki-client