Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: hRMAQOBuRga8RkMXxe2HGir9AKnqBv343RYXi4JPj20=
Subject key identifier: 6D:BB:74:8A:AF:9E:0C:99:46:2F:6A:05:45:C3:66:03:3F:F0:19:A0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1ACB21C80C7111CBE0D545275F947A0760C49F96
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
Signing time: Mon 09 Nov 2026 00:00:26 +0000
ROA not before: Sun 08 Nov 2026 23:55:26 +0000
ROA not after: Mon 08 Nov 2027 00:00:26 +0000
asID: 57043
IP address blocks: 140.150.226.0/24 maxlen: 24
140.150.238.0/24 maxlen: 24
145.223.3.0/24 maxlen: 24
146.103.25.0/24 maxlen: 24
148.135.175.0/24 maxlen: 24
148.135.184.0/24 maxlen: 24
148.135.185.0/24 maxlen: 24
148.135.202.0/24 maxlen: 24
148.135.203.0/24 maxlen: 24
148.135.208.0/24 maxlen: 24
148.135.209.0/24 maxlen: 24
148.135.211.0/24 maxlen: 24
150.241.228.0/24 maxlen: 24
150.241.239.0/24 maxlen: 24
162.141.93.0/24 maxlen: 24
162.141.123.0/24 maxlen: 24
167.148.156.0/24 maxlen: 24
167.148.170.0/24 maxlen: 24
167.148.209.0/24 maxlen: 24
167.148.223.0/24 maxlen: 24
168.222.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cb:21:c8:0c:71:11:cb:e0:d5:45:27:5f:94:7a:07:60:c4:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 8 23:55:26 2026 GMT
Not After : Nov 8 00:00:26 2027 GMT
Subject: CN=6DBB748AAF9E0C99462F6A0545C366033FF019A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:ff:fb:7f:32:ad:09:fb:41:46:ff:05:cf:
a3:6c:30:f2:d8:ef:6a:a5:ba:79:f1:4f:52:23:d9:
a1:25:49:20:08:a1:b7:16:5f:3d:dd:d0:17:bb:0e:
df:2a:19:ce:88:4e:26:78:00:df:57:b8:61:77:9f:
a2:22:19:a5:8a:0a:51:10:15:1d:9a:7e:30:56:28:
39:3e:ec:bb:7d:13:3c:82:b8:ee:ac:56:f6:da:29:
40:f8:3f:fc:a3:2f:8f:e2:e5:ae:c6:df:7b:4c:ea:
14:1e:8f:4a:8d:0c:6b:7b:68:3a:1e:9f:08:ae:80:
fc:65:81:c4:45:a8:fa:35:23:ab:1a:10:01:ba:ed:
4a:a8:34:00:96:6a:c1:72:16:34:c3:43:cd:c4:ad:
1d:2d:96:7d:7d:e3:06:3b:ea:66:78:ee:be:bf:9d:
13:9d:9b:0a:07:fc:dd:1a:b5:2c:b8:b5:c3:40:90:
4c:58:73:2e:8d:4c:d4:ae:51:9a:d1:62:9d:fd:13:
4a:f6:a7:10:dd:bb:f1:e8:01:57:be:8d:5a:0f:6d:
2d:f7:5d:f6:0b:a8:d0:0c:d5:cb:bf:01:a9:46:27:
43:12:07:67:0d:cf:75:40:44:0e:2b:f6:4f:0b:b2:
79:48:01:21:44:19:30:0b:b8:ac:c0:4d:f1:c8:bc:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BB:74:8A:AF:9E:0C:99:46:2F:6A:05:45:C3:66:03:3F:F0:19:A0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.226.0/24
140.150.238.0/24
145.223.3.0/24
146.103.25.0/24
148.135.175.0/24
148.135.184.0/23
148.135.202.0/23
148.135.208.0/23
148.135.211.0/24
150.241.228.0/24
150.241.239.0/24
162.141.93.0/24
162.141.123.0/24
167.148.156.0/24
167.148.170.0/24
167.148.209.0/24
167.148.223.0/24
168.222.78.0/24
Signature Algorithm: sha256WithRSAEncryption
16:76:24:5c:ce:1b:cf:91:de:5f:a0:2c:be:ca:e8:74:82:5a:
9c:23:c1:a4:88:18:a7:dd:65:e5:e4:df:50:0d:5b:e5:95:32:
20:d5:7f:94:17:56:ec:a3:b5:41:64:53:81:dd:e5:52:3d:6e:
1a:e8:7d:f6:d6:79:18:8a:c3:e4:c3:12:5e:6e:84:5b:39:52:
af:51:8b:c7:cc:61:e0:a9:1a:61:14:ac:3a:75:64:09:cb:25:
0a:2a:ec:e0:49:65:e6:ee:e0:7e:6f:6e:05:0e:09:73:75:85:
5f:ef:d5:5b:a1:61:d2:17:fa:b1:ea:d0:cb:61:d4:96:56:9e:
ae:16:01:24:82:5d:e9:77:2d:3d:b6:9e:9f:22:51:e0:e4:43:
9c:76:80:a7:c0:42:46:bb:99:b4:ad:3e:cd:7e:14:0e:7b:aa:
1a:c8:d5:87:35:1e:2f:c1:f6:ed:a3:5e:d5:fd:ec:40:4b:24:
6e:93:63:7d:4f:58:cf:85:6d:34:8e:ac:8d:13:c3:bd:43:08:
cc:b5:87:60:04:69:7e:29:2e:59:b5:40:d6:c4:62:e8:ca:f8:
2e:7e:b3:75:3c:5c:98:bd:da:5a:85:7b:5a:d5:b9:3a:48:cc:
74:2e:dd:7c:0c:cc:6c:b6:76:2a:aa:6c:27:b2:dd:5d:8e:90:
da:4b:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:42:54 2026 by rpki-client