Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: XlSZXbgdz7LdAGB3TXDFpOz+EI+9afDMJ/uG3CZe/+Q=
Subject key identifier: 83:B1:FE:28:62:68:26:AF:1C:AE:43:3D:A5:42:DF:43:C8:15:44:5D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 154F8AA85026B079CC9405405AF881397B95E52A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
Signing time: Mon 13 Jul 2026 11:05:33 +0000
ROA not before: Mon 13 Jul 2026 11:00:33 +0000
ROA not after: Mon 12 Jul 2027 11:05:33 +0000
asID: 57043
IP address blocks: 140.150.226.0/24 maxlen: 24
140.150.238.0/24 maxlen: 24
145.223.3.0/24 maxlen: 24
146.103.25.0/24 maxlen: 24
148.135.175.0/24 maxlen: 24
148.135.184.0/24 maxlen: 24
148.135.185.0/24 maxlen: 24
148.135.202.0/24 maxlen: 24
148.135.203.0/24 maxlen: 24
148.135.208.0/24 maxlen: 24
148.135.209.0/24 maxlen: 24
148.135.211.0/24 maxlen: 24
150.241.228.0/24 maxlen: 24
150.241.239.0/24 maxlen: 24
162.141.93.0/24 maxlen: 24
162.141.123.0/24 maxlen: 24
167.148.156.0/24 maxlen: 24
167.148.170.0/24 maxlen: 24
167.148.209.0/24 maxlen: 24
167.148.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4f:8a:a8:50:26:b0:79:cc:94:05:40:5a:f8:81:39:7b:95:e5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 11:00:33 2026 GMT
Not After : Jul 12 11:05:33 2027 GMT
Subject: CN=83B1FE28626826AF1CAE433DA542DF43C815445D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:6a:a0:58:c2:5c:b0:fb:b8:cd:7e:d7:c4:
24:58:a7:61:45:09:3c:04:cb:6b:7f:0e:14:ef:5b:
5c:cf:d4:a3:c2:63:ba:db:1c:a4:ed:b0:78:76:cd:
8e:59:0d:10:e9:a9:44:92:62:95:63:32:3f:cb:2c:
62:17:32:2c:c1:73:44:22:8d:f5:18:21:e0:85:f5:
43:77:22:d8:55:aa:c5:51:05:54:f8:68:64:af:64:
c8:dc:a3:07:74:30:5b:a8:72:3e:4a:3a:8c:53:bc:
dd:0a:82:43:0c:e4:ad:82:76:c4:dd:3b:01:c4:05:
38:3e:ec:b9:73:d9:74:b9:18:18:af:e1:11:fc:e6:
ec:1d:6f:a7:6b:39:13:5c:b9:d2:4b:32:58:64:8b:
3b:84:7a:f6:49:2e:aa:08:6f:4e:f3:d7:50:99:be:
52:82:40:c2:2a:be:ab:51:4c:d2:b9:72:16:a9:da:
6b:ef:3b:d0:1f:0d:05:b7:7d:28:b1:f4:75:44:b0:
45:72:c5:2b:4b:d3:7e:41:e8:4d:3c:63:65:35:27:
6e:b5:5d:53:d2:e6:b5:be:97:71:19:da:44:f0:c1:
6c:d9:84:c3:03:66:25:8c:53:42:cb:7e:82:cb:ea:
c3:74:a0:78:a1:47:c6:ab:f8:7a:11:ba:23:68:3e:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:FE:28:62:68:26:AF:1C:AE:43:3D:A5:42:DF:43:C8:15:44:5D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.226.0/24
140.150.238.0/24
145.223.3.0/24
146.103.25.0/24
148.135.175.0/24
148.135.184.0/23
148.135.202.0/23
148.135.208.0/23
148.135.211.0/24
150.241.228.0/24
150.241.239.0/24
162.141.93.0/24
162.141.123.0/24
167.148.156.0/24
167.148.170.0/24
167.148.209.0/24
167.148.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:37:29:74:76:93:60:41:47:f8:a4:83:9d:fe:09:45:b2:fc:
95:3d:e4:f6:6e:34:4e:e6:2a:cf:a3:94:f4:8b:73:2d:bb:4e:
e3:92:01:96:0c:66:eb:56:7c:a2:e2:20:42:df:f4:6d:6e:da:
bc:ff:13:6e:ae:97:ba:0e:d4:1f:30:98:42:fa:b4:b3:28:02:
e3:c0:67:05:de:dc:ad:93:1e:58:b7:f4:d9:e5:2d:79:21:27:
8b:2e:3b:81:cc:1d:fc:97:81:41:ea:22:86:3b:74:0a:e5:d2:
bb:3c:45:34:c2:73:cc:eb:ee:6e:49:98:44:17:45:c5:82:d6:
eb:d3:bc:3b:5d:ec:ba:72:d2:c2:05:27:89:6d:74:81:72:ae:
64:2c:ad:65:d1:fa:1a:a8:54:13:6f:01:1f:a7:d9:00:b9:3e:
be:e5:d2:2a:3e:50:2b:a8:89:d6:49:43:43:35:3a:a9:93:da:
7b:77:a8:05:0b:2a:27:9a:d7:ae:a3:4a:8e:7b:30:ec:16:a5:
4e:33:33:f1:3b:15:ad:48:1e:fe:8a:c6:27:7f:5c:08:57:6b:
6a:cf:1c:95:0b:34:2b:49:ce:ad:2d:a5:7a:43:4d:16:8a:4e:
d4:86:14:51:58:84:db:dc:33:38:5f:44:75:0b:ae:52:8a:de:
25:f6:78:74
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUFU+KqFAmsHnMlAVAWviBOXuV5SowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTMxMTAwMzNaFw0yNzA3MTIxMTA1MzNaMDMxMTAvBgNV
BAMTKDgzQjFGRTI4NjI2ODI2QUYxQ0FFNDMzREE1NDJERjQzQzgxNTQ0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEWqgWMJcsPu4zX7XxCRYp2FF
CTwEy2t/DhTvW1zP1KPCY7rbHKTtsHh2zY5ZDRDpqUSSYpVjMj/LLGIXMizBc0Qi
jfUYIeCF9UN3IthVqsVRBVT4aGSvZMjcowd0MFuocj5KOoxTvN0KgkMM5K2CdsTd
OwHEBTg+7Llz2XS5GBiv4RH85uwdb6drORNcudJLMlhkizuEevZJLqoIb07z11CZ
vlKCQMIqvqtRTNK5chap2mvvO9AfDQW3fSix9HVEsEVyxStL035B6E08Y2U1J261
XVPS5rW+l3EZ2kTwwWzZhMMDZiWMU0LLfoLL6sN0oHihR8ar+HoRuiNoPu6JAgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUg7H+KGJoJq8crkM9pULfQ8gVRF0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTcwNDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwfwYIKwYBBQUHAQcBAf8EcDBuMGwEAgABMGYDBACMluID
BACMlu4DBACR3wMDBACSZxkDBACUh68DBAGUh7gDBAGUh8oDBAGUh9ADBACUh9MD
BACW8eQDBACW8e8DBACijV0DBACijXsDBACnlJwDBACnlKoDBACnlNEDBACnlN8w
DQYJKoZIhvcNAQELBQADggEBAD43KXR2k2BBR/ikg53+CUWy/JU95PZuNE7mKs+j
lPSLcy27TuOSAZYMZutWfKLiIELf9G1u2rz/E26ul7oO1B8wmEL6tLMoAuPAZwXe
3K2THli39NnlLXkhJ4suO4HMHfyXgUHqIoY7dArl0rs8RTTCc8zr7m5JmEQXRcWC
1uvTvDtd7Lpy0sIFJ4ltdIFyrmQsrWXR+hqoVBNvAR+n2QC5Pr7l0io+UCuoidZJ
Q0M1OqmT2nt3qAULKiea166jSo57MOwWpU4zM/E7Fa1IHv6Kxid/XAhXa2rPHJUL
NCtJzq0tpXpDTRaKTtSGFFFYhNvcMzhfRHULrlKK3iX2eHQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:28:54 2026 by rpki-client