Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: KC/MYala69TgqkAkp8r0IfhFNL7P+qDkPxFLcuYxAkc=
Subject key identifier: 30:FD:08:FE:AD:67:2E:A1:7A:2E:49:DC:86:55:2B:9C:A2:6D:69:EC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4818D076D23994FCBFD1CC203EC572BB1FC073BB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
Signing time: Thu 07 Aug 2025 07:04:50 +0000
ROA not before: Thu 07 Aug 2025 06:59:50 +0000
ROA not after: Thu 06 Aug 2026 07:04:50 +0000
asID: 57043
IP address blocks: 82.25.20.0/24 maxlen: 24
82.25.44.0/24 maxlen: 24
82.25.56.0/24 maxlen: 24
82.25.57.0/24 maxlen: 24
82.25.58.0/24 maxlen: 24
82.25.63.0/24 maxlen: 24
82.25.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:18:d0:76:d2:39:94:fc:bf:d1:cc:20:3e:c5:72:bb:1f:c0:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 06:59:50 2025 GMT
Not After : Aug 6 07:04:50 2026 GMT
Subject: CN=30FD08FEAD672EA17A2E49DC86552B9CA26D69EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cf:2f:b5:07:21:d5:81:53:77:cd:a3:41:2e:
b9:a7:31:8f:21:27:6a:b7:30:aa:bf:36:18:32:8d:
a6:9c:c7:eb:bd:49:cb:4e:ba:c2:29:2a:11:8e:b6:
91:00:d9:a7:f4:e6:c6:77:56:1f:3c:eb:25:f7:70:
88:2c:54:52:33:80:14:09:3c:0f:59:27:60:de:3c:
0b:5b:45:e2:42:fe:db:c1:e6:89:78:50:d1:4b:51:
c5:b2:45:42:71:56:31:0b:82:05:10:62:45:e0:db:
c5:fa:4f:97:29:7b:44:4a:0f:d4:35:08:ea:b4:49:
9e:78:bc:52:aa:0f:25:f9:a1:af:52:4d:13:65:4a:
51:7f:6c:ef:16:81:3a:69:2f:e9:2d:fb:94:6e:12:
b3:37:a6:26:00:77:5e:5d:fb:e7:52:0d:05:b6:2c:
09:c6:5d:47:f6:6c:3e:93:01:1e:aa:00:cc:82:2a:
6b:96:d6:2d:91:7e:75:63:5d:66:56:b8:d7:10:9f:
92:f6:cc:60:e6:f6:dc:86:b9:f7:f5:d1:ce:89:16:
1f:81:50:90:35:73:4d:24:66:49:59:39:b5:1c:49:
4d:19:dd:08:93:ae:a0:2c:cc:6e:fc:50:42:a5:6d:
8f:aa:89:4e:90:ee:a9:48:b7:0b:ec:5e:72:cc:5a:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:08:FE:AD:67:2E:A1:7A:2E:49:DC:86:55:2B:9C:A2:6D:69:EC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.20.0/24
82.25.44.0/24
82.25.56.0-82.25.58.255
82.25.63.0/24
82.25.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:42:b1:82:b4:f2:f5:a2:95:dc:7d:2e:33:54:9f:c7:1c:31:
0d:70:ae:d6:47:cb:9e:54:de:e0:50:f7:b5:2a:05:e0:2a:5a:
84:ca:d1:54:c8:e8:b7:61:d7:51:96:43:a0:ad:1f:0e:5b:4f:
83:3f:38:0d:5e:b8:cc:ae:ce:f9:67:d2:b8:e6:d2:cc:34:8d:
2e:45:bd:32:62:d6:4f:14:ab:5a:0c:ca:c1:43:b1:e2:80:11:
5b:27:57:30:a6:f1:65:1d:c4:76:01:3c:02:d5:57:cd:14:eb:
d0:90:38:b1:78:10:dd:06:76:6f:c6:45:41:82:e1:84:b8:a3:
f8:72:6d:9b:7c:84:7a:66:40:82:ef:2b:30:d8:34:e4:68:a2:
d5:5c:73:61:5c:c4:da:65:e8:22:b4:5a:3d:04:6a:26:ab:b2:
85:10:5f:a7:a1:c6:ea:64:61:05:12:ab:68:70:f2:86:57:97:
cb:ed:7c:a1:8b:f0:85:be:b6:97:26:f6:c2:87:20:58:cb:60:
51:49:a0:ac:62:9c:b0:30:ae:b2:d8:e6:73:ea:46:7b:56:52:
3f:3e:3f:09:e7:8f:ed:55:81:69:39:cb:b0:46:20:ac:de:95:
1e:b4:ae:54:22:91:8f:40:04:22:01:eb:39:5e:2f:99:30:6e:
6b:3a:ca:ab
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUSBjQdtI5lPy/0cwgPsVyux/Ac7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA4MDcwNjU5NTBaFw0yNjA4MDYwNzA0NTBaMDMxMTAvBgNV
BAMTKDMwRkQwOEZFQUQ2NzJFQTE3QTJFNDlEQzg2NTUyQjlDQTI2RDY5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwzy+1ByHVgVN3zaNBLrmnMY8h
J2q3MKq/Nhgyjaacx+u9SctOusIpKhGOtpEA2af05sZ3Vh886yX3cIgsVFIzgBQJ
PA9ZJ2DePAtbReJC/tvB5ol4UNFLUcWyRUJxVjELggUQYkXg28X6T5cpe0RKD9Q1
COq0SZ54vFKqDyX5oa9STRNlSlF/bO8WgTppL+kt+5RuErM3piYAd15d++dSDQW2
LAnGXUf2bD6TAR6qAMyCKmuW1i2RfnVjXWZWuNcQn5L2zGDm9tyGuff10c6JFh+B
UJA1c00kZklZObUcSU0Z3QiTrqAszG78UEKlbY+qiU6Q7qlItwvsXnLMWtEBAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUMP0I/q1nLqF6LknchlUrnKJtaewwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTcwNDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMCwEAgABMCYDBABSGRQD
BABSGSwwDAMEA1IZOAMEAFIZOgMEAFIZPwMEAFIZjjANBgkqhkiG9w0BAQsFAAOC
AQEAjUKxgrTy9aKV3H0uM1SfxxwxDXCu1kfLnlTe4FD3tSoF4CpahMrRVMjot2HX
UZZDoK0fDltPgz84DV64zK7O+WfSuObSzDSNLkW9MmLWTxSrWgzKwUOx4oARWydX
MKbxZR3EdgE8AtVXzRTr0JA4sXgQ3QZ2b8ZFQYLhhLij+HJtm3yEemZAgu8rMNg0
5Gii1VxzYVzE2mXoIrRaPQRqJquyhRBfp6HG6mRhBRKraHDyhleXy+18oYvwhb62
lyb2wocgWMtgUUmgrGKcsDCustjmc+pGe1ZSPz4/CeeP7VWBaTnLsEYgrN6VHrSu
VCKRj0AEIgHrOV4vmTBuazrKqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:08:01 2025 by rpki-client