Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: i/VWVd7tVdG5Tpr4uXY3EDM3SyrEBw9x+H3pY9d3q0A=
Subject key identifier: 84:5B:2A:4D:DD:36:8A:39:FB:00:31:DD:C5:CC:B3:16:6E:BA:74:1C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6868D977F01C2B0B995D04D39076653C754DDCE6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
Signing time: Tue 07 Jul 2026 17:07:52 +0000
ROA not before: Tue 07 Jul 2026 17:02:52 +0000
ROA not after: Tue 06 Jul 2027 17:07:52 +0000
asID: 57043
IP address blocks: 51.146.8.0/24 maxlen: 24
188.220.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:68:d9:77:f0:1c:2b:0b:99:5d:04:d3:90:76:65:3c:75:4d:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 7 17:02:52 2026 GMT
Not After : Jul 6 17:07:52 2027 GMT
Subject: CN=845B2A4DDD368A39FB0031DDC5CCB3166EBA741C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:6b:fe:6a:d2:e2:d1:a0:63:04:1c:41:96:
cb:0c:25:e3:f1:93:06:7c:22:19:56:36:14:7b:07:
af:23:e9:57:eb:36:7c:28:45:71:62:eb:5d:30:fc:
54:ce:36:79:2a:07:4f:6d:9e:fa:02:dd:68:8a:33:
a3:c1:fa:6a:f1:5d:d7:77:44:1b:3c:cb:eb:fb:f6:
ea:50:d7:b4:c0:6d:eb:e1:af:b5:a4:36:9d:56:61:
fc:c7:b0:94:99:42:d5:d0:38:75:02:67:7b:0a:a1:
1b:09:8e:56:35:3c:54:44:f1:b3:eb:62:c3:16:e4:
12:b7:2c:e4:a6:40:fd:00:17:e4:fc:79:f5:33:4c:
8c:fa:b9:32:40:c3:ca:65:0e:d0:fe:c0:d1:f3:43:
09:69:22:d1:61:25:b2:42:b3:41:b0:19:97:f5:dc:
74:db:0e:0f:23:94:4e:bc:b5:dd:37:3b:d2:34:1b:
2d:cc:01:36:4e:bb:0a:db:a5:03:d0:cc:f6:e9:00:
49:6d:48:94:61:0c:50:cf:18:ac:f1:27:43:9f:a4:
88:59:7a:f9:37:39:00:92:c4:bc:b9:1f:d6:08:aa:
73:af:57:85:6c:35:55:92:40:45:7d:ce:8a:7b:b3:
11:51:a3:7b:24:5e:6b:59:2e:e9:a4:4d:09:5b:27:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5B:2A:4D:DD:36:8A:39:FB:00:31:DD:C5:CC:B3:16:6E:BA:74:1C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.8.0/24
188.220.224.0/23
Signature Algorithm: sha256WithRSAEncryption
48:b8:ee:37:03:f4:a0:54:8e:17:24:b1:b0:25:3c:98:c5:c3:
ce:16:b2:46:a4:a1:68:0e:5d:59:76:2a:75:12:36:64:b7:22:
72:a0:e2:66:47:90:a6:98:fe:d5:61:0b:18:59:36:b7:71:30:
75:06:af:f5:ef:27:30:0f:da:58:79:4b:34:62:9b:c6:4d:b5:
25:e3:b2:74:0b:44:7d:ed:f5:cb:3a:8b:40:34:55:c7:c6:ab:
95:1d:4b:a0:2a:c8:8a:cd:24:70:4a:16:2c:e7:f3:0b:55:40:
7c:5d:47:93:6e:1c:b8:8a:40:75:f8:58:42:9f:3f:e9:fe:50:
f6:3b:81:43:1d:a6:d6:12:39:1b:5c:19:dc:b8:f9:53:b0:f5:
4f:1b:91:b5:2a:79:c0:2e:f1:32:a0:54:0b:4f:cd:9c:c4:90:
c2:30:e7:0b:bd:14:eb:50:56:96:17:c5:23:7d:9d:de:d1:af:
a4:6e:6c:48:30:d9:93:17:bf:4b:f7:f2:d7:02:6d:d6:6c:cb:
5d:a2:5f:57:04:6c:c2:e5:f1:37:d3:fe:95:26:5d:71:ea:ef:
fe:0a:14:55:5d:35:a0:89:13:5e:3a:25:cc:22:b9:3a:38:79:
5c:40:97:21:29:1f:f1:f0:b4:e1:d5:95:94:5f:ec:2c:b1:78:
ed:37:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:28 2026 by rpki-client