Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43350.roa
File: AS43350.roa (raw, json)
Hash identifier: dOdneefVxDoxeRI4F/27vIdPhPihWL3b3O0Elc/TUDU=
Subject key identifier: ED:56:2C:D4:7E:2C:C5:BE:07:66:B8:9E:A9:5A:3A:1F:AE:4E:1B:2A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2A7682495033194D025C0AFBADD1114A28EF5120
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43350.roa
Signing time: Wed 19 Aug 2026 00:04:52 +0000
ROA not before: Tue 18 Aug 2026 23:59:52 +0000
ROA not after: Wed 18 Aug 2027 00:04:52 +0000
asID: 43350
IP address blocks: 181.41.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:76:82:49:50:33:19:4d:02:5c:0a:fb:ad:d1:11:4a:28:ef:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 18 23:59:52 2026 GMT
Not After : Aug 18 00:04:52 2027 GMT
Subject: CN=ED562CD47E2CC5BE0766B89EA95A3A1FAE4E1B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:79:f6:42:62:06:40:3a:d2:34:d0:47:39:
ed:9c:0a:41:c5:fd:fb:20:be:e8:eb:0a:e6:3b:59:
42:a9:36:16:0b:fa:a2:ff:d3:41:6b:16:16:16:55:
0d:7a:67:3b:ea:7b:a4:bf:9f:52:a3:c2:98:ad:c0:
38:36:30:6d:f5:25:51:17:8f:b6:2a:c8:dd:f2:45:
48:bd:9e:e1:f2:ae:a8:44:bd:84:bc:48:e8:8c:52:
de:84:3f:2f:36:f8:8a:1b:9a:26:b1:9d:0b:26:c4:
cb:d4:ab:5c:6f:98:f7:fd:e6:f7:b9:80:9c:fc:c2:
dd:bf:f6:79:dd:ea:7d:8e:5d:b6:1e:99:da:75:e7:
1c:ad:bd:fe:37:bb:d3:71:ad:87:18:05:a9:76:f7:
71:59:07:f2:d2:02:8b:b5:04:c2:b7:97:a8:49:f9:
13:e6:72:b0:d6:5c:ad:9b:b4:dd:7f:85:77:8f:0d:
fd:04:45:2c:09:38:cb:94:53:5e:33:7a:24:0e:fd:
e7:db:35:5e:00:bc:34:ef:2c:2c:3a:bc:10:68:ae:
d2:10:b2:8a:15:0c:d2:7d:ac:1d:65:be:cb:2f:4b:
95:04:a9:c8:55:cd:7c:d7:57:c2:50:ca:70:4d:4c:
08:94:c1:63:fa:7a:7d:c1:3e:99:8b:f6:5a:9e:81:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:2C:D4:7E:2C:C5:BE:07:66:B8:9E:A9:5A:3A:1F:AE:4E:1B:2A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.194.0/24
Signature Algorithm: sha256WithRSAEncryption
27:09:82:d1:8c:1d:fc:07:de:71:fa:b9:db:17:ca:24:8a:9a:
1a:f6:37:c0:b8:05:63:29:ff:b1:99:83:61:82:a7:56:04:7d:
08:f9:e6:ff:63:36:5c:e4:1a:e2:e9:92:39:c9:55:53:cd:61:
02:a9:e7:f6:bd:37:f9:08:2a:f0:52:79:1d:1e:7a:1f:2d:67:
e5:93:03:93:bc:06:2e:2d:4e:f7:3f:ab:85:72:6b:c5:18:16:
8e:ca:5a:8d:81:83:dc:d1:c1:94:c4:1c:fa:d0:a7:2c:f0:eb:
fb:93:be:bc:e1:eb:2e:ad:d3:06:67:5e:5f:94:fa:3f:2a:1f:
fc:a4:ce:a2:00:b7:f6:11:2e:e7:2f:6c:02:42:2a:69:d8:1a:
08:bf:9d:c5:a9:c7:64:0f:e6:56:87:99:f5:8a:55:a1:b7:34:
9a:15:71:88:e5:86:63:21:0f:df:57:ad:c2:ec:06:61:ae:7d:
a7:0a:0c:c1:54:3c:f1:71:44:51:63:b3:03:52:17:7d:30:b2:
be:bf:73:ae:7c:c6:27:55:f9:03:48:fd:da:dc:ee:4b:8a:f9:
ee:23:4d:ad:d5:9b:d3:57:3f:90:f4:fd:c9:a9:2c:b4:39:9b:
7e:da:28:56:3c:9a:47:6b:57:b0:78:3e:49:44:ab:26:ec:4c:
c2:3c:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:45:22 2026 by rpki-client