Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
File:                     AS43094.roa (raw, json)
Hash identifier:          sjTmyD3SouupYptcDpZKRFWWq/qpTK5BH42t+Ta4VXc=
Subject key identifier:   20:0D:3D:36:F1:CB:F7:65:09:F6:82:FD:28:8B:DD:2F:51:4C:AC:A6
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       516A833E3B0017F72B52E5E456CB332D1A9D9EC8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
Signing time:             Wed 10 Jun 2026 09:51:30 +0000
ROA not before:           Wed 10 Jun 2026 09:46:30 +0000
ROA not after:            Wed 09 Jun 2027 09:51:30 +0000
asID:                     43094
IP address blocks:        92.113.43.0/24 maxlen: 24
                          178.92.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6a:83:3e:3b:00:17:f7:2b:52:e5:e4:56:cb:33:2d:1a:9d:9e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun 10 09:46:30 2026 GMT
            Not After : Jun  9 09:51:30 2027 GMT
        Subject: CN=200D3D36F1CBF76509F682FD288BDD2F514CACA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:9f:b7:b9:ca:bd:84:22:9c:a5:25:56:73:
                    f3:1a:18:5f:60:87:70:60:b2:00:87:5e:8f:48:0a:
                    f7:3c:ae:15:6a:49:c8:90:71:d4:59:19:ee:fb:ce:
                    4c:2d:31:f6:72:38:37:2c:9b:fa:f5:e5:b6:64:8a:
                    89:48:c6:b8:f7:6a:d6:9b:51:be:7f:e1:43:93:bb:
                    db:85:bc:e4:bb:9a:11:95:9a:1e:ed:a5:f5:a2:cf:
                    32:61:9e:93:76:45:27:ed:39:13:0a:58:dd:36:4a:
                    3a:cb:ac:9b:c2:4d:ae:ce:0d:36:53:5b:48:16:43:
                    4c:48:67:e2:47:a0:e8:57:12:c0:27:ee:e0:38:c5:
                    09:5d:2d:f6:a4:a5:07:60:8e:6a:1b:67:bc:4b:49:
                    c2:95:a6:19:8a:80:94:41:33:b7:7e:8c:ae:0f:83:
                    a4:61:0b:be:80:e8:45:d4:83:d4:3f:c5:7d:12:7c:
                    34:b5:4b:df:c2:71:17:2a:9e:84:1b:bc:5b:3a:dc:
                    a9:47:d3:76:b3:59:6d:4e:0f:c8:ac:6c:01:08:ed:
                    52:fe:0d:97:9e:37:7e:c2:d5:d3:76:44:8b:60:3c:
                    ad:48:84:cd:06:3a:4f:26:c4:1e:74:17:11:11:c7:
                    7b:8f:ad:9b:77:ba:a0:50:52:bd:7a:3e:cc:c1:9b:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:3D:36:F1:CB:F7:65:09:F6:82:FD:28:8B:DD:2F:51:4C:AC:A6
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.43.0/24
                  178.92.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:4a:f9:76:90:11:ff:fb:65:94:27:69:6a:98:c0:35:65:
         39:f9:0c:3a:e3:18:31:5b:e1:de:71:85:0a:9a:7e:dd:4b:e2:
         9a:d9:9a:2a:02:30:92:43:e9:4f:2d:f9:53:38:42:48:0b:2b:
         ec:d7:56:18:2e:fa:9e:cc:d3:22:38:cd:6d:2d:82:bc:79:16:
         a6:02:98:f9:55:58:91:11:8e:06:c3:d6:9f:ba:d7:58:60:43:
         96:5d:ce:68:c4:5f:46:ab:3d:4e:aa:2d:86:a3:16:c0:f9:07:
         ce:ef:58:3a:08:b5:b0:ce:e0:57:16:b5:be:ae:33:9e:e0:48:
         ff:ba:93:f6:01:21:cd:3d:df:02:e6:56:d8:44:f4:e9:84:76:
         c3:75:78:11:b5:c8:15:0b:5e:05:83:cc:d6:38:ba:84:80:ec:
         50:c3:ac:2f:e2:84:d1:7b:c4:d7:19:62:99:e9:85:5f:63:11:
         a6:c3:b0:d1:23:f2:a0:0c:df:a5:a6:be:6b:32:86:fe:2a:d6:
         5c:14:58:87:74:a2:b5:55:3e:f0:72:dd:dc:fd:a1:8b:e0:32:
         19:a8:06:e2:76:be:ec:11:80:fd:cd:b9:ef:8f:01:d6:dc:79:
         28:74:92:cd:6b:0e:3b:53:bc:13:67:ec:fa:45:14:e4:fd:bc:
         67:66:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:02 2026 by rpki-client