Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
File: AS43094.roa (raw, json)
Hash identifier: 5mPG46UpHcTaSciNdGehCW5NBAgH/cG22SlG+1M3MWY=
Subject key identifier: 81:3E:B8:E7:46:C9:34:40:ED:3D:E8:39:C3:F6:21:F8:53:F0:FA:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 203221BBDD9E18E16BD0A03D0F53B6B5784D1451
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
Signing time: Fri 25 Sep 2026 12:26:00 +0000
ROA not before: Fri 25 Sep 2026 12:21:00 +0000
ROA not after: Fri 24 Sep 2027 12:26:00 +0000
asID: 43094
IP address blocks: 95.134.116.0/24 maxlen: 24
95.135.161.0/24 maxlen: 24
178.92.73.0/24 maxlen: 24
178.92.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:32:21:bb:dd:9e:18:e1:6b:d0:a0:3d:0f:53:b6:b5:78:4d:14:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 25 12:21:00 2026 GMT
Not After : Sep 24 12:26:00 2027 GMT
Subject: CN=813EB8E746C93440ED3DE839C3F621F853F0FA85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:c3:81:82:f1:f7:0a:1f:fb:83:4a:23:83:
03:f2:54:20:36:54:4d:32:4a:51:db:21:d9:15:29:
15:63:e5:0d:a7:1c:9e:ca:e3:7b:20:55:86:18:e6:
85:f3:a3:4f:20:bd:0d:ee:ed:1e:67:46:6d:5d:95:
39:c0:b4:18:0d:88:6c:e3:c8:1c:cb:59:99:f7:a6:
29:3b:ea:1c:b4:45:bf:08:cd:d6:8e:df:a6:f1:89:
57:f9:63:b9:66:ed:3e:69:1d:46:6a:cb:50:39:21:
39:f9:bc:95:38:03:f1:17:dd:11:a0:6d:15:ac:04:
ec:4f:a8:a5:ec:91:4a:59:6f:a2:54:f0:99:5e:9d:
00:91:5e:a4:51:59:74:49:2b:b3:9e:01:60:43:7b:
36:3e:dc:2c:8b:6a:39:a7:21:76:d7:5b:e9:38:74:
e9:93:4d:08:ab:f1:a2:c8:b1:c7:e8:76:2d:37:ac:
92:f6:ef:fe:0c:1e:c5:61:2b:ab:cf:c4:ef:12:72:
8a:b7:90:4a:5b:62:f9:59:04:c7:e1:e7:ad:ec:e2:
bc:00:2c:4f:ec:ec:55:aa:6e:35:06:38:4e:4f:70:
2d:43:6a:96:87:da:7e:ac:e8:50:7c:2f:6c:c8:bf:
31:87:17:32:5a:32:ab:69:b9:4d:d8:5c:4d:b3:5b:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:B8:E7:46:C9:34:40:ED:3D:E8:39:C3:F6:21:F8:53:F0:FA:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.116.0/24
95.135.161.0/24
178.92.73.0/24
178.92.123.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8d:df:9f:8c:ea:73:4c:99:94:46:10:ed:4a:87:7a:8a:45:
db:62:80:0b:af:96:9a:6f:2c:c9:71:47:a4:46:72:cd:c5:27:
b2:79:6a:af:1f:2d:f7:ff:4e:87:de:9f:70:e5:e6:a5:b7:40:
55:3b:a4:da:b4:e6:20:99:c9:0b:c5:3f:1d:e1:32:d4:f1:25:
1e:2c:60:db:f6:c5:89:eb:90:77:cb:43:54:fc:9f:97:33:6b:
b6:41:44:15:0f:dc:27:08:32:09:24:de:93:a4:47:e7:7b:d4:
29:2d:a2:23:83:f1:7a:8c:e3:99:23:42:8f:0d:40:39:29:79:
a7:0c:36:67:e4:1c:1c:2c:1c:48:c3:66:21:93:aa:f0:67:45:
62:e3:de:83:18:82:41:c8:82:de:86:f8:74:15:e9:35:8b:03:
70:0c:05:f4:4d:2c:6c:d9:97:53:b4:7d:e5:1f:f9:f7:5d:a2:
90:88:96:f6:22:41:67:0a:c6:8a:ff:fc:7b:ee:e8:6f:47:36:
8f:38:56:c5:ac:cc:5b:45:4c:10:fe:f2:93:e9:5a:a7:58:ca:
c4:01:ed:d8:92:b4:b4:71:4e:eb:95:4e:17:3a:9a:c8:76:4e:
12:b2:61:c8:0e:6b:3f:bc:f1:2d:8c:39:2f:44:82:1e:70:16:
58:17:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:41:29 2026 by rpki-client