Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43969.roa
File: AS43969.roa (raw, json)
Hash identifier: juXhmVCbACioy8iN9fJ0I68b7eISAyZYk05vv2weexo=
Subject key identifier: E6:C9:F6:D4:96:27:62:20:03:53:8B:FE:DE:06:D7:A4:DA:D6:B5:39
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1ECA7C3B485311AE5053A874618F81229853BCB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43969.roa
Signing time: Fri 09 Oct 2026 18:58:56 +0000
ROA not before: Fri 09 Oct 2026 18:53:56 +0000
ROA not after: Fri 08 Oct 2027 18:58:56 +0000
asID: 43969
IP address blocks: 82.24.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ca:7c:3b:48:53:11:ae:50:53:a8:74:61:8f:81:22:98:53:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 18:53:56 2026 GMT
Not After : Oct 8 18:58:56 2027 GMT
Subject: CN=E6C9F6D49627622003538BFEDE06D7A4DAD6B539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:f3:6d:ba:88:c6:06:36:bc:fa:d1:b8:7a:
ee:8f:62:02:2c:bb:ba:6b:a3:1a:d8:dc:69:2f:7b:
3c:71:12:33:9e:ad:03:bb:61:b0:eb:29:5a:54:a6:
3a:3c:7d:53:ce:3d:c5:cf:61:cf:1c:9e:d7:61:d2:
00:a8:da:a4:0f:e6:89:f8:b3:85:bc:65:c6:0a:17:
d9:65:88:11:be:26:99:de:da:81:fc:a5:72:1d:fd:
ef:00:3b:0c:a8:e1:fd:c5:8f:4d:4f:c4:86:19:bb:
14:b2:e1:b8:a3:4b:90:c6:a0:5f:cd:ec:d3:c4:b5:
70:08:36:b7:78:97:f8:78:02:0d:31:b3:40:10:9e:
80:20:85:2f:31:1b:36:bf:40:a6:2c:60:40:22:e8:
52:f9:bf:28:85:a2:d9:34:8e:8f:cb:d0:2f:d4:0c:
66:0f:c3:34:1d:84:ff:4e:ba:c7:d8:69:d0:80:9f:
93:08:19:0c:14:03:48:4c:08:a5:8f:6b:1f:2a:49:
89:a8:24:20:ad:29:6a:02:10:80:ae:dd:69:ba:e4:
ac:ca:84:37:d0:99:80:41:43:49:a5:e6:fe:ce:39:
5f:6f:bd:48:bf:85:8d:6e:cf:38:65:41:a9:7f:7c:
f7:ea:61:33:83:25:43:dc:82:68:70:63:ea:8b:80:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:F6:D4:96:27:62:20:03:53:8B:FE:DE:06:D7:A4:DA:D6:B5:39
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.57.0/24
Signature Algorithm: sha256WithRSAEncryption
65:42:d6:14:7b:10:07:ae:24:bb:58:5f:07:a9:61:1d:68:38:
d1:63:7d:4b:4d:32:84:af:56:c5:90:bc:79:ba:78:25:23:0d:
43:60:94:36:a5:2e:a9:a6:e7:46:e2:bb:0f:88:47:75:d3:16:
f4:9a:79:d1:78:e1:89:bd:54:b7:46:67:74:b6:2e:1e:27:86:
6e:b0:cf:22:5f:17:26:93:3f:bd:ca:3f:5d:a1:12:c8:01:93:
80:8d:41:e9:c5:b4:d8:af:60:b9:61:cc:d8:11:33:85:8e:96:
4a:21:26:10:c9:2b:06:cf:f7:1e:b8:9a:85:19:58:da:ea:e5:
07:14:40:54:0c:f9:82:9f:c9:ee:36:e9:f0:a0:79:b8:e4:2f:
83:d9:85:5e:21:9c:e1:d9:ef:25:b5:7c:7f:9a:e0:16:a4:5e:
7c:f6:80:18:03:e0:bd:cd:3f:81:77:f7:14:1d:43:86:5f:66:
b4:e8:d0:11:6c:fd:3b:dd:d9:21:6d:6b:e7:82:b5:b0:7f:da:
3b:d2:00:28:f6:f9:e6:03:c2:93:ff:2e:b2:a3:2e:2f:37:8d:
cc:be:a7:00:d0:55:20:6c:1a:cb:d8:90:c0:c3:8c:7e:54:af:
20:7d:2c:29:40:b6:19:d3:e2:06:a4:36:7b:0d:08:69:5e:f4:
03:7b:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:01:47 2026 by rpki-client