Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43641.roa
File: AS43641.roa (raw, json)
Hash identifier: 2w0RJanufg2/isaxaLN0cBigv+JdfkTeRhu0OpJ33yQ=
Subject key identifier: 86:1A:0F:3A:A1:03:85:AE:0C:97:13:13:C3:64:D4:B2:1C:DB:2E:44
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 126492B27B76514BBF537989A2EE49D8DB0013C0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43641.roa
Signing time: Tue 15 Jul 2025 00:02:03 +0000
ROA not before: Mon 14 Jul 2025 23:57:03 +0000
ROA not after: Tue 14 Jul 2026 00:02:03 +0000
asID: 43641
IP address blocks: 46.202.57.0/24 maxlen: 24
46.202.59.0/24 maxlen: 24
46.202.60.0/24 maxlen: 24
46.202.63.0/24 maxlen: 24
46.202.64.0/24 maxlen: 24
46.202.67.0/24 maxlen: 24
46.202.68.0/24 maxlen: 24
46.202.71.0/24 maxlen: 24
46.202.74.0/24 maxlen: 24
46.202.77.0/24 maxlen: 24
46.202.78.0/24 maxlen: 24
46.202.227.0/24 maxlen: 24
46.202.248.0/24 maxlen: 24
91.124.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:64:92:b2:7b:76:51:4b:bf:53:79:89:a2:ee:49:d8:db:00:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 14 23:57:03 2025 GMT
Not After : Jul 14 00:02:03 2026 GMT
Subject: CN=861A0F3AA10385AE0C971313C364D4B21CDB2E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:86:35:8b:33:04:c1:46:20:34:77:aa:84:
b6:d6:bc:66:a6:c0:f3:9b:4d:ae:d5:6e:e4:36:e3:
c2:80:c1:40:05:98:c3:d0:8c:2c:09:fe:e8:f7:63:
57:45:63:2c:99:00:d9:b9:da:d3:a2:3f:05:60:eb:
19:16:c2:0c:2a:af:53:5f:e5:44:90:4d:dd:3c:62:
fb:4c:6a:ed:24:8c:66:9b:d0:dd:18:4d:49:a3:65:
53:18:ad:97:9f:a7:dd:47:e5:4b:c1:55:bc:e9:64:
ab:3e:e8:40:38:33:7d:e3:6d:b0:b3:b6:2f:f4:3f:
db:4b:fe:27:03:5e:53:70:3b:e0:f2:41:d2:79:b7:
92:fb:6c:92:a7:2b:e0:d1:da:b3:76:41:32:28:d9:
1c:c4:57:cb:e6:61:6c:f0:07:52:55:23:eb:3d:c2:
54:33:77:4a:21:15:76:7c:fe:3b:09:a4:c4:6c:7c:
83:ce:3f:6a:8d:c6:24:1e:6f:e1:52:6b:27:b8:82:
bb:a1:d0:1c:ab:fc:f0:e0:7d:81:b5:c3:50:1c:6a:
31:e0:34:a2:41:c9:c7:64:d8:6f:4e:01:b5:44:36:
4a:97:50:41:31:42:60:6b:fb:6f:0f:6c:da:13:a3:
a8:55:c2:bb:96:f6:0f:6c:58:91:2b:c4:a1:1d:be:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:0F:3A:A1:03:85:AE:0C:97:13:13:C3:64:D4:B2:1C:DB:2E:44
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.57.0/24
46.202.59.0-46.202.60.255
46.202.63.0-46.202.64.255
46.202.67.0-46.202.68.255
46.202.71.0/24
46.202.74.0/24
46.202.77.0-46.202.78.255
46.202.227.0/24
46.202.248.0/24
91.124.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:12:f0:01:18:b0:5c:bb:ee:fc:48:18:7e:99:7e:ee:23:a3:
d3:9c:5e:7b:83:67:0f:9b:b1:93:85:e6:ee:1e:92:67:83:5d:
0f:33:ae:44:8b:1e:e6:45:e3:70:8d:6f:e1:6a:8e:aa:19:6d:
b1:15:6e:e0:c5:51:d4:c7:6b:dd:c9:be:22:02:b5:ad:47:00:
d7:14:fe:98:4b:96:11:b6:3f:53:92:5d:ec:50:46:cc:13:e4:
eb:d5:3e:d2:6f:6e:a7:6b:df:6d:69:a5:e9:9a:04:a7:e8:df:
4b:3d:9d:56:90:97:ed:fe:a9:70:87:1e:4f:2f:62:b4:67:18:
70:d1:31:d9:60:0c:00:89:94:1d:79:37:f0:fa:d5:b9:bc:32:
27:9b:0c:e7:41:d9:7b:c7:ee:05:cc:cb:9b:ef:9e:cc:6b:5b:
01:b1:4d:3a:54:c0:50:72:f6:22:64:18:4f:9a:2e:b4:d4:67:
4b:09:28:3f:ae:0f:84:ce:86:09:8c:45:51:51:9a:17:a1:96:
cd:47:8e:53:e8:9d:59:c7:96:ea:9c:a2:69:0d:61:28:03:f5:
49:a4:e2:fe:ea:9c:9c:78:79:76:bf:6b:9e:5f:53:80:59:27:
83:44:16:da:c0:d5:ab:67:12:cf:a2:88:e3:25:11:de:df:9f:
e6:d5:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:41 2025 by rpki-client