Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS43431.roa
File: AS43431.roa (raw, json)
Hash identifier: B3j4ibW0BnodvAle2AYYtkZe8qnZgS8rHJn6M07teWM=
Subject key identifier: 25:0D:02:FF:3E:AE:DD:0A:3E:74:9E:72:48:95:15:A1:F3:2C:A5:60
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1FFF8BCC9CD09852733B4370B49300777811E81B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS43431.roa
Signing time: Fri 15 May 2026 12:58:30 +0000
ROA not before: Fri 15 May 2026 12:53:30 +0000
ROA not after: Fri 14 May 2027 12:58:30 +0000
asID: 43431
IP address blocks: 143.14.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ff:8b:cc:9c:d0:98:52:73:3b:43:70:b4:93:00:77:78:11:e8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 15 12:53:30 2026 GMT
Not After : May 14 12:58:30 2027 GMT
Subject: CN=250D02FF3EAEDD0A3E749E72489515A1F32CA560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:ca:03:f6:d4:49:9c:fc:63:6e:1d:f5:c1:
7f:fb:36:e6:e4:88:2a:94:d5:7e:b2:f2:f1:6b:5f:
9e:00:61:f9:12:27:a1:bb:0f:92:5d:ff:03:19:c4:
77:2c:f4:2a:e9:c4:42:59:b4:a7:d4:ea:d7:36:8d:
45:17:2c:5d:01:b9:b5:53:fb:62:07:23:47:b1:fc:
e6:45:1f:8f:65:4a:c0:85:fb:92:c7:ad:41:2b:af:
a2:74:62:c8:66:68:60:40:b0:6c:23:bf:ea:1c:2a:
88:1c:81:fd:6f:bb:e7:87:7b:80:35:28:e2:0a:19:
95:88:dd:29:7e:ca:c7:57:f4:39:b3:a0:28:cb:d2:
0a:43:01:d6:80:40:29:56:7d:68:62:a0:3b:dd:9f:
b5:60:eb:82:71:6c:6c:a1:f6:91:5e:eb:44:db:58:
70:2d:f8:a7:45:23:06:6f:a9:4d:bc:14:a5:dc:c1:
d0:bb:8b:e9:f7:f6:a8:f5:6c:e8:79:e0:51:cf:b5:
7c:ac:80:ca:b2:23:83:2d:33:c5:16:25:09:0e:f1:
65:b3:c0:19:51:c3:d6:3a:7f:5f:14:c5:a3:83:6c:
ae:2e:78:33:64:0e:ad:1a:f0:ef:4c:65:ff:07:45:
50:a5:0f:10:7a:55:75:24:6c:62:78:69:53:3a:e2:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:02:FF:3E:AE:DD:0A:3E:74:9E:72:48:95:15:A1:F3:2C:A5:60
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS43431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2e:3d:aa:b3:7a:96:db:5e:e4:e6:8c:20:b8:10:a7:b4:45:
12:41:fb:43:f6:d5:58:ee:a2:43:3b:2a:c6:d2:5c:e6:99:ac:
76:ce:3e:b1:6b:7f:a3:62:27:42:0f:0f:5c:73:84:e5:ce:62:
5c:6b:d7:2b:de:38:f7:ba:7e:ce:c8:6b:8a:04:b3:54:a1:b1:
1b:0b:b4:db:c1:53:9f:6a:d9:fd:0d:b9:c2:d7:12:73:4d:d7:
22:8f:5a:0f:53:96:96:ce:56:61:7c:3d:c6:be:57:76:59:dd:
d1:7d:ea:8b:67:a8:08:f0:90:cd:e0:96:fd:69:cd:04:97:df:
b3:f0:39:e0:3c:8b:c7:b8:1a:50:d7:e3:32:86:77:c3:20:1f:
92:cf:4a:bc:08:a3:32:db:23:9c:4e:e9:d6:e5:c9:f5:a2:df:
c4:59:3e:e0:c0:dc:bc:ef:e1:69:79:de:af:8e:57:00:f2:73:
96:0a:4d:6f:97:61:de:c6:90:45:46:bb:ec:47:f1:2d:34:d1:
84:94:c8:1a:a6:b5:fd:37:e7:39:58:01:16:fe:e0:fd:f5:ef:
92:f5:ed:73:b8:02:88:53:ba:ad:2c:47:06:b8:a5:15:16:cd:
ba:a4:f3:19:0d:03:b2:03:30:1a:03:6a:96:aa:05:fe:62:3a:
9e:19:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:03:08 2026 by rpki-client