Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43350.roa
File: AS43350.roa (raw, json)
Hash identifier: 56tZ6z6uJn0ZgtYs1KLJNajGI05tzD6kzPW6p3+fkRs=
Subject key identifier: 1A:2B:CC:DC:4F:19:E8:3C:1A:5C:E4:B3:61:3E:1E:D9:4B:EA:57:D8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7D8ADDA106848F1EB8B447737C85FD9313D5DB33
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43350.roa
Signing time: Wed 19 Aug 2026 00:05:02 +0000
ROA not before: Wed 19 Aug 2026 00:00:02 +0000
ROA not after: Wed 18 Aug 2027 00:05:02 +0000
asID: 43350
IP address blocks: 2a13:9500:126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8a:dd:a1:06:84:8f:1e:b8:b4:47:73:7c:85:fd:93:13:d5:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 00:00:02 2026 GMT
Not After : Aug 18 00:05:02 2027 GMT
Subject: CN=1A2BCCDC4F19E83C1A5CE4B3613E1ED94BEA57D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:10:fb:51:32:c2:e1:c3:1c:51:6a:08:3a:
b7:92:16:b9:9c:bb:de:2f:19:69:ea:fc:eb:8e:eb:
3d:53:a3:2d:f8:43:b2:ab:a4:b9:9d:d9:ed:73:b2:
12:c5:09:37:02:b3:4e:1b:a5:32:93:bc:56:6c:30:
e9:ef:ed:3e:06:95:a9:43:c6:91:45:4a:53:17:31:
c5:97:73:04:48:b0:ca:df:a7:fd:0c:99:3e:d0:eb:
0b:c2:b3:af:9f:45:54:4b:54:8e:02:96:94:53:7e:
c9:ba:51:b2:cb:ae:ac:8f:01:f2:2a:37:f5:11:22:
75:e7:e4:38:08:56:11:98:4d:e7:c3:70:7f:85:74:
7d:9c:52:db:37:09:2c:8e:58:97:32:bf:da:47:c5:
58:e1:cf:02:15:13:a7:2d:ac:3a:28:ee:15:1e:bc:
a3:62:2c:27:1e:9a:b6:92:e4:15:9b:89:ce:a9:0a:
5a:0c:23:12:91:61:94:39:30:0c:3e:5b:60:0f:de:
56:21:a6:68:ea:50:7c:9b:73:09:80:d0:d2:67:3d:
81:35:8b:fc:11:f2:5c:2b:f2:fb:cc:78:95:94:28:
68:f9:5e:eb:03:4e:50:fc:0e:73:97:c0:62:18:5a:
ac:e4:5a:4e:0b:2d:c6:f6:14:c3:34:eb:9d:3a:5a:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:CC:DC:4F:19:E8:3C:1A:5C:E4:B3:61:3E:1E:D9:4B:EA:57:D8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:126::/48
Signature Algorithm: sha256WithRSAEncryption
50:93:7c:2c:e3:06:1e:25:98:88:c6:da:9f:5a:22:04:d7:b8:
16:b8:37:2f:3e:81:5e:cd:29:ff:60:1f:a3:51:d4:3f:5d:04:
11:0b:e9:f4:81:f6:cb:4d:7c:30:4d:fe:c8:cb:d6:f0:f9:c7:
00:14:ac:1c:cd:7d:03:ec:e7:2b:5f:c2:11:d3:eb:fa:03:e1:
3c:14:8b:8b:41:d9:7a:ed:ac:ee:00:2a:89:5d:53:2f:88:db:
07:f0:ae:c1:a4:60:fa:20:8e:48:fc:19:f8:be:b4:d1:3b:98:
fe:ed:80:aa:4c:aa:37:6d:ed:41:f6:3b:31:18:40:68:47:05:
e6:9c:7f:8a:66:2b:76:96:2b:7a:fa:9c:a0:d9:d8:39:9a:c8:
bb:a7:14:73:e6:3e:f8:6e:9d:62:ac:a9:05:fa:8d:35:56:99:
26:dc:36:40:85:c0:98:6e:ad:51:6c:73:a3:3c:0b:63:05:2f:
f3:4d:1d:c0:ea:74:12:cf:e3:35:ff:17:04:32:3c:70:ee:da:
3c:0d:a5:b0:3b:f6:c4:23:96:94:3f:17:dc:89:94:3b:f8:a7:
37:0c:54:5d:25:63:16:3a:ee:7e:1e:58:97:af:f8:1d:73:6c:
42:d4:0b:2b:2b:1d:c5:b1:17:21:89:71:b4:a5:54:b3:18:f8:
3c:57:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:31:24 2026 by rpki-client