Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
File: AS43094.roa (raw, json)
Hash identifier: LWnLOlCTLhb82SeLZd+DxBGJSk5gSVYHHA3NTJHM4HQ=
Subject key identifier: 46:C1:18:97:B8:FC:1C:91:04:9B:95:40:04:6B:F9:01:C6:0A:03:0C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1F4793F44D79E786B380AD25CDE1AC2FDCE610FF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
Signing time: Thu 24 Sep 2026 10:14:38 +0000
ROA not before: Thu 24 Sep 2026 10:09:38 +0000
ROA not after: Thu 23 Sep 2027 10:14:38 +0000
asID: 43094
IP address blocks: 95.134.116.0/24 maxlen: 24
95.135.161.0/24 maxlen: 24
178.92.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:47:93:f4:4d:79:e7:86:b3:80:ad:25:cd:e1:ac:2f:dc:e6:10:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 24 10:09:38 2026 GMT
Not After : Sep 23 10:14:38 2027 GMT
Subject: CN=46C11897B8FC1C91049B9540046BF901C60A030C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:24:a5:51:e1:7f:0d:3c:5f:1f:65:ec:e0:
e2:d8:26:e4:40:fd:52:df:6f:2b:53:2b:17:aa:8a:
e9:bd:46:91:7c:fe:ef:ae:60:fa:f4:09:87:83:4f:
d0:98:6d:da:2b:eb:ee:c4:8b:58:91:9a:be:66:19:
1a:6b:bc:cf:91:27:ca:89:d1:61:62:5a:71:67:ff:
e5:24:3f:97:24:7c:ba:94:e5:29:cf:81:30:a0:f0:
73:5b:75:17:ce:07:57:d4:94:de:2d:b4:c5:ea:c0:
a9:1f:2c:20:2d:a3:56:82:34:27:f4:f9:3b:49:88:
fe:34:49:6f:49:a7:b6:81:1e:ac:58:9b:ef:3c:67:
e0:0c:b0:17:ea:88:c4:94:4b:fb:0f:1b:49:10:85:
c4:4f:d4:cf:b6:b6:74:3a:61:29:91:5a:b5:44:b6:
d0:b6:b1:ac:fa:cb:52:26:79:50:89:73:a6:07:25:
5f:5b:0d:b0:c5:76:ea:76:1b:e6:a4:0b:5c:15:78:
61:46:fa:39:da:83:74:e6:68:63:d7:2d:af:dc:e5:
8c:a2:03:db:66:0d:dc:27:2a:37:5d:32:aa:5f:ab:
98:01:a9:6d:50:be:3d:17:87:ed:a7:76:36:0b:c3:
03:20:75:8b:87:c6:c5:1b:67:ae:49:19:30:f2:46:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:18:97:B8:FC:1C:91:04:9B:95:40:04:6B:F9:01:C6:0A:03:0C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.116.0/24
95.135.161.0/24
178.92.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8f:31:50:f6:d2:58:8d:a0:79:c7:c9:e1:1e:68:ca:bb:46:
4a:3a:59:a5:5d:23:ec:99:fb:46:04:f9:32:18:78:87:88:6b:
2e:2c:7e:4a:4f:98:86:1a:c7:99:13:55:fd:9a:b9:60:fb:7c:
ee:0c:4f:5a:bd:ec:1f:b3:a3:e2:3a:a1:d7:92:5c:b1:c9:ca:
dd:bb:0b:cc:55:db:8b:7e:0e:73:56:d8:fb:1d:e7:c0:56:87:
db:5f:5c:71:b7:87:49:ed:7b:5c:d0:a5:79:63:b5:c4:29:fd:
66:b3:cd:20:b6:74:50:78:3c:f1:90:e6:fe:dc:a2:91:81:26:
33:04:d1:16:5d:d8:bc:10:41:48:95:5f:10:f4:ff:14:33:9b:
9b:b4:ab:27:86:51:e5:87:77:d2:64:95:30:a2:78:f3:8d:aa:
40:6b:55:93:5a:27:70:34:45:6b:eb:72:24:55:a2:e1:29:52:
8e:13:68:23:e9:3a:25:f8:c5:8d:93:0f:97:87:6c:0a:4c:6d:
12:89:f9:63:44:0d:88:f5:6b:fb:f4:d5:6e:50:59:6a:c0:fb:
4c:e9:6a:b3:59:43:a1:9c:7d:65:88:b6:05:e7:5c:08:e8:63:
2d:50:53:cb:ef:6a:f3:f6:e8:aa:c5:a1:02:a0:83:25:c0:d8:
af:e6:5f:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:51:26 2026 by rpki-client