Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43878.roa
File: AS43878.roa (raw, json)
Hash identifier: GcvHbMDKIdGcNDARctU4lqDDr/zAmkj6vEHDOwML0qw=
Subject key identifier: 9E:49:B7:87:0A:42:A2:85:48:4D:C8:AD:B9:37:96:3A:F2:59:CB:DE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5CB4F74DCCBF555102EFB385C4B8EF6A932F402F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43878.roa
Signing time: Sun 30 Aug 2026 13:11:41 +0000
ROA not before: Sun 30 Aug 2026 13:06:41 +0000
ROA not after: Sun 29 Aug 2027 13:11:41 +0000
asID: 43878
IP address blocks: 46.203.61.0/24 maxlen: 24
92.113.171.0/24 maxlen: 24
178.95.126.0/24 maxlen: 24
178.95.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b4:f7:4d:cc:bf:55:51:02:ef:b3:85:c4:b8:ef:6a:93:2f:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 30 13:06:41 2026 GMT
Not After : Aug 29 13:11:41 2027 GMT
Subject: CN=9E49B7870A42A285484DC8ADB937963AF259CBDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:be:23:88:46:6d:e4:88:66:d0:ae:18:06:
bd:f6:77:39:f8:e0:3e:d2:de:66:9a:2c:5e:22:4e:
02:0a:68:b2:46:c3:47:a6:ee:0e:7d:d9:e7:b0:bc:
88:58:60:52:44:4f:79:18:1f:0f:bd:13:9f:02:9e:
5c:63:26:02:29:1c:25:69:c5:0f:cf:b9:49:25:6f:
f6:d4:fa:25:56:a1:43:1d:e8:fc:4a:c0:da:42:72:
c3:5e:34:f3:c0:6a:cc:3c:95:e0:84:84:1f:10:22:
e8:87:e7:40:b9:1b:f3:14:c6:a3:ef:6e:09:f7:9e:
5f:57:68:06:3e:93:f4:cf:9e:ce:e5:77:1b:68:bc:
51:5c:f0:05:47:35:f4:84:2c:b3:70:b5:0a:01:a5:
36:46:5c:26:d9:0e:bc:d3:bd:1a:30:a8:20:08:66:
f9:d3:1f:64:81:f4:f5:dd:b1:09:5a:f0:03:e8:ac:
dc:36:b3:24:1c:1d:ba:c7:76:e3:df:08:c1:7f:10:
91:1a:bb:19:1c:98:43:f2:16:af:79:eb:98:33:6d:
53:84:79:06:79:33:41:4b:af:39:30:50:15:45:f6:
61:4d:5a:6a:d3:5c:4b:1d:72:e1:a0:b8:f7:07:a6:
ad:4b:e4:e1:f4:9a:f7:2d:ec:9a:4f:ab:b8:51:b5:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:B7:87:0A:42:A2:85:48:4D:C8:AD:B9:37:96:3A:F2:59:CB:DE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS43878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.61.0/24
92.113.171.0/24
178.95.126.0/24
178.95.131.0/24
Signature Algorithm: sha256WithRSAEncryption
61:93:4a:90:bb:f0:92:dc:02:ac:fd:2e:f0:9b:3b:0f:b1:21:
a0:d4:46:18:45:bf:c1:66:ce:76:e6:e4:96:82:cc:64:da:7d:
6b:b1:b3:dc:69:dc:19:91:be:86:32:5a:8e:50:4e:55:b5:6c:
33:cf:66:2f:25:31:9f:49:6e:ef:93:57:03:80:78:ec:c8:27:
cf:4e:17:47:d3:16:35:4e:75:03:23:5d:3b:4a:c0:44:8c:79:
53:f7:23:15:19:12:69:1f:10:5a:81:4d:e4:07:48:b3:ad:c8:
6a:e6:3f:2f:80:d4:47:85:09:e2:bc:b6:b0:19:7f:1b:37:b1:
52:a4:68:88:f7:90:a4:8a:b9:bb:da:65:a1:5e:b7:b0:b1:fb:
d6:3f:b6:b4:41:16:91:99:4c:37:c6:08:52:e0:92:78:a3:9b:
ad:91:14:21:a6:6e:86:0f:0a:a8:b9:de:6d:6b:64:11:fe:64:
27:41:fe:a5:6d:e8:7e:c6:0e:4c:0c:54:f4:8c:79:04:97:f9:
d6:ab:5d:4c:75:6c:ce:8a:a4:e2:10:83:01:29:35:8d:ca:c0:
aa:ce:5a:5b:05:70:51:2e:8f:bb:49:e9:7f:4d:cf:34:c6:00:
5c:b7:b8:23:86:95:54:5f:28:de:e2:05:68:61:75:be:24:91:
a3:eb:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 15:27:33 2026 by rpki-client