Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43641.roa
File: AS43641.roa (raw, json)
Hash identifier: C8oUJVtIOzA9O/9lmYXIvcW+xGVLW9Onc8zgpDdXO+c=
Subject key identifier: 89:9C:CA:60:99:A6:B0:33:33:6A:F8:CA:40:8E:3A:2C:6F:4D:81:44
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A1362E3CB8C1E0C3965CD213055C72651D0B827
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43641.roa
Signing time: Mon 11 May 2026 17:51:12 +0000
ROA not before: Mon 11 May 2026 17:46:12 +0000
ROA not after: Mon 10 May 2027 17:51:12 +0000
asID: 43641
IP address blocks: 178.83.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:13:62:e3:cb:8c:1e:0c:39:65:cd:21:30:55:c7:26:51:d0:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 17:46:12 2026 GMT
Not After : May 10 17:51:12 2027 GMT
Subject: CN=899CCA6099A6B033336AF8CA408E3A2C6F4D8144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:6e:d5:b8:51:d7:e1:d5:6c:7d:bf:55:60:
41:a2:6c:95:6b:07:b8:08:af:65:d6:05:6b:19:61:
c2:33:3d:3f:e2:ee:28:8a:2a:76:df:12:4a:72:ac:
5c:cd:3e:74:0c:c2:2b:5a:4b:1c:9f:6e:d0:0d:80:
2e:53:5f:8b:47:07:b3:36:e0:d9:01:9c:b9:49:5a:
86:bf:21:f6:46:72:ea:38:ba:90:cd:a3:47:5e:7c:
9c:30:f8:f7:a4:23:ea:e7:95:c7:e9:f1:f6:52:36:
41:b6:3c:5c:7f:71:bf:8e:d6:3b:0a:e6:fa:07:b4:
de:1c:e8:06:23:9a:66:aa:17:c1:32:82:63:45:dc:
e2:0e:70:83:23:8d:fe:3b:8b:1b:ec:7c:90:2b:e7:
61:67:1a:4b:c0:dd:d2:e2:19:a1:e7:a3:39:00:d3:
50:77:7f:8e:ce:48:6d:38:18:33:84:a1:d0:0f:51:
fb:b1:22:e1:0f:8b:5c:87:17:10:77:01:fc:7f:c6:
f6:9a:db:a3:74:f3:45:4b:fa:22:2e:5c:c3:a4:8a:
c6:c3:2f:d1:79:16:c1:3e:66:eb:d5:72:ba:29:2b:
fb:d3:ce:4c:24:55:58:a5:b5:b4:10:73:9c:78:67:
c8:3c:97:27:db:a0:40:ad:43:ca:1a:41:58:9f:54:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:CA:60:99:A6:B0:33:33:6A:F8:CA:40:8E:3A:2C:6F:4D:81:44
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.75.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7e:52:02:39:7f:f2:49:bc:e2:e8:7f:f4:a0:64:a7:1d:a9:
d6:26:56:ac:57:54:aa:60:34:5f:fd:da:30:01:35:96:f4:88:
b0:48:e3:a9:39:4b:d8:90:38:e0:df:2b:3a:9b:d8:15:8d:a5:
e7:3a:b6:54:91:30:78:cb:81:b2:81:c5:70:70:d7:ce:b1:24:
72:e0:55:0c:1f:79:3f:37:c9:c2:cb:84:cc:0d:ce:9f:4c:79:
33:01:3c:84:79:30:4f:23:75:e9:29:06:95:d4:6b:86:39:2b:
23:83:41:80:18:12:49:5d:e4:22:6e:2c:65:dd:65:f6:28:58:
8a:bc:be:14:29:f7:50:0b:fc:dd:4f:04:58:dc:41:6b:b7:6f:
74:93:e0:16:38:b7:cb:71:e7:de:a6:d2:09:da:ad:32:43:7c:
6c:0e:e6:45:62:5e:8b:13:ca:79:8d:c1:e4:28:49:7e:bc:51:
4a:a5:1e:1e:77:84:e7:d1:01:3e:7b:8e:4c:4c:f0:39:c8:df:
57:0c:d9:b9:0a:e7:d9:5c:1e:df:37:35:4d:c4:60:22:e6:f9:
46:5b:d2:ce:d6:1c:b5:46:78:93:8f:a3:a4:90:d1:a8:56:45:
2f:26:d1:b3:a6:3b:eb:6e:75:79:ee:2b:35:4f:c8:18:6e:f5:
c9:43:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:53 2026 by rpki-client