Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43851.roa
File: AS43851.roa (raw, json)
Hash identifier: MYDzM2gC6DY85Z2BlZ+U5FZuMznud16faziPuUDPnHQ=
Subject key identifier: 02:04:42:A8:0B:86:E9:23:4D:94:1D:69:01:EB:87:6B:25:9B:1E:2A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 33922001D060AFFDC6671394DFB002B64457B0C3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43851.roa
Signing time: Mon 26 Oct 2026 15:49:39 +0000
ROA not before: Mon 26 Oct 2026 15:44:39 +0000
ROA not after: Mon 25 Oct 2027 15:49:39 +0000
asID: 43851
IP address blocks: 82.38.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:92:20:01:d0:60:af:fd:c6:67:13:94:df:b0:02:b6:44:57:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 26 15:44:39 2026 GMT
Not After : Oct 25 15:49:39 2027 GMT
Subject: CN=020442A80B86E9234D941D6901EB876B259B1E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:1d:4a:87:f1:f0:1a:14:86:d0:80:e2:bd:
92:0d:53:5a:37:df:6e:56:fe:72:5a:a0:fc:72:cb:
44:db:78:bc:42:d6:09:55:0e:af:9f:39:a3:8b:fb:
b4:a8:3b:e8:c8:b2:c0:cc:c1:4f:5d:2d:03:43:0d:
5a:65:9e:67:7a:d5:7f:7b:f9:f8:79:44:fb:9c:f0:
76:63:28:92:3f:4e:03:24:83:ac:9b:cc:c7:e9:1f:
b2:58:cd:bb:8a:83:d5:99:a1:e8:1f:c5:5d:51:25:
08:90:5d:e6:6d:f9:2f:94:9c:ea:4a:a2:0d:26:d6:
b4:29:b7:3a:cf:9c:74:09:d1:74:27:72:01:cc:64:
61:69:5d:96:ec:72:cc:b6:c4:8f:9c:c1:ca:e9:d4:
0e:49:f1:c5:b0:e4:2b:d5:40:8a:5c:f6:12:6b:48:
7e:cc:1b:32:67:3c:99:6b:71:17:bd:d9:c3:17:56:
7c:b8:10:ad:f3:3f:6b:87:c0:c6:45:b3:f4:02:9f:
fe:e0:ec:43:07:a6:97:c8:e1:03:a6:86:f3:33:0c:
21:bb:d3:58:4c:81:40:2c:b0:be:17:5e:86:03:56:
94:a4:4e:74:4c:65:a7:68:9f:1b:af:cf:38:f3:89:
6c:b9:a9:c7:0b:aa:05:68:3f:d6:0f:97:30:99:7a:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:42:A8:0B:86:E9:23:4D:94:1D:69:01:EB:87:6B:25:9B:1E:2A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.0.0/24
Signature Algorithm: sha256WithRSAEncryption
81:74:4c:6e:67:80:ef:f6:d8:75:e9:0b:0d:28:e2:93:9e:89:
b1:17:47:4f:7d:97:8f:42:c7:9b:8c:c4:cc:86:7f:d3:8c:9f:
44:5d:36:0e:38:03:0a:31:d8:01:d8:aa:b4:e8:c1:a3:6a:a5:
ce:c7:f8:7e:f4:ce:71:58:17:d8:8e:a6:98:20:ab:3a:8f:c2:
57:aa:bd:fa:ed:ee:03:b5:23:ad:47:67:b1:49:8e:5a:00:07:
54:4c:57:6b:6e:a8:9d:16:6a:03:e0:d9:b9:6d:62:de:cb:ab:
77:17:65:f6:42:bd:ce:38:4e:65:63:3a:b0:6c:92:91:6c:53:
94:8f:cb:47:23:7f:ab:04:98:af:c9:44:df:77:57:d7:e8:bc:
c7:b5:90:16:e5:fd:c6:74:68:23:18:c1:fd:e2:9a:c1:4a:29:
df:dd:8d:0b:a2:d3:4e:4a:55:dd:fe:e3:c2:54:a0:82:94:40:
6c:31:4b:d2:36:d6:c8:42:c1:fa:85:59:5f:22:da:92:09:95:
a5:7b:9b:52:b3:d6:d3:38:2f:46:cc:30:b8:8b:98:ff:19:df:
27:6b:1b:d0:4f:e5:39:b7:0d:d5:51:ac:e3:ef:62:c2:70:ac:
60:c4:54:b6:6e:09:ce:a4:5d:8a:a2:23:e6:87:6e:9a:78:49:
19:ae:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 17:10:56 2026 by rpki-client