Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS43260.roa
File: AS43260.roa (raw, json)
Hash identifier: pdzP9jzkhkXAOtBvcXjTMVVAcAcRCG1pA0sQ1NTZd3E=
Subject key identifier: 30:D2:E5:D5:BB:56:7A:7C:B7:37:01:D1:A7:8F:28:59:26:56:D0:C3
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 413A4D489905957A7317EFBC242463C3DF76E94E
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS43260.roa
Signing time: Wed 10 Sep 2025 13:43:32 +0000
ROA not before: Wed 10 Sep 2025 13:38:32 +0000
ROA not after: Wed 09 Sep 2026 13:43:32 +0000
asID: 43260
IP address blocks: 185.254.52.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3a:4d:48:99:05:95:7a:73:17:ef:bc:24:24:63:c3:df:76:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 10 13:38:32 2025 GMT
Not After : Sep 9 13:43:32 2026 GMT
Subject: CN=30D2E5D5BB567A7CB73701D1A78F28592656D0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:6f:10:48:bb:8d:61:c3:68:d2:61:ce:79:
2d:24:e8:db:d3:4d:5a:21:1c:66:89:f6:cb:9d:5a:
4c:03:fe:92:f3:c1:0c:6a:56:fc:55:0b:7e:47:db:
b6:7e:21:19:da:23:6d:29:f3:f3:04:58:68:a8:54:
65:86:36:ee:25:b2:74:5a:8f:7b:92:94:e9:51:6b:
3a:70:e7:90:c9:a9:c2:1b:69:68:92:7d:a6:d3:93:
bc:1d:06:8b:d4:67:f9:5a:9f:4c:77:6e:90:f2:64:
68:49:87:48:80:63:a7:00:c4:fd:70:74:7e:b5:69:
6d:1b:8b:d5:2a:f6:69:c9:f0:67:83:6c:b4:5b:ad:
b0:38:12:89:0e:94:e9:d4:1f:ed:fe:89:69:39:f6:
b8:ac:8e:fa:70:9c:f9:23:36:38:29:ec:16:89:e0:
c3:4f:12:d1:c5:9b:6f:2c:ba:83:08:de:f1:71:fe:
0b:95:ea:b8:b5:2b:52:a2:c4:bb:4f:ab:0e:75:bf:
28:ce:0b:75:eb:b9:59:27:73:8e:31:3d:01:8d:d8:
d0:34:c1:c7:5a:aa:ec:17:ca:4d:9e:44:de:94:80:
1b:b5:10:36:23:b2:9a:50:7f:14:5b:5e:a9:4b:c0:
59:d8:46:79:ea:94:de:f6:0f:3c:42:fb:ab:0a:9e:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D2:E5:D5:BB:56:7A:7C:B7:37:01:D1:A7:8F:28:59:26:56:D0:C3
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS43260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.52.0/24
193.17.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:bf:a8:a3:58:3a:f4:63:0f:b2:fc:c9:de:6a:95:c8:2d:17:
aa:4f:1b:df:91:23:65:e3:ae:7c:dc:06:d9:bf:76:81:26:8d:
45:ba:d4:8f:44:9d:85:77:ad:f7:a4:d5:77:ec:f8:fe:be:ef:
57:1a:b8:12:b5:52:b4:df:2e:6d:2f:4c:31:ba:b4:de:37:ad:
34:65:ee:1a:40:a0:bd:2d:38:f1:b2:6f:23:fc:64:27:f9:f4:
4b:7d:7e:ee:96:0b:b5:2e:32:1b:53:43:a7:f7:af:36:40:33:
a5:2f:16:85:ff:98:d0:82:29:3c:d8:d3:a4:94:46:ce:b8:cc:
25:00:dd:e0:b5:50:ad:43:16:67:13:fa:6d:01:1f:c4:9f:6e:
a5:ee:c8:75:b8:63:0a:a2:cf:53:6c:ec:db:4b:74:24:e8:85:
77:65:38:37:b3:78:6d:18:44:9e:e9:90:6d:fe:45:3c:44:72:
8b:a2:2c:38:2e:a6:87:57:bb:a3:bb:67:4e:5e:d4:19:8e:dd:
86:f6:1b:be:b9:9b:5a:2a:cb:88:54:a9:c9:0a:3e:e6:2f:56:
13:f3:33:39:77:2d:30:c4:e4:f8:6f:82:f4:19:26:af:6b:0e:
88:fb:55:62:4a:92:ec:ac:b6:d9:47:a1:7f:1a:7b:84:de:c8:
2d:2d:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:50:24 2025 by rpki-client