Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43350.roa
File: AS43350.roa (raw, json)
Hash identifier: uA2faoCM1aYdcSIUGz0XbcuI2UYDMoajFonDLlKdlWE=
Subject key identifier: 3F:AF:C3:58:A2:17:09:9E:5C:F2:63:C9:7C:47:F5:B1:A9:27:BE:AD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3A875F00AE82A106FB63C1D96C50E320527400CD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43350.roa
Signing time: Wed 18 Mar 2026 00:04:23 +0000
ROA not before: Tue 17 Mar 2026 23:59:23 +0000
ROA not after: Wed 17 Mar 2027 00:04:23 +0000
asID: 43350
IP address blocks: 141.11.1.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.37.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.103.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:87:5f:00:ae:82:a1:06:fb:63:c1:d9:6c:50:e3:20:52:74:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 17 23:59:23 2026 GMT
Not After : Mar 17 00:04:23 2027 GMT
Subject: CN=3FAFC358A217099E5CF263C97C47F5B1A927BEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:08:fa:a6:22:4b:ad:0e:e7:5d:59:5b:a0:
4c:84:7f:aa:09:da:a4:5e:a5:07:f2:34:20:17:a7:
91:73:a2:0e:12:f8:f1:31:4b:f9:d4:79:9d:a9:19:
17:53:d1:96:3a:ff:a0:2f:a7:51:41:37:83:a8:69:
da:72:be:95:1e:7f:68:3f:ce:a1:40:13:24:f4:b0:
48:66:15:e1:c1:a3:e6:ca:55:12:c2:0f:16:ae:db:
63:20:7e:56:2c:ad:ca:e4:69:d1:77:e2:13:65:bd:
19:9d:47:57:91:8b:96:f8:e4:d4:59:2b:1a:f3:56:
96:33:22:54:69:85:64:6a:30:f8:e1:b1:7a:19:03:
24:d2:60:ee:db:ec:20:77:f2:9f:ad:66:f8:06:0a:
48:82:e3:26:ff:87:7f:5a:85:79:72:9e:ea:c0:ba:
39:2d:29:8a:e2:2c:5a:60:0d:9a:55:2b:f4:53:ae:
ea:6f:41:5d:ee:30:8e:16:6e:b2:9d:5c:d6:f3:69:
82:c1:ae:2b:be:4d:c6:2b:b6:b0:c3:c6:61:38:7b:
53:63:29:de:a4:27:60:b6:7f:ed:dc:a2:2c:39:7f:
85:60:e7:e2:c0:6a:3a:15:0c:b4:90:89:8b:8b:07:
15:ae:f5:34:c4:df:1c:6a:b6:5b:e5:81:ad:95:8b:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:C3:58:A2:17:09:9E:5C:F2:63:C9:7C:47:F5:B1:A9:27:BE:AD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.21.0/24
141.11.37.0/24
141.11.45.0/24
141.11.103.0/24
141.11.107.0/24
141.11.187.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:71:46:45:db:97:da:7b:a2:06:f4:14:63:d0:55:21:34:2c:
d1:d4:16:bc:74:89:44:94:e6:ee:b4:67:f4:45:9b:47:f2:b4:
22:e2:50:22:2f:e6:4c:0a:61:42:a4:36:c5:1c:1b:fc:35:cb:
56:29:0a:07:de:dd:68:a1:29:97:dc:bb:b6:f5:18:41:ed:7b:
50:13:0d:26:8b:c4:7d:2b:c1:5a:82:28:fd:8a:27:7e:e1:0a:
a4:0c:38:b4:2e:b8:9e:f7:89:93:98:c7:1f:b7:87:ce:1e:b2:
5e:00:9e:86:ae:56:74:20:f2:2f:7e:08:e1:09:44:21:c1:0f:
6f:44:02:c3:4d:7a:4e:ff:12:41:87:6d:41:de:57:ba:16:af:
0a:00:f0:37:bb:e5:ff:4b:46:3d:d9:40:c1:3c:a2:4b:6a:78:
a1:e5:60:e5:36:8c:1a:e2:90:95:bc:06:2b:6c:5d:38:09:ac:
1a:d2:60:22:8a:9f:3f:49:cf:bc:1b:63:97:bf:3b:b1:3b:5c:
69:f1:4b:74:51:c8:2a:5c:5f:54:c1:59:31:57:15:47:5e:f9:
c8:c0:ab:ee:60:10:75:22:98:f0:ec:e4:7d:2c:75:82:4b:5f:
fd:dd:3b:42:1e:7c:fe:9b:63:8e:5b:91:56:15:fb:32:04:a9:
8c:40:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:21:40 2026 by rpki-client