Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: E4M4+3e36381cpC81b417+rqT8A5a1eEfpcmrT4zh3E=
Subject key identifier: DF:8E:35:8B:4C:C7:99:9A:3F:0D:39:6E:A6:C3:B4:B1:F9:D6:FD:39
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5C23FA883BF29E93767E7C9018B26E34D5B79A66
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Sun 19 Jul 2026 07:23:18 +0000
ROA not before: Sun 19 Jul 2026 07:18:18 +0000
ROA not after: Sun 18 Jul 2027 07:23:18 +0000
asID: 26042
IP address blocks: 96.62.71.0/24 maxlen: 24
155.117.18.0/24 maxlen: 24
155.117.19.0/24 maxlen: 24
162.141.15.0/24 maxlen: 24
162.141.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:23:fa:88:3b:f2:9e:93:76:7e:7c:90:18:b2:6e:34:d5:b7:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 07:18:18 2026 GMT
Not After : Jul 18 07:23:18 2027 GMT
Subject: CN=DF8E358B4CC7999A3F0D396EA6C3B4B1F9D6FD39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:3e:53:12:d3:b6:e9:8e:28:26:87:9b:12:
3b:1e:6c:a2:92:5b:e7:41:22:7a:33:0b:8a:46:c9:
1c:4c:3c:21:70:cf:76:59:6b:11:30:39:2f:32:71:
e7:c8:af:f2:70:96:b3:79:1a:fb:74:38:fc:3d:e2:
75:bf:4f:87:71:8e:91:c3:23:7d:07:9a:80:7d:e1:
d9:3d:93:e3:ed:3e:9e:36:f0:c4:9f:d4:a3:65:66:
84:e9:2b:38:b1:6b:09:3c:1e:6a:a4:76:b9:98:eb:
65:ae:9b:bf:03:30:4c:7d:2a:e6:03:bf:57:a4:fa:
07:19:c4:fe:b3:5c:49:3d:20:1d:cd:97:da:1c:50:
6d:38:1a:e9:3b:40:cc:53:cb:8d:1b:94:8b:b7:a7:
ac:e7:12:3f:04:d2:e9:f1:b4:0f:28:93:25:f2:b6:
3b:da:29:e0:0e:af:53:d4:db:c7:13:67:ac:9f:45:
37:51:24:cc:5a:e3:48:30:a4:92:ea:b9:4c:4f:bb:
36:0d:db:6e:fd:5c:50:b4:f4:03:a8:b5:53:18:71:
28:9c:a2:1d:8b:47:f1:da:0a:35:ff:9b:18:de:30:
3d:27:f0:0f:63:88:2d:87:83:e4:1c:4d:97:7b:4b:
dd:ad:6f:c2:ce:ff:3c:c1:9f:4e:b3:32:1d:a5:3e:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:35:8B:4C:C7:99:9A:3F:0D:39:6E:A6:C3:B4:B1:F9:D6:FD:39
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.71.0/24
155.117.18.0/23
162.141.15.0/24
162.141.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ad:8c:86:cd:49:99:bc:0c:57:5a:84:90:9d:c5:3d:d8:06:
26:0b:a6:ca:95:6f:e5:a3:6d:5c:b2:0c:58:93:8d:31:6b:e8:
f7:7b:81:2d:40:72:df:1d:d3:47:14:d5:73:cf:bb:a9:8a:5d:
b6:0d:dc:95:64:71:ee:75:70:91:c2:0d:2e:64:5e:95:1e:4b:
37:5a:3a:be:a1:73:e7:76:11:b9:c9:c5:59:de:b0:43:ec:4b:
a9:dc:6c:44:f4:dc:8f:07:20:30:f5:0a:60:64:49:b5:61:a2:
0a:be:da:1f:24:b2:54:fc:ab:bc:12:52:18:e5:f1:81:1e:40:
f6:80:df:78:74:49:15:ec:4d:1a:24:89:78:ca:5c:08:11:a4:
10:db:68:2a:3d:20:21:92:40:f7:cd:2e:fb:8b:d9:e1:8c:9a:
8b:da:39:10:4b:8c:d7:d0:48:56:2f:62:9e:b0:da:5d:ec:3b:
be:04:b4:49:4c:10:92:83:f4:ed:8e:95:45:ff:c5:aa:f1:9b:
94:98:95:44:b5:41:28:bc:64:fc:af:f4:a9:70:3f:95:de:1c:
be:3c:5b:16:33:81:4b:c1:c3:1d:f0:dc:18:1e:f3:05:07:bf:
11:f4:da:f4:cb:38:4d:9c:89:7f:fe:5e:f7:1f:ff:88:cc:47:
82:1a:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:24 2026 by rpki-client