Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: Nnias2gWDBfb2d77ecH/evPm8GvM8F/Us/YgroL4Z9g=
Subject key identifier: 59:42:E3:8E:65:99:62:54:BF:02:D7:21:67:C9:51:A1:88:B1:C0:DC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 187AFC56A3D9630ABF912E35737347C43EDF7475
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Fri 18 Jul 2025 07:25:11 +0000
ROA not before: Fri 18 Jul 2025 07:20:11 +0000
ROA not after: Fri 17 Jul 2026 07:25:11 +0000
asID: 26042
IP address blocks: 96.62.101.0/24 maxlen: 24
155.117.243.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
162.141.15.0/24 maxlen: 24
167.148.164.0/24 maxlen: 24
167.148.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7a:fc:56:a3:d9:63:0a:bf:91:2e:35:73:73:47:c4:3e:df:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 18 07:20:11 2025 GMT
Not After : Jul 17 07:25:11 2026 GMT
Subject: CN=5942E38E65996254BF02D72167C951A188B1C0DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:00:64:e1:a6:56:62:33:e6:6d:44:27:b4:
92:4e:50:a9:a2:7d:3e:e4:b5:26:36:54:12:76:48:
e0:d2:8a:94:6f:2e:23:d8:cc:f6:3e:ef:dd:47:30:
7c:d4:05:3d:70:02:f6:a6:ba:5f:d7:ba:cf:9a:c4:
4f:a3:32:d7:00:5c:7f:d5:b5:8d:2a:66:76:79:c0:
2c:3a:44:4b:49:8d:24:dd:74:99:b7:ac:b7:04:a4:
b0:5a:3e:ce:54:4a:38:4f:71:3f:50:e6:50:8c:12:
98:0d:d4:94:bb:77:1c:a4:7e:e5:f0:5e:76:3c:da:
65:e6:03:3a:19:95:e5:3e:ca:4e:19:64:4c:5b:cd:
34:af:ee:7b:a4:df:f5:d5:c0:21:c6:a5:8e:2f:e6:
01:3d:5c:1c:a9:bd:34:79:23:86:da:33:e2:27:83:
e4:04:29:ee:c2:11:19:16:af:09:25:7d:da:3b:6b:
2a:25:82:13:19:99:66:bf:29:44:08:60:d1:fa:05:
f3:10:af:1e:52:45:dd:f1:de:66:1c:2a:4b:c5:8f:
a8:9a:bd:e3:64:14:83:1d:a4:35:03:27:6d:fb:27:
e7:8d:d3:03:e9:18:e0:44:a0:c9:77:d9:69:6d:97:
a5:34:ea:0b:a5:51:60:d8:3f:2b:90:4e:7d:d9:72:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:E3:8E:65:99:62:54:BF:02:D7:21:67:C9:51:A1:88:B1:C0:DC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.101.0/24
155.117.243.0/24
162.141.5.0/24
162.141.15.0/24
167.148.164.0/24
167.148.189.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6c:88:03:16:b2:13:16:bf:4a:f2:f0:61:8d:79:99:76:24:
db:7f:db:ff:78:4a:61:50:07:3b:69:08:58:df:88:b5:3c:db:
9a:f3:6d:43:8f:5f:0e:28:90:05:2f:26:d5:21:af:59:2e:63:
4e:8f:9f:94:74:c9:34:ef:30:47:1f:2a:d4:f6:d0:54:98:b2:
19:c6:d6:05:90:14:0c:dc:b0:7b:17:70:0a:0f:ff:d2:33:a8:
dc:24:e5:5e:86:bd:1d:24:48:cc:0f:d7:3c:cc:c4:7b:14:6b:
b6:31:04:24:0c:b6:d2:5d:69:9e:0b:cb:9d:be:da:df:11:df:
31:e2:97:d4:bf:09:c8:4b:aa:10:f6:bd:db:f5:32:6a:c3:7f:
49:81:ac:28:06:82:cd:c3:03:f8:b4:ea:2f:47:8d:34:a2:d7:
c9:01:8c:17:04:24:41:27:e2:c7:14:80:9f:57:c9:2d:80:95:
6c:74:ae:bb:4c:12:10:ef:02:f2:fc:ce:24:3e:a2:ec:e8:7f:
aa:b1:56:17:e2:8f:24:67:4c:8f:7d:c4:58:a6:25:5d:4c:db:
38:2c:63:1d:65:ff:df:37:81:4b:f4:81:88:a5:6f:9f:0a:ee:
59:6c:be:fd:e0:a9:16:ec:8a:d0:41:74:7c:58:79:1d:73:9c:
0f:3f:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:58:52 2025 by rpki-client