Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: CzIU8gFZpN8Kv+589LbIlNgrHZLTorS5TVjGvn22MmU=
Subject key identifier: 37:29:0E:F7:E1:43:DB:D6:45:75:33:1C:A7:9B:0C:58:73:1D:BE:4D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5144E6202CCA96BFF8CDFE686E7D0AC3FE4C2237
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
Signing time: Tue 13 Oct 2026 08:05:08 +0000
ROA not before: Tue 13 Oct 2026 08:00:08 +0000
ROA not after: Tue 12 Oct 2027 08:05:08 +0000
asID: 42689
IP address blocks: 51.146.154.0/24 maxlen: 24
51.146.157.0/24 maxlen: 24
51.146.159.0/24 maxlen: 24
51.146.208.0/23 maxlen: 24
51.146.210.0/24 maxlen: 24
51.146.250.0/23 maxlen: 24
51.194.34.0/23 maxlen: 24
51.194.48.0/22 maxlen: 24
51.194.60.0/22 maxlen: 24
94.116.8.0/22 maxlen: 24
94.116.76.0/22 maxlen: 24
94.116.88.0/22 maxlen: 24
94.116.124.0/22 maxlen: 24
94.194.4.0/22 maxlen: 24
94.194.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:44:e6:20:2c:ca:96:bf:f8:cd:fe:68:6e:7d:0a:c3:fe:4c:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 13 08:00:08 2026 GMT
Not After : Oct 12 08:05:08 2027 GMT
Subject: CN=37290EF7E143DBD64575331CA79B0C58731DBE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:2c:1d:8f:e8:78:45:f8:7d:36:19:c6:72:
44:87:8c:a3:8a:c6:ed:62:0a:94:f4:07:c0:ca:2e:
73:62:bf:49:8d:98:12:e6:99:24:fe:ea:b3:68:3b:
1b:8b:10:9d:8f:33:c1:77:7e:56:b6:b8:a4:ee:07:
a8:b1:d1:4b:eb:55:a9:1c:36:45:1b:be:d7:7a:ce:
30:ae:50:b2:56:cf:9d:44:70:4a:aa:57:6d:67:f4:
1d:b2:f2:9a:4b:51:b3:cc:51:92:8b:dd:d4:b8:d1:
cb:20:37:a2:cb:c4:41:f0:c2:e6:83:9f:7a:d4:84:
62:8b:c7:9d:a7:12:f7:29:43:27:0c:64:3d:a5:09:
16:49:1d:a4:22:57:25:a6:38:00:47:86:b3:45:c1:
a2:88:96:a3:fe:f0:e0:28:35:f6:67:5d:42:c1:09:
eb:aa:4b:df:36:77:a3:b1:b4:31:12:3a:df:38:ae:
fe:5f:95:25:ee:94:fb:0d:c9:57:65:70:15:cb:62:
49:54:75:c8:5c:28:16:d6:d3:3d:ab:40:51:8d:d3:
cc:2b:41:35:fa:4e:93:60:09:45:f5:d1:fe:aa:27:
d3:e7:2d:13:1d:27:b8:65:05:3c:6b:64:e9:f7:2a:
96:55:ab:a0:8b:68:0d:2f:34:70:a5:b0:9d:0a:e1:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:0E:F7:E1:43:DB:D6:45:75:33:1C:A7:9B:0C:58:73:1D:BE:4D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.154.0/24
51.146.157.0/24
51.146.159.0/24
51.146.208.0-51.146.210.255
51.146.250.0/23
51.194.34.0/23
51.194.48.0/22
51.194.60.0/22
94.116.8.0/22
94.116.76.0/22
94.116.88.0/22
94.116.124.0/22
94.194.4.0/22
94.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:ea:47:d3:7f:d3:77:0f:b4:a4:33:14:49:58:0c:d6:de:0d:
8a:50:04:89:67:72:1f:3f:e7:8c:e3:fe:ba:84:7b:50:19:18:
97:4f:51:b3:f6:b4:7f:69:fd:9c:cb:ba:31:a6:7f:86:d5:bf:
ae:a1:12:d2:0b:e3:4b:41:27:41:f8:89:d9:2c:27:55:0b:1f:
b7:0b:a9:30:01:2a:32:0a:fa:1e:1f:df:b9:fb:bf:29:77:4f:
0e:05:f7:14:4c:94:0e:50:aa:19:72:64:3a:2d:59:59:2c:03:
d5:8a:03:e2:49:32:10:4f:17:8c:eb:8f:fe:f4:03:55:2b:7c:
b6:7e:a1:16:c9:59:98:63:1c:36:c3:14:ea:d4:02:12:9e:27:
64:5f:e6:3a:c7:da:a5:17:50:9f:63:34:44:40:bb:9b:23:08:
0a:38:53:21:1c:22:62:c3:fc:92:ec:fb:a8:31:a0:d1:ba:d1:
7d:18:fe:b6:fa:dd:2c:bc:f4:82:c8:cd:22:0f:05:58:de:35:
23:f5:76:70:c4:31:e1:5a:a6:19:3f:7d:d1:b3:9a:f9:45:58:
98:aa:1f:08:d6:68:65:f9:d0:c7:b0:f5:f6:69:b1:34:c7:7a:
27:07:b3:48:0f:da:09:06:ef:82:3c:75:12:fd:f1:5e:fe:e2:
b4:af:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:08 2026 by rpki-client