Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: WAC4x29u3a3+9CsMMoRq416Z4i9NU6p23C5gN7CaYeU=
Subject key identifier: 1A:CE:89:83:10:FD:F5:87:C8:CB:8D:30:A1:AC:86:93:8E:FF:55:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 476B0C72BAFEE5870D5A76A5BEB8AC346C754B1D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Wed 27 May 2026 04:46:07 +0000
ROA not before: Wed 27 May 2026 04:41:07 +0000
ROA not after: Wed 26 May 2027 04:46:07 +0000
asID: 26042
IP address blocks: 155.117.18.0/24 maxlen: 24
155.117.19.0/24 maxlen: 24
162.141.15.0/24 maxlen: 24
162.141.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6b:0c:72:ba:fe:e5:87:0d:5a:76:a5:be:b8:ac:34:6c:75:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 04:41:07 2026 GMT
Not After : May 26 04:46:07 2027 GMT
Subject: CN=1ACE898310FDF587C8CB8D30A1AC86938EFF5512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:dd:c4:4e:80:e2:6a:66:3b:5a:a8:b0:c0:
59:ee:29:3e:f0:6c:a4:fb:6c:bb:1c:0d:4c:45:70:
90:ee:7f:07:07:7a:1c:02:fc:7e:eb:85:85:cf:40:
bd:65:7d:6d:3a:f0:87:6a:eb:0f:da:0d:eb:e2:32:
62:e6:84:fc:c6:84:2f:9a:38:15:17:26:71:46:43:
7e:c0:52:3f:9d:05:1b:52:b4:56:e8:fd:ea:b8:62:
71:cf:3e:a5:e5:2b:09:97:36:d9:e7:5c:5a:dc:44:
d4:4d:09:c5:6d:48:c4:c0:74:68:cb:c6:a8:c9:2a:
be:ae:fd:aa:24:15:1f:f0:f3:a1:ce:25:6b:23:0d:
c0:16:c2:ed:e5:60:c6:22:14:db:60:cf:55:20:21:
31:f9:3f:ff:c6:ba:52:2b:9f:5c:0d:08:4f:c3:86:
19:a2:b3:47:d9:2c:d2:c6:33:a2:3c:47:e8:13:97:
d9:e1:28:32:65:fb:60:81:25:e5:e5:93:0a:b2:a7:
54:49:d8:21:87:17:85:c6:a7:ea:5f:b5:4d:55:9c:
e4:1d:18:cf:3f:e9:43:c7:9f:9a:55:8f:bd:c8:ce:
7f:38:ad:5e:0d:c6:95:9c:14:02:a6:a4:ce:18:f5:
99:0b:2a:c8:a3:68:14:cd:95:75:78:3c:8c:77:9d:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:89:83:10:FD:F5:87:C8:CB:8D:30:A1:AC:86:93:8E:FF:55:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.18.0/23
162.141.15.0/24
162.141.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:14:4e:2c:a0:fa:d8:f9:64:11:b8:2d:c9:74:aa:32:15:00:
2f:0d:12:ba:53:52:e3:f2:b9:9c:10:31:6c:58:fa:c2:80:f9:
df:f7:d1:be:21:ec:e7:91:ca:ed:f7:6e:44:04:9d:bc:bc:57:
23:c8:42:4c:78:87:f9:c2:47:56:b5:29:19:42:f4:5e:34:8e:
6e:01:33:8c:5f:cb:fd:61:75:93:f2:d4:4d:d4:9d:13:79:f8:
91:88:2f:2f:e5:76:7e:5f:d3:ee:00:60:b3:04:40:73:f7:c0:
25:25:cd:58:6c:df:5f:19:88:32:8d:8a:94:40:58:ae:2b:e8:
34:9b:f7:7a:93:87:f2:75:8a:cc:b3:79:b1:31:9b:c5:87:9b:
80:78:d0:96:07:ec:8b:6c:1b:21:60:11:83:8d:be:96:4b:de:
a5:33:68:bb:40:34:2e:a9:e4:02:6d:c9:ee:31:95:4e:d1:a2:
9f:d3:d1:42:cb:04:0d:6f:b0:08:c8:41:fe:0e:85:57:d9:af:
bd:10:71:14:6e:34:0e:ad:1e:fa:26:29:e4:4c:2e:0f:df:ec:
2e:75:bd:68:38:8c:7c:c0:fe:00:06:a2:af:02:62:33:c4:89:
2b:ec:eb:ff:33:a3:c7:06:e0:dd:48:fe:1b:b9:0e:02:0e:23:
2e:b5:9f:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:18:33 2026 by rpki-client