Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: FJolpSocsoIRFPAzkPfnf7oh9O3bHMZECJIuJdIIM3E=
Subject key identifier: 65:97:EE:6F:F0:29:56:40:C4:DC:52:B4:AC:C0:5F:96:1D:A4:ED:9D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 34F776B82EA91F511EC25411A23814936295B181
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa
Signing time: Wed 27 May 2026 07:47:18 +0000
ROA not before: Wed 27 May 2026 07:42:18 +0000
ROA not after: Wed 26 May 2027 07:47:18 +0000
asID: 42689
IP address blocks: 155.117.221.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
167.148.105.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f7:76:b8:2e:a9:1f:51:1e:c2:54:11:a2:38:14:93:62:95:b1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 07:42:18 2026 GMT
Not After : May 26 07:47:18 2027 GMT
Subject: CN=6597EE6FF0295640C4DC52B4ACC05F961DA4ED9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:13:f4:d9:8c:71:40:12:4c:1e:e1:1e:a9:
c8:2a:32:72:11:c7:89:ac:28:a1:27:cb:32:db:a8:
8b:51:e0:c9:48:29:ee:0c:a6:33:84:ae:b8:17:24:
80:9c:58:a0:97:9f:24:8e:c9:4e:02:61:bd:57:61:
90:f5:1c:08:eb:a7:d0:35:a3:29:ce:7c:b0:b3:96:
9f:21:fd:a2:7e:28:16:6a:38:32:90:25:5e:28:f5:
ec:d9:00:26:42:ae:62:12:ba:c0:0c:49:de:c9:19:
35:dc:2c:56:0f:99:04:ec:f6:34:c0:51:63:69:2c:
b2:dd:2f:b6:d0:60:d5:b8:8f:2d:45:80:fe:92:da:
03:78:c6:58:50:26:21:56:f4:5c:c2:52:c6:f6:ab:
62:18:11:06:26:bb:fa:39:b4:1a:c8:1a:f5:60:e6:
8d:72:6c:38:42:2b:1c:4d:6a:7a:ec:2c:42:dd:a6:
f2:f9:5a:48:13:48:10:12:7c:0c:83:17:0e:73:9b:
f4:7c:54:bd:05:5e:75:2f:91:33:6a:ad:ab:01:23:
26:16:54:d1:3a:cc:4b:3d:60:94:44:6b:17:32:29:
d4:be:37:db:a4:b9:e2:41:7c:8d:bb:87:aa:49:86:
f0:c0:6a:a9:31:2e:76:03:d3:d6:c5:a2:33:17:c8:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:EE:6F:F0:29:56:40:C4:DC:52:B4:AC:C0:5F:96:1D:A4:ED:9D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.221.0/24
162.141.158.0/24
167.148.105.0/24
167.148.215.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d3:64:a6:2c:b2:83:ae:b0:f5:06:18:fe:b5:9a:0a:1c:2f:
b2:0f:23:3e:61:da:26:09:9e:85:65:19:87:6a:00:6a:a9:bb:
0a:c6:8a:a4:fc:d4:d6:1f:c2:ac:0d:52:85:f4:dc:08:1a:e9:
d6:cd:e0:59:c5:13:45:15:09:af:5e:83:e8:c6:b0:0a:99:32:
3c:59:73:12:c7:d9:df:cb:e6:99:b2:dc:46:59:64:e6:cd:9a:
99:b9:36:ac:1a:24:a6:7b:9d:71:e1:e4:5d:0c:67:86:bd:bd:
e5:0b:ee:32:ac:c3:06:b4:a2:9d:58:a5:d6:85:c0:bd:6a:0f:
32:61:7a:5d:35:f4:68:08:57:e8:e0:85:25:ca:6b:ae:f1:ed:
18:e9:8a:0d:40:c4:45:d6:63:a2:65:0b:95:61:58:0b:5c:39:
4a:84:46:e1:9c:e8:b4:7f:05:f7:96:08:f3:c2:c3:3c:1b:73:
c3:86:8a:8c:6c:c9:63:26:2a:14:9e:6f:4f:4f:65:3b:a0:78:
03:29:53:6f:c3:6f:e0:5e:d3:3f:ee:d9:c4:03:ad:c3:9e:15:
5f:dd:ca:87:64:62:63:c0:cf:11:cc:55:2d:61:5c:79:c7:45:
41:80:0a:5d:76:74:c8:2b:4d:87:ec:c3:2f:2e:dd:97:68:1d:
2e:ee:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:17:07 2026 by rpki-client