Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: CuzU3YNn0nYyqMdfl00OCwH/bA5EX+prdOHLUVWKtOs=
Subject key identifier: 20:60:F7:60:C2:3A:DE:DB:16:07:D0:37:6F:9D:65:1C:0D:89:9F:7C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 78EEDA1369490811C24AF5C6401E78DFDB2ACAA3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
Signing time: Tue 14 Jul 2026 04:35:29 +0000
ROA not before: Tue 14 Jul 2026 04:30:29 +0000
ROA not after: Tue 13 Jul 2027 04:35:29 +0000
asID: 42960
IP address blocks: 155.117.123.0/24 maxlen: 24
155.117.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ee:da:13:69:49:08:11:c2:4a:f5:c6:40:1e:78:df:db:2a:ca:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 04:30:29 2026 GMT
Not After : Jul 13 04:35:29 2027 GMT
Subject: CN=2060F760C23ADEDB1607D0376F9D651C0D899F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:6d:b9:82:83:19:0f:16:f1:52:6d:4a:15:
63:2a:ff:3e:42:f1:41:b7:e6:8d:91:84:46:b8:5f:
8e:11:29:37:76:50:63:91:2f:fd:c8:d0:f1:1e:35:
0e:05:5e:c4:59:22:09:4f:df:54:18:7f:b1:f7:73:
d7:02:eb:1c:d3:b1:35:c3:73:af:b1:c2:b2:24:64:
a1:af:5e:e0:5f:a0:d3:31:5c:a7:7b:22:f3:63:08:
6c:61:b0:eb:a7:32:51:80:38:4b:8b:bb:8a:72:47:
44:37:29:ec:c0:f8:18:4f:26:51:6f:6e:72:7e:50:
2a:70:fc:98:d0:9f:bb:16:8d:6e:82:db:75:50:83:
65:3d:a0:9a:eb:73:1d:6b:21:d8:cc:36:5a:3e:18:
2a:f9:08:c9:65:75:ec:9e:ad:3e:ea:5b:0c:11:f5:
69:5b:78:7e:25:99:16:2b:93:91:ba:3e:e1:dc:9d:
d0:db:19:e1:49:49:7a:75:56:fd:c9:2b:3e:cc:55:
18:e4:4a:55:0f:15:86:ba:b1:c6:6e:52:a1:6d:ed:
21:32:7c:05:09:2a:3f:1b:b8:21:bf:82:46:77:24:
2d:74:d7:21:0b:89:a7:4b:db:6c:88:ad:9e:06:0e:
ce:be:1c:b0:80:52:b8:e7:f9:8b:11:28:e5:b0:5b:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:F7:60:C2:3A:DE:DB:16:07:D0:37:6F:9D:65:1C:0D:89:9F:7C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.123.0/24
155.117.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3a:c0:bd:4e:0a:67:6c:b1:aa:88:cd:ea:b3:96:ba:86:b7:
7d:aa:ed:71:36:ba:ee:0e:60:dc:d4:74:56:70:56:c2:53:f2:
dd:c2:84:49:6b:d7:ac:47:f6:f6:ee:a3:cd:d5:91:be:9f:67:
94:62:e5:9c:96:17:10:4a:c4:69:29:73:03:a0:c9:b2:1d:9f:
0e:d5:70:fe:4d:eb:0d:53:3a:86:d4:96:a2:e7:33:0d:63:c2:
47:d8:b5:33:9d:75:ee:0f:0f:f5:ea:4e:12:49:db:e0:52:1f:
c7:14:81:ce:27:10:3d:1e:55:64:89:25:53:b1:85:e8:45:54:
42:5e:84:3f:c2:15:e9:40:b4:ed:f0:48:7c:46:72:ec:51:c3:
7e:aa:b1:8d:cb:0e:60:bc:d5:1e:ec:35:be:81:65:bb:43:4f:
75:fd:4c:cf:e0:55:f1:c6:e9:28:ea:1b:a9:7e:65:e8:ae:75:
bf:10:ec:65:c2:b1:f8:ea:b5:93:b3:51:3f:ef:93:22:55:c6:
da:5f:78:b9:fc:3e:18:5d:b7:ec:d7:31:17:58:d0:12:91:f4:
00:ee:7f:4b:f3:c9:c3:5e:bb:86:d4:f8:02:09:d6:96:df:8d:
64:66:c4:e2:af:c4:d3:95:20:93:5a:22:30:de:9c:6a:a7:26:
6e:1a:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:41:21 2026 by rpki-client