Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: fSV2BKe3oVMVVruHBSNin01SiyJRrcDjtn3XhE5QOYA=
Subject key identifier: D9:B4:2E:AA:01:00:E8:2A:7C:0E:B9:A9:D5:CA:FC:AA:43:C1:AC:4D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14839FB902C49C702A4D9AD0B860CE816E77887C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
Signing time: Wed 01 Jul 2026 12:32:19 +0000
ROA not before: Wed 01 Jul 2026 12:27:19 +0000
ROA not after: Wed 30 Jun 2027 12:32:19 +0000
asID: 42689
IP address blocks: 82.24.188.0/24 maxlen: 24
82.25.137.0/24 maxlen: 24
82.25.141.0/24 maxlen: 24
82.25.144.0/24 maxlen: 24
82.25.184.0/24 maxlen: 24
82.27.9.0/24 maxlen: 24
82.27.99.0/24 maxlen: 24
82.27.104.0/24 maxlen: 24
82.27.120.0/24 maxlen: 24
82.27.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:83:9f:b9:02:c4:9c:70:2a:4d:9a:d0:b8:60:ce:81:6e:77:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 12:27:19 2026 GMT
Not After : Jun 30 12:32:19 2027 GMT
Subject: CN=D9B42EAA0100E82A7C0EB9A9D5CAFCAA43C1AC4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:0c:1b:26:91:9d:82:6f:89:b8:a1:9a:85:
f1:11:a6:d9:52:3a:a7:4e:f7:2c:77:5d:c0:bb:84:
1c:ed:ab:b3:c9:93:3d:72:67:fa:4a:d9:b3:31:f9:
85:c7:f2:99:71:aa:a9:7e:3a:7c:c1:ea:03:2c:c2:
3a:f3:46:62:8e:f4:3a:10:07:fc:1b:85:c8:0c:1f:
4f:aa:cd:3c:78:f2:aa:a4:98:10:e4:10:b0:84:78:
92:08:8a:ac:e6:ec:b7:91:26:8e:c0:ca:19:2a:43:
6f:d3:fe:04:19:8d:5b:ea:f1:81:03:21:33:63:20:
11:ab:7e:b5:11:1e:8e:91:4f:71:e2:9a:7d:a1:f8:
06:04:f7:70:63:24:a1:c3:54:d9:c1:82:56:17:fb:
32:7a:e1:dd:c7:5d:72:3f:65:a7:b7:10:25:c7:f4:
6a:12:a9:ed:f6:35:1e:26:82:82:61:b1:e5:3a:49:
fc:61:d9:82:f5:a5:58:a9:1e:fc:df:99:fd:5c:7b:
8a:4f:25:52:67:6f:71:52:07:94:1e:e1:d1:46:bf:
d6:9f:0e:20:37:12:f1:c6:41:50:f9:35:3a:f2:90:
77:cd:e5:1b:b6:be:c5:f5:bd:4b:20:30:12:b2:a4:
df:78:ab:d0:b0:65:8a:88:13:ff:74:76:d6:f0:33:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:2E:AA:01:00:E8:2A:7C:0E:B9:A9:D5:CA:FC:AA:43:C1:AC:4D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.188.0/24
82.25.137.0/24
82.25.141.0/24
82.25.144.0/24
82.25.184.0/24
82.27.9.0/24
82.27.99.0/24
82.27.104.0/24
82.27.120.0/24
82.27.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5e:51:bb:a5:4c:45:6c:b0:5a:82:b2:95:53:2f:e2:fd:4d:
f2:f6:e0:43:3f:3f:ae:ce:20:ad:41:04:e5:ff:22:63:92:71:
2f:13:d6:e9:ed:ca:b5:2e:8e:a0:00:fa:22:25:a8:24:4a:a8:
9b:75:0d:6c:f1:f4:d1:a1:36:67:38:d5:0f:28:e6:a3:c1:24:
93:4d:a3:e7:19:b6:83:5b:74:d8:85:88:88:e5:5d:56:d4:3f:
08:eb:4c:36:b8:d0:9a:fe:5d:db:b3:3a:be:f1:71:24:36:74:
cf:30:45:37:dc:96:ee:f2:46:ac:35:e8:3d:5f:30:48:1c:67:
da:31:06:d0:c0:84:18:d2:76:22:b7:e1:0a:b6:6d:0e:3f:87:
68:98:e2:b3:bd:ca:8a:5f:94:85:31:3e:ce:b4:6b:0c:24:d0:
39:ae:b2:12:1c:36:c2:ca:55:28:7d:c4:8d:e1:38:59:0a:26:
56:82:98:f5:13:90:39:11:b8:74:ba:c9:6d:45:f3:a2:95:1b:
4e:db:36:a7:3d:8c:8b:0f:2c:f0:93:cc:45:ae:40:16:cf:eb:
a3:52:07:20:7c:f9:6c:36:96:1d:24:68:98:0d:8f:13:7e:f8:
20:c3:59:ec:8d:7f:ae:63:8f:e5:49:0b:87:13:74:6f:02:99:
0f:c2:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:35 2026 by rpki-client