Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42902.roa
File: AS42902.roa (raw, json)
Hash identifier: cQqSgK2hBNidORkJfSdFgJMA+Awtyd6Wu29RHllb3QE=
Subject key identifier: 43:76:6C:86:35:CB:49:C1:E3:CC:FF:D2:A8:AB:AC:83:92:21:10:46
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0BECAAFA3C7EF126701651E5CB99B0C3902D7B0E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42902.roa
Signing time: Wed 19 Aug 2026 10:02:48 +0000
ROA not before: Wed 19 Aug 2026 09:57:48 +0000
ROA not after: Wed 18 Aug 2027 10:02:48 +0000
asID: 42902
IP address blocks: 84.75.80.0/24 maxlen: 24
84.75.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ec:aa:fa:3c:7e:f1:26:70:16:51:e5:cb:99:b0:c3:90:2d:7b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 09:57:48 2026 GMT
Not After : Aug 18 10:02:48 2027 GMT
Subject: CN=43766C8635CB49C1E3CCFFD2A8ABAC8392211046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:9c:88:95:d4:10:b0:1a:e1:dd:68:60:5b:
07:07:2f:a7:38:14:9b:0d:12:7d:7c:4e:d8:53:24:
31:0d:55:b0:8b:65:c1:d2:27:6f:c4:cc:5e:76:3e:
de:e5:d3:e6:0f:fc:19:91:4d:1d:1f:ef:4f:40:1f:
a9:7f:1f:8e:f5:d1:c9:87:af:d1:9e:f0:b3:8d:d5:
db:23:f9:da:5b:b5:1d:93:21:8d:5a:8c:dc:81:5f:
21:cd:df:58:b4:13:84:79:77:f5:5c:c1:8c:9e:d7:
65:45:76:64:b9:89:f0:5c:d5:ff:fb:e2:c5:71:a3:
56:d5:fb:94:2b:f8:9b:61:a5:41:4d:61:ad:0c:f1:
2c:1e:c9:f2:32:06:e9:26:33:fe:06:af:a8:8d:67:
a6:50:a5:9c:a6:06:14:63:11:30:29:ad:0b:77:31:
b3:6a:b6:07:cf:8e:3e:e9:6f:7a:ab:b5:11:7e:73:
36:95:ed:8b:cf:6b:92:ca:e9:f4:9e:80:c1:56:da:
93:d7:4f:7b:d9:52:90:de:b8:23:ea:15:31:bc:09:
bf:2a:5b:fe:c1:23:b7:d1:fb:33:3f:1e:ec:a2:02:
6f:68:9c:fb:d1:44:3a:dd:b7:7f:8b:72:70:d6:7c:
0a:12:4b:9f:63:28:1e:17:47:10:99:6a:a9:93:8d:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:6C:86:35:CB:49:C1:E3:CC:FF:D2:A8:AB:AC:83:92:21:10:46
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.80.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:e9:32:42:60:da:25:b8:cd:68:d6:9d:21:d5:85:5b:bb:fd:
c7:40:31:86:52:d2:93:40:d8:8a:55:76:ef:82:19:23:92:28:
15:83:24:34:c0:ac:3d:86:e9:69:38:d3:5b:82:32:5a:68:fc:
3c:5d:04:e7:5c:95:de:af:c5:18:81:a9:29:0c:29:18:f9:12:
7e:50:c0:25:ee:f4:c4:99:8f:0a:9d:93:18:ce:8d:43:cc:f2:
21:3d:23:55:f3:07:f6:ad:00:f6:ec:79:e8:6a:f5:b4:e6:8a:
df:a3:f5:9d:2b:16:aa:82:50:e9:ba:ca:18:67:f1:72:03:ec:
03:10:66:bc:69:ac:b7:aa:24:fb:17:df:2d:5f:34:17:02:a9:
3e:de:83:0d:5a:b5:23:73:bb:29:ce:8d:3b:1d:20:f8:b6:be:
46:f3:7c:38:ea:a1:56:00:31:fb:ac:0f:12:e8:03:59:5a:31:
88:8e:a2:18:f7:22:b0:25:b0:85:ed:ba:7c:f9:d2:f0:f3:70:
56:9c:43:74:65:ef:43:18:f7:2e:7f:d4:c9:c3:ff:3a:92:9e:
55:d4:6f:c5:5e:bc:02:4b:65:8a:c5:4b:43:30:63:f5:e9:08:
d6:82:60:fe:ec:9a:5a:d6:11:38:c3:47:f7:e6:47:1d:7b:15:
a9:f1:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:07 2026 by rpki-client