Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: 033uhrfLZtWQNhu+16SVclSlR8t3IJJXpkr+SdWBNwA=
Subject key identifier: 0E:61:20:2F:2D:96:2E:84:A7:A4:0F:66:B6:46:3C:0E:25:17:4D:F7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 792800FD669B851A1BCBF2C5C94B5E8199560283
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42960.roa
Signing time: Wed 17 Jun 2026 02:31:17 +0000
ROA not before: Wed 17 Jun 2026 02:26:17 +0000
ROA not after: Wed 16 Jun 2027 02:31:17 +0000
asID: 42960
IP address blocks: 84.75.171.0/24 maxlen: 24
84.75.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:28:00:fd:66:9b:85:1a:1b:cb:f2:c5:c9:4b:5e:81:99:56:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 17 02:26:17 2026 GMT
Not After : Jun 16 02:31:17 2027 GMT
Subject: CN=0E61202F2D962E84A7A40F66B6463C0E25174DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:ab:8d:7f:7d:c9:50:00:83:36:37:53:33:
5b:09:06:11:9a:41:8b:b8:20:06:a5:6f:0a:8b:26:
a0:51:12:97:ad:b7:57:73:c9:d6:b2:a6:8a:3d:a1:
eb:8c:34:42:71:a4:a0:c5:c5:41:ac:da:cf:40:50:
11:05:7c:8e:c1:da:74:95:79:97:4b:80:25:5d:9d:
a1:65:6c:9b:ac:a0:1f:21:5b:84:ef:83:85:84:7f:
6b:3a:32:a3:a4:12:18:ca:cd:fd:9a:c5:1b:62:51:
0d:40:33:f8:bb:51:d5:48:33:47:6d:10:95:56:6a:
ed:0c:83:46:4d:c0:31:37:93:3d:62:85:92:4c:07:
ab:c8:ed:4e:dd:62:86:db:7d:22:9e:4e:67:54:c3:
24:3b:36:24:00:41:f1:0c:61:3c:06:49:15:4c:19:
88:14:71:98:8d:0f:a4:70:ab:77:4c:f7:67:e1:7d:
6b:65:ab:c9:e4:00:14:ab:9f:61:53:33:05:91:30:
78:5e:57:53:d8:45:f7:a7:aa:30:b2:72:4e:54:f0:
74:5a:26:d3:57:72:1d:c9:54:80:96:44:64:23:72:
df:a1:bf:32:53:5e:ce:eb:7c:55:81:04:9c:c7:05:
80:4a:25:e7:67:5c:b1:90:25:ee:2a:fd:a8:f2:80:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:20:2F:2D:96:2E:84:A7:A4:0F:66:B6:46:3C:0E:25:17:4D:F7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.171.0/24
84.75.178.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a4:51:9f:fe:96:83:5c:d3:3b:6a:73:a8:17:a8:ac:c0:09:
39:02:08:e7:ff:a8:8d:d3:df:64:a4:2c:d0:c2:1f:bf:6c:0e:
69:b0:14:c6:9f:ca:8a:26:11:af:cc:cf:48:01:bd:a3:42:87:
0f:49:1b:5b:bc:c7:a0:d7:62:37:d1:70:ac:ef:70:2f:f6:dc:
5d:55:43:af:51:1d:99:17:da:52:88:00:85:43:2f:56:c4:51:
30:6d:49:2f:39:bc:a2:c6:7c:26:e9:dc:e9:34:f7:53:e3:d9:
ca:99:0e:b3:a9:5f:42:06:9a:46:49:48:99:c4:8c:4b:a4:52:
5b:3c:f6:ea:17:e4:a5:fa:43:21:26:f3:6f:af:ec:40:34:a2:
b8:fb:e2:67:dc:30:0d:8a:a0:46:a5:90:ae:e4:d4:24:bf:d1:
95:34:bd:70:4d:9c:1c:be:f9:70:c2:ae:50:77:13:16:39:51:
08:ad:44:3d:1e:6d:c0:90:18:ca:f2:82:2d:68:2d:e2:6a:eb:
33:5c:91:33:2a:90:2a:25:e2:09:db:13:4b:7b:2c:fc:2b:c8:
d5:13:53:6b:ed:06:b5:bd:a2:4d:ae:8b:63:5c:22:86:e2:27:
60:36:bb:8e:fc:6a:43:32:3a:7a:5a:7d:78:64:c3:ef:45:a5:
6c:c6:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:37 2026 by rpki-client