Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: M2+RlLaMnRZkMZDScK5YDWqogQ0iZasEZugTYbC04K4=
Subject key identifier: 7A:F2:D7:14:AB:4B:B9:D7:DA:D4:62:F5:6F:C1:CE:FA:B2:AD:CC:B9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5DBA320A37A340F127097B62702659D19B0B2CE1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa
Signing time: Wed 27 Aug 2025 13:41:45 +0000
ROA not before: Wed 27 Aug 2025 13:36:45 +0000
ROA not after: Wed 26 Aug 2026 13:41:45 +0000
asID: 26042
IP address blocks: 2a14:7582::/32 maxlen: 48
2a14:7584:1000::/36 maxlen: 48
2a14:7584:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ba:32:0a:37:a3:40:f1:27:09:7b:62:70:26:59:d1:9b:0b:2c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 27 13:36:45 2025 GMT
Not After : Aug 26 13:41:45 2026 GMT
Subject: CN=7AF2D714AB4BB9D7DAD462F56FC1CEFAB2ADCCB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:d7:c5:5f:0d:3d:89:9e:61:7d:c8:70:be:
58:1a:57:35:36:5c:1f:4d:3e:9d:e2:5c:2c:6a:b9:
ce:2b:8c:fa:83:ce:35:31:2f:3a:1e:64:04:3b:13:
89:4d:df:fa:56:e7:ce:97:e0:8a:1e:58:3d:4c:39:
41:43:73:6e:d4:71:1c:60:6b:b5:d0:a8:46:b9:ae:
16:74:5d:ec:25:76:2d:c8:4b:28:51:68:82:63:98:
ac:49:dd:f1:d6:27:43:ce:94:7a:41:d3:1c:24:2a:
5c:de:8b:e7:4e:61:e8:d7:48:d3:65:96:01:1c:98:
f9:02:81:d0:ab:89:10:00:02:fd:b6:c4:31:b0:90:
c1:67:7e:d6:20:21:ed:99:5b:29:84:bc:3b:05:07:
09:1a:9b:71:44:6c:3a:67:73:36:10:68:00:2e:c6:
94:ac:a4:8e:7f:d7:94:74:9b:39:0d:7e:0b:00:60:
2d:b6:ba:81:ef:4d:e2:18:5c:88:2e:4a:3d:28:ec:
8a:5e:48:7e:9e:b4:a8:70:dc:07:f0:2e:25:b8:d2:
f7:fd:2d:30:a1:4e:f0:5d:b5:3c:68:1d:03:8e:b5:
38:96:a5:6f:7f:0e:fc:2f:56:4d:f3:55:91:68:e6:
e4:19:40:8f:40:c7:19:31:e2:4a:4c:53:fb:01:4b:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:D7:14:AB:4B:B9:D7:DA:D4:62:F5:6F:C1:CE:FA:B2:AD:CC:B9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582::/32
2a14:7584:1000::/36
2a14:7584:5000::/36
Signature Algorithm: sha256WithRSAEncryption
78:6a:9c:e2:b6:18:b1:1b:1c:20:6d:e3:ea:b5:3f:63:2d:7b:
87:90:cb:e5:1f:cd:d8:57:df:96:ba:5f:80:66:29:90:9e:27:
bf:e5:6a:06:11:a2:61:ed:70:03:57:da:99:43:4c:86:e8:2a:
75:85:d5:d1:66:6b:3a:99:c4:d2:37:81:10:20:84:7c:1e:58:
83:48:17:0a:cc:ce:e5:7b:b2:ea:9a:20:b1:40:43:d4:0c:2a:
13:3c:c7:93:50:4f:c8:33:54:20:62:ec:7b:1f:ac:f0:61:4e:
12:96:56:37:62:0e:50:57:b2:93:28:95:d3:90:0e:a1:2b:7e:
02:8a:eb:48:62:40:c6:11:8c:0f:e3:62:1c:6f:02:3f:f3:f0:
da:c5:77:60:9a:18:16:12:e6:3a:6f:2a:b0:7a:13:d5:57:6c:
30:93:4a:cf:97:16:b9:87:d3:c6:eb:2e:52:1d:d9:e4:5c:9a:
29:f3:b6:13:65:cf:8e:58:ee:64:19:42:ae:a4:a0:d7:2d:43:
77:d6:53:89:49:1a:4d:25:de:eb:d8:e7:fd:66:64:53:57:36:
56:3a:88:3d:20:86:ce:83:11:2b:f3:26:87:37:72:4c:55:7c:
42:fe:e4:8c:95:d2:3f:58:66:58:0d:ba:b5:7b:d8:0b:99:71:
86:78:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:21:07 2025 by rpki-client