Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30042.roa
File: AS30042.roa (raw, json)
Hash identifier: CWQRdwkiK1a7603O9dxOP9l6GcC+0kT7cPC2ky6JDHc=
Subject key identifier: 30:50:31:AF:73:5E:8E:38:62:34:6B:FE:E9:68:4A:9A:12:83:27:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2CB2C592C6C28CAAD7C412B51763AC3972C4C4C3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30042.roa
Signing time: Fri 28 Aug 2026 09:27:34 +0000
ROA not before: Fri 28 Aug 2026 09:22:34 +0000
ROA not after: Fri 27 Aug 2027 09:27:34 +0000
asID: 30042
IP address blocks: 94.194.84.0/22 maxlen: 24
94.194.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b2:c5:92:c6:c2:8c:aa:d7:c4:12:b5:17:63:ac:39:72:c4:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 28 09:22:34 2026 GMT
Not After : Aug 27 09:27:34 2027 GMT
Subject: CN=305031AF735E8E3862346BFEE9684A9A12832795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:fd:76:d7:c4:97:47:77:3c:13:c3:ef:18:
59:6f:bb:03:18:b3:01:96:01:8c:52:00:a1:58:ad:
74:8b:1a:36:b0:d3:17:76:c3:8a:6e:18:05:1e:7a:
dc:ed:53:26:c1:a6:67:42:8f:3f:39:b0:3f:d4:75:
f8:de:04:a7:20:45:b4:ec:0d:bd:ee:ed:38:7f:e8:
d8:17:75:0a:fe:f3:bd:cc:d2:7c:d1:dc:bf:f3:9a:
83:dd:ba:15:90:4f:02:c2:f8:f7:2c:1a:9a:d0:1d:
d5:d7:a2:72:b9:ba:f4:3d:e8:65:87:c0:af:63:16:
36:18:ec:d2:66:4d:23:46:3d:8b:1b:a3:b3:78:9a:
82:76:e4:dc:df:3d:22:2a:71:9f:3c:95:c0:d4:79:
77:ea:9b:8d:31:7a:de:5d:a6:18:c6:42:5b:86:29:
b7:8b:4e:d0:d9:bb:be:24:cc:30:b3:41:58:92:2b:
2c:53:bd:40:26:90:0a:b0:09:a4:92:da:42:12:8d:
0a:00:e2:70:3f:e6:bc:cb:4f:da:9d:00:13:80:c8:
b7:55:1d:56:34:50:f1:05:5b:24:2d:68:22:57:80:
70:15:03:84:91:e6:9c:c7:09:e4:28:53:f2:71:aa:
5b:95:98:4c:c6:4d:7e:58:f3:3d:b9:f6:85:77:f6:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:31:AF:73:5E:8E:38:62:34:6B:FE:E9:68:4A:9A:12:83:27:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.84.0/22
94.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
26:8b:b2:e5:6b:eb:ee:cc:4d:16:4f:41:8c:b8:6b:a3:72:dc:
01:42:92:79:36:cf:93:9f:e1:9f:19:0a:2f:8f:a8:6c:4f:5e:
f2:c8:f6:e8:d2:d0:4a:1d:fa:cf:50:41:99:45:e1:e1:77:c5:
83:86:ca:9d:4e:fc:f8:af:22:99:32:04:2a:56:ef:48:31:f3:
26:3e:73:12:64:c6:8d:d6:fa:96:9f:06:7e:85:60:e6:58:c7:
56:90:05:94:e6:64:35:d1:e7:28:72:37:bd:80:fd:1b:db:6d:
7b:ad:16:48:d7:45:87:e6:dc:df:0e:f8:73:e4:ca:0a:13:6f:
de:90:77:48:7c:f9:55:96:f1:57:23:58:22:b2:38:c7:75:e9:
66:75:d2:07:43:c7:fd:7f:b1:50:dc:f4:11:35:77:52:c8:ca:
70:18:c4:fc:5b:ba:0c:6d:8f:75:c3:0d:98:53:ea:e9:f4:6c:
f9:7f:1f:72:a3:63:1e:37:86:ef:0f:74:31:e3:53:02:3d:7d:
5d:24:de:81:46:30:6d:f3:6a:49:7c:a1:b8:09:61:bc:2c:b6:
35:19:8f:a9:70:9f:c5:ae:de:6d:ca:84:e9:6f:b1:0a:63:db:
25:01:81:7e:7a:ea:01:72:2d:72:6d:f9:97:88:8b:f3:79:ba:
46:c3:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:47 2026 by rpki-client