Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 5NFu22Sh1eduehT+rNVU8EEVE3AX01kNizciv+XmQ1c=
Subject key identifier: 95:A5:0D:98:63:05:93:8B:85:3E:07:96:FB:7E:F5:C2:F2:30:E7:09
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6216D520FA2165F4FA96E557A7FEBEDCC2C25E5A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Sun 20 Sep 2026 05:23:13 +0000
ROA not before: Sun 20 Sep 2026 05:18:13 +0000
ROA not after: Sun 19 Sep 2027 05:23:13 +0000
asID: 26042
IP address blocks: 66.132.239.0/24 maxlen: 24
140.233.167.0/24 maxlen: 24
155.117.18.0/24 maxlen: 24
155.117.19.0/24 maxlen: 24
162.141.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:16:d5:20:fa:21:65:f4:fa:96:e5:57:a7:fe:be:dc:c2:c2:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 05:18:13 2026 GMT
Not After : Sep 19 05:23:13 2027 GMT
Subject: CN=95A50D986305938B853E0796FB7EF5C2F230E709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:e3:89:3f:f8:aa:99:94:e5:3e:8c:96:51:
39:27:62:e0:98:2c:3c:2b:8e:ca:ee:3b:c2:b3:fc:
ca:6f:bd:34:50:67:1e:2d:a0:f3:8c:59:d1:1c:66:
d4:c8:86:97:83:0c:99:69:30:95:06:31:74:3d:e9:
bb:88:da:a2:7b:a0:73:d7:f6:d3:93:6b:62:10:3b:
b9:b7:7e:0f:d0:c6:da:81:68:d5:37:88:96:f9:0e:
2d:24:50:1f:18:57:b3:88:e7:ce:2b:1a:7e:a5:3b:
db:87:e8:c2:d6:35:96:29:c1:82:b9:65:fd:e5:9d:
e8:81:f3:5a:39:37:f8:ad:54:9b:91:11:fc:f2:0e:
bc:61:42:1f:d5:00:0e:20:c1:15:8b:af:af:4c:f2:
a1:a1:2d:a0:09:54:9c:5e:c5:c8:07:d8:40:e2:8c:
46:52:fc:ce:ca:01:b0:fd:e3:e3:ab:50:e8:ba:26:
27:83:cc:7e:40:d5:9e:51:2f:5f:05:2c:d5:07:7e:
57:d6:39:44:43:5a:f6:17:ab:e9:03:db:a3:fd:01:
b9:51:a0:ce:74:37:b8:50:23:7b:af:87:51:4e:60:
79:27:9f:60:ce:42:61:14:4b:b5:b3:fc:3c:66:58:
fb:7b:52:85:61:2c:23:2c:f4:fd:6b:3a:47:8a:86:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:0D:98:63:05:93:8B:85:3E:07:96:FB:7E:F5:C2:F2:30:E7:09
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.239.0/24
140.233.167.0/24
155.117.18.0/23
162.141.15.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8b:40:aa:94:77:06:53:bd:9f:75:0c:73:6d:29:1c:89:13:
c4:40:d1:67:37:e9:84:95:f3:e0:34:3f:04:ad:9d:f8:56:92:
1f:1d:fc:92:20:72:43:bc:9d:aa:f2:5f:63:d5:d2:cc:93:11:
f9:38:7d:f9:97:fe:20:03:8a:64:2e:5a:5a:02:4b:4f:df:60:
50:67:6b:e5:d9:87:a0:46:2d:ed:2a:0f:21:51:f3:68:c2:94:
fb:5f:7d:01:d0:33:8d:8c:11:f7:ed:78:3c:c3:ee:d4:a0:61:
40:14:75:5a:35:1d:79:7c:40:e7:1d:25:8e:b3:48:46:69:97:
9a:8c:7e:d0:91:48:a5:26:6c:f1:f6:3b:8c:d8:90:66:18:e3:
4c:75:7b:a1:fb:2e:8e:55:5b:c3:c7:03:a1:60:4b:18:da:61:
9f:3c:b1:1c:d2:65:55:d9:29:b7:76:53:e9:ad:a6:2f:a6:c5:
be:5b:7c:94:5c:29:f3:f5:e1:f2:69:3c:7c:8c:89:71:32:0f:
f2:5a:6d:8a:34:98:82:5e:36:bf:70:66:c9:a8:cf:d5:d4:f7:
bf:23:b5:df:02:c0:d9:d6:2d:ba:78:e5:a6:a3:d4:33:80:8d:
94:e1:3e:2f:09:b8:90:7a:9a:f3:58:fe:49:14:0a:2e:fe:23:
0e:7a:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:05 2026 by rpki-client