Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: XCDI6gIBGHZNb1BqOUrBDM3LCBFqNsnXPaV/FumK5Kg=
Subject key identifier: AD:E4:AA:6C:D1:C9:FA:60:E6:19:85:A8:18:84:24:E2:C9:B8:CB:78
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A4082ECD61F5CC7A6EEECFF8D659D8815090408
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa
Signing time: Fri 20 Feb 2026 07:46:17 +0000
ROA not before: Fri 20 Feb 2026 07:41:17 +0000
ROA not after: Fri 19 Feb 2027 07:46:17 +0000
asID: 42689
IP address blocks: 143.14.174.0/24 maxlen: 24
155.117.205.0/24 maxlen: 24
155.117.221.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
167.148.105.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:40:82:ec:d6:1f:5c:c7:a6:ee:ec:ff:8d:65:9d:88:15:09:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 20 07:41:17 2026 GMT
Not After : Feb 19 07:46:17 2027 GMT
Subject: CN=ADE4AA6CD1C9FA60E61985A8188424E2C9B8CB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:d7:1c:4e:ce:b5:a7:4a:65:67:ee:a3:82:
58:5e:99:1f:7a:a2:39:86:b4:df:78:05:39:c8:3e:
7e:20:bb:c7:2f:2c:2e:3e:6d:7f:82:e6:2b:2f:f2:
59:94:67:b4:63:44:97:04:01:fd:99:f2:0b:61:32:
cd:68:aa:64:f9:8e:5d:f8:f6:74:4b:1a:68:7c:da:
71:2b:b0:02:44:da:45:33:93:85:34:3f:8f:ec:f0:
e7:e9:fc:38:dc:9e:1f:f3:76:82:1d:c1:e4:f9:39:
c1:ef:5e:ae:b8:e0:91:3d:94:ad:77:98:85:1a:11:
62:3e:59:6b:bd:e6:2c:06:2c:d9:4a:d2:df:ca:80:
80:06:6e:f1:92:23:09:32:d2:66:00:a5:b0:05:8a:
ed:05:17:0a:14:eb:3f:e4:b2:0e:66:a6:99:af:fd:
53:f1:e6:ff:b4:6c:dc:b8:f2:a6:51:0a:7e:06:10:
34:e8:0b:4a:20:e1:8c:6e:e8:c5:eb:53:3a:f5:3a:
88:b9:72:26:82:8e:a8:f6:d4:bf:6b:ef:d0:d5:57:
4b:fe:dc:76:5d:45:67:7c:24:70:9d:44:b3:7e:b0:
95:0c:d5:9a:17:f9:b4:f8:b8:d2:0b:70:aa:c4:6c:
4c:13:75:62:9a:e2:3d:54:25:5a:40:4d:35:0d:3f:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:AA:6C:D1:C9:FA:60:E6:19:85:A8:18:84:24:E2:C9:B8:CB:78
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.174.0/24
155.117.205.0/24
155.117.221.0/24
162.141.158.0/24
167.148.105.0/24
167.148.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0b:fc:ba:bc:fe:80:14:76:32:13:ae:95:4b:c8:4c:34:3e:
c2:ba:d3:ba:0e:b7:45:9b:24:c3:21:ad:fb:bf:f4:dc:e8:94:
bf:fe:ff:06:7e:c6:18:8c:ff:88:47:b5:d1:9e:70:5e:7f:bd:
11:57:b1:c0:d7:25:84:f0:0f:e2:2e:88:5c:82:6e:52:b9:79:
3b:04:c0:b5:9b:dd:7d:75:05:9e:8f:d5:71:c5:48:0c:70:8d:
05:eb:93:8e:8c:2d:4a:cd:70:c6:99:7f:eb:c3:7c:97:cc:d4:
24:d4:71:a4:f8:6a:d1:79:2d:5a:05:a1:40:93:bb:02:a3:60:
54:fd:7d:fd:85:a0:f4:8e:24:6f:fb:97:ad:e3:39:4b:6e:6a:
30:fb:51:c4:8d:fb:8e:40:cf:f5:36:d0:46:a4:fd:fd:a6:d2:
35:0e:12:e6:ee:aa:e9:99:2c:dd:44:5f:68:51:b0:80:4e:e9:
26:79:4b:9a:dd:84:c5:99:5e:a4:25:9d:88:1b:df:ac:a3:4d:
a1:c0:a8:93:fb:04:3e:14:11:1e:f9:bb:2a:b5:b0:06:35:98:
44:9c:3c:fe:49:95:cd:cf:fe:55:55:95:90:38:ce:30:74:55:
a4:a3:78:47:07:0c:f9:25:e5:1a:23:7e:89:2d:dc:89:f7:79:
d6:3c:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:04:08 2026 by rpki-client