Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: ySI0sMOrVAo4EjXP07We4ycxJ1gdIvkrZLoEAcfVs2s=
Subject key identifier: ED:11:54:A1:01:1B:36:43:23:EE:4E:7D:5A:45:C9:70:3C:B5:B5:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5086344AB6D7C3A8AAD37051B0E8B38AA3DD3C2A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
Signing time: Mon 27 Jul 2026 00:02:10 +0000
ROA not before: Sun 26 Jul 2026 23:57:10 +0000
ROA not after: Mon 26 Jul 2027 00:02:10 +0000
asID: 42960
IP address blocks: 155.117.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:86:34:4a:b6:d7:c3:a8:aa:d3:70:51:b0:e8:b3:8a:a3:dd:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 26 23:57:10 2026 GMT
Not After : Jul 26 00:02:10 2027 GMT
Subject: CN=ED1154A1011B364323EE4E7D5A45C9703CB5B528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:65:6d:60:6b:69:02:be:b4:4d:52:52:8e:
d8:85:f7:9c:12:ab:0c:02:5a:3a:65:5c:99:e3:3b:
2e:22:7b:3d:d4:c2:29:00:98:e6:86:72:0b:76:67:
a2:0e:b4:88:7f:6b:c5:fe:67:bb:8c:72:83:35:39:
d6:df:d9:0f:9b:8c:12:85:eb:0b:13:0c:ef:87:d5:
b5:32:c2:21:e8:34:5f:25:cc:7b:3f:ab:1b:e0:85:
e0:c7:85:09:ed:b8:25:11:20:56:87:dc:43:79:fd:
e5:1a:b6:66:74:6a:aa:7a:c6:ce:f7:da:c3:6c:0c:
31:20:3b:f2:e4:ab:14:91:87:89:12:0a:76:9d:13:
f9:f7:77:5d:d4:ca:06:c7:d4:8b:78:58:6b:03:01:
27:f2:5e:3e:97:bd:45:cb:32:c2:69:ba:33:fa:f5:
ba:95:3d:84:7a:71:45:fd:cb:66:a3:f8:21:00:43:
ad:ca:3c:ac:3e:47:f0:da:57:35:e0:ad:e7:7d:fe:
a9:79:f4:81:44:9f:e5:e9:60:11:d2:2a:93:3a:23:
74:e8:8d:03:00:f1:96:d9:72:20:b0:4f:49:30:c5:
84:d0:43:b2:32:33:d0:e1:1a:84:d5:a5:35:01:eb:
4b:35:de:d1:98:69:f0:b9:c6:76:a7:a6:6f:07:70:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:54:A1:01:1B:36:43:23:EE:4E:7D:5A:45:C9:70:3C:B5:B5:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.251.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:1a:b1:4f:11:11:ef:39:95:50:bd:24:86:34:ad:95:51:
dc:de:08:7e:6c:b7:d2:36:c3:dd:4f:75:59:85:11:4b:b3:61:
3b:b3:dd:3c:ea:16:d6:f0:6c:a4:af:60:ed:57:8c:02:b4:8c:
15:a7:76:1a:62:10:11:43:eb:95:49:9e:f4:86:01:16:d1:0c:
d4:b5:af:21:4b:41:1c:7d:6c:8f:70:c5:e6:20:98:f9:4b:d8:
07:18:f9:53:29:97:b8:66:2d:17:b6:38:29:b1:fb:f9:1e:f0:
0b:0f:c2:78:86:ce:df:4d:a0:1c:1e:2d:13:83:0b:4b:c3:0d:
71:5d:86:5c:a4:00:f5:27:9b:54:75:8d:51:04:74:6c:ee:8c:
ad:93:bc:96:61:9a:91:8f:00:da:0f:ea:49:5a:f0:ee:09:57:
29:57:90:e7:02:69:46:88:c8:3f:eb:a7:68:d2:e9:b1:34:69:
a7:3c:b5:d7:09:00:95:ee:fd:ef:7f:c2:36:4b:ef:7f:c3:cc:
4f:9b:ab:16:88:cf:5b:f8:5e:4f:0e:b1:3c:a9:c1:f7:7b:b0:
9b:86:aa:f4:77:8e:3e:ea:06:2f:83:4c:cc:a9:de:7d:f5:73:
eb:b8:c4:4c:0d:ae:3c:d8:4b:de:f4:2f:15:24:62:18:8b:9b:
8d:10:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:30 2026 by rpki-client