Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: kSaZusMPzDqtAJvsMwdFPAH8sWbR6PUnLIXK1LcKg/8=
Subject key identifier: 9D:4A:50:53:BA:C5:11:E0:C8:49:D8:53:29:4F:E0:70:35:18:E8:A8
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 6A213DFCF85B176F04517ABC34AB0796EF5736A3
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS42689.roa
Signing time: Tue 04 Nov 2025 15:37:36 +0000
ROA not before: Tue 04 Nov 2025 15:32:36 +0000
ROA not after: Tue 03 Nov 2026 15:37:36 +0000
asID: 42689
IP address blocks: 5.151.0.0/18 maxlen: 24
5.151.64.0/19 maxlen: 24
5.151.96.0/22 maxlen: 24
5.151.100.0/23 maxlen: 23
5.151.102.0/24 maxlen: 24
5.151.104.0/21 maxlen: 21
5.151.112.0/21 maxlen: 21
5.151.120.0/23 maxlen: 23
5.151.123.0/24 maxlen: 24
5.151.124.0/23 maxlen: 23
5.151.127.0/24 maxlen: 24
5.151.130.0/23 maxlen: 23
5.151.132.0/22 maxlen: 22
5.151.136.0/21 maxlen: 21
5.151.144.0/22 maxlen: 22
5.151.148.0/23 maxlen: 23
5.151.151.0/24 maxlen: 24
5.151.152.0/21 maxlen: 21
5.151.160.0/19 maxlen: 24
5.151.196.0/22 maxlen: 22
5.151.200.0/21 maxlen: 21
5.151.208.0/20 maxlen: 24
5.151.226.0/23 maxlen: 23
5.151.228.0/22 maxlen: 22
5.151.232.0/21 maxlen: 21
5.151.240.0/23 maxlen: 23
5.151.242.0/24 maxlen: 24
5.151.244.0/22 maxlen: 22
5.151.248.0/22 maxlen: 22
5.151.252.0/24 maxlen: 24
5.151.254.0/23 maxlen: 23
31.220.192.0/23 maxlen: 23
31.220.195.0/24 maxlen: 24
31.220.196.0/22 maxlen: 22
31.220.200.0/21 maxlen: 21
31.220.208.0/21 maxlen: 21
31.220.228.0/22 maxlen: 22
31.220.232.0/23 maxlen: 23
31.220.234.0/24 maxlen: 24
31.220.237.0/24 maxlen: 24
31.220.238.0/23 maxlen: 23
31.220.240.0/23 maxlen: 23
31.220.242.0/24 maxlen: 24
31.220.244.0/24 maxlen: 24
31.220.246.0/24 maxlen: 24
31.220.254.0/23 maxlen: 23
37.203.130.0/23 maxlen: 23
37.203.132.0/22 maxlen: 22
37.203.136.0/21 maxlen: 21
37.203.144.0/23 maxlen: 23
37.203.147.0/24 maxlen: 24
37.203.148.0/22 maxlen: 22
37.203.152.0/22 maxlen: 22
37.203.156.0/24 maxlen: 24
37.203.158.0/23 maxlen: 23
37.203.160.0/21 maxlen: 21
37.203.171.0/24 maxlen: 24
37.203.172.0/22 maxlen: 22
37.203.176.0/24 maxlen: 24
37.203.179.0/24 maxlen: 24
37.203.180.0/24 maxlen: 24
37.203.182.0/23 maxlen: 23
37.203.185.0/24 maxlen: 24
37.203.186.0/23 maxlen: 23
37.203.188.0/22 maxlen: 22
46.16.208.0/21 maxlen: 21
46.33.0.0/23 maxlen: 23
46.33.3.0/24 maxlen: 24
46.33.4.0/22 maxlen: 22
46.33.18.0/23 maxlen: 23
46.33.21.0/24 maxlen: 24
46.33.22.0/24 maxlen: 24
46.33.28.0/23 maxlen: 23
77.244.128.0/20 maxlen: 20
94.125.128.0/21 maxlen: 21
95.175.128.0/21 maxlen: 21
95.175.136.0/22 maxlen: 22
95.175.140.0/24 maxlen: 24
95.175.142.0/23 maxlen: 23
95.175.146.0/23 maxlen: 23
95.175.148.0/23 maxlen: 23
95.175.151.0/24 maxlen: 24
95.175.152.0/24 maxlen: 24
95.175.154.0/23 maxlen: 23
95.175.156.0/22 maxlen: 22
109.175.128.0/22 maxlen: 22
109.175.132.0/24 maxlen: 24
109.175.135.0/24 maxlen: 24
109.175.136.0/22 maxlen: 22
109.175.140.0/23 maxlen: 23
109.175.143.0/24 maxlen: 24
109.175.144.0/20 maxlen: 20
109.175.160.0/21 maxlen: 21
109.175.168.0/22 maxlen: 22
109.175.173.0/24 maxlen: 24
109.175.176.0/20 maxlen: 20
109.175.192.0/21 maxlen: 21
109.175.200.0/22 maxlen: 22
109.175.204.0/23 maxlen: 23
109.175.207.0/24 maxlen: 24
109.175.208.0/23 maxlen: 23
109.175.212.0/24 maxlen: 24
109.175.214.0/24 maxlen: 24
109.175.219.0/24 maxlen: 24
109.175.220.0/23 maxlen: 23
109.175.223.0/24 maxlen: 24
109.175.224.0/24 maxlen: 24
109.175.226.0/23 maxlen: 23
109.175.235.0/24 maxlen: 24
109.175.240.0/24 maxlen: 24
109.175.243.0/24 maxlen: 24
109.175.246.0/23 maxlen: 23
109.175.248.0/24 maxlen: 24
109.175.250.0/23 maxlen: 23
109.175.252.0/23 maxlen: 23
109.175.255.0/24 maxlen: 24
109.202.226.0/24 maxlen: 24
109.202.228.0/22 maxlen: 22
109.202.236.0/22 maxlen: 22
109.202.240.0/22 maxlen: 22
109.202.244.0/23 maxlen: 23
109.202.247.0/24 maxlen: 24
109.202.248.0/21 maxlen: 21
130.43.128.0/19 maxlen: 19
130.43.160.0/23 maxlen: 23
130.43.164.0/22 maxlen: 22
130.43.170.0/23 maxlen: 23
130.43.172.0/22 maxlen: 22
130.43.176.0/20 maxlen: 20
185.3.84.0/24 maxlen: 24
185.3.86.0/23 maxlen: 23
185.31.168.0/22 maxlen: 22
185.75.212.0/22 maxlen: 22
195.114.102.0/23 maxlen: 23
195.182.4.0/24 maxlen: 24
195.191.106.0/23 maxlen: 23
2a00:13d0::/29 maxlen: 29
2a01:388::/29 maxlen: 29
2a0d:ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:21:3d:fc:f8:5b:17:6f:04:51:7a:bc:34:ab:07:96:ef:57:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 4 15:32:36 2025 GMT
Not After : Nov 3 15:37:36 2026 GMT
Subject: CN=9D4A5053BAC511E0C849D853294FE0703518E8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:9e:75:04:08:aa:76:43:47:6f:d0:6f:11:
a2:cc:2a:90:d0:c0:de:67:95:2b:04:c4:03:70:c8:
86:97:54:93:7d:73:e0:a8:a1:7f:c9:90:08:0d:25:
76:99:a0:4b:a0:fa:97:97:81:07:ab:2a:d0:20:97:
ec:a5:90:41:e6:b0:ca:6e:ef:74:d5:05:c1:03:3e:
c9:74:4c:95:43:bb:c9:d9:f5:77:6c:ad:44:97:50:
44:34:b8:e4:36:41:7d:5c:2d:2c:92:80:f7:28:7a:
db:63:34:8f:82:7c:62:a4:db:21:4e:95:df:8a:48:
73:73:6b:c5:a3:13:92:4a:cd:f7:be:cf:87:e2:84:
0b:e5:3b:34:ba:19:b8:d9:f1:30:a3:f3:53:2e:79:
f1:88:a0:4b:6c:f3:e9:a7:85:91:00:f9:9b:58:23:
73:22:38:24:05:f4:ff:e6:a2:62:4e:aa:5e:97:78:
dd:b0:63:4d:47:3a:18:b0:a6:0b:c4:ce:3d:a5:7f:
12:6b:70:31:ff:4b:89:dd:02:5b:36:05:bc:1a:3b:
de:a3:7d:8a:41:32:85:50:d3:95:1a:51:0d:52:7c:
56:b9:5e:10:58:8f:4f:03:dd:51:6d:7b:22:6f:4d:
33:c3:f3:20:4b:14:07:08:a8:2f:ac:52:00:f6:75:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:50:53:BA:C5:11:E0:C8:49:D8:53:29:4F:E0:70:35:18:E8:A8
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.151.0.0-5.151.102.255
5.151.104.0-5.151.121.255
5.151.123.0-5.151.125.255
5.151.127.0/24
5.151.130.0-5.151.149.255
5.151.151.0-5.151.191.255
5.151.196.0-5.151.223.255
5.151.226.0-5.151.242.255
5.151.244.0-5.151.252.255
5.151.254.0/23
31.220.192.0/23
31.220.195.0-31.220.215.255
31.220.228.0-31.220.234.255
31.220.237.0-31.220.242.255
31.220.244.0/24
31.220.246.0/24
31.220.254.0/23
37.203.130.0-37.203.145.255
37.203.147.0-37.203.156.255
37.203.158.0-37.203.167.255
37.203.171.0-37.203.176.255
37.203.179.0-37.203.180.255
37.203.182.0/23
37.203.185.0-37.203.191.255
46.16.208.0/21
46.33.0.0/23
46.33.3.0-46.33.7.255
46.33.18.0/23
46.33.21.0-46.33.22.255
46.33.28.0/23
77.244.128.0/20
94.125.128.0/21
95.175.128.0-95.175.140.255
95.175.142.0/23
95.175.146.0-95.175.149.255
95.175.151.0-95.175.152.255
95.175.154.0-95.175.159.255
109.175.128.0-109.175.132.255
109.175.135.0-109.175.141.255
109.175.143.0-109.175.171.255
109.175.173.0/24
109.175.176.0-109.175.205.255
109.175.207.0-109.175.209.255
109.175.212.0/24
109.175.214.0/24
109.175.219.0-109.175.221.255
109.175.223.0-109.175.224.255
109.175.226.0/23
109.175.235.0/24
109.175.240.0/24
109.175.243.0/24
109.175.246.0-109.175.248.255
109.175.250.0-109.175.253.255
109.175.255.0/24
109.202.226.0/24
109.202.228.0/22
109.202.236.0-109.202.245.255
109.202.247.0-109.202.255.255
130.43.128.0-130.43.161.255
130.43.164.0/22
130.43.170.0-130.43.191.255
185.3.84.0/24
185.3.86.0/23
185.31.168.0/22
185.75.212.0/22
195.114.102.0/23
195.182.4.0/24
195.191.106.0/23
IPv6:
2a00:13d0::/29
2a01:388::/29
2a0d:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
06:19:e0:61:e3:aa:87:19:ed:ba:e6:5d:d3:09:96:b7:7b:df:
e9:ae:bb:fb:f2:fb:62:2d:2e:45:b8:c5:2c:b3:fd:4e:48:fd:
da:9d:10:7e:06:07:86:bb:60:04:b3:65:56:ae:52:dd:ca:a5:
84:80:7d:70:0b:b6:d5:47:73:d8:2d:cb:42:23:5c:d3:3c:a2:
23:14:51:1d:a2:5e:ad:b4:df:2b:8f:91:e3:f5:16:f6:32:32:
ae:ce:5c:3a:b1:fe:da:5b:02:04:61:d1:10:ab:d4:05:d6:ea:
d2:4a:ad:fc:d8:36:c9:58:9c:3c:97:c8:a1:fb:f3:a3:14:68:
d7:77:33:24:63:e5:9b:0c:a9:fa:73:2a:24:d3:26:05:d6:cc:
36:bf:a4:5b:09:e2:5a:2a:00:8f:a3:24:6d:aa:50:a1:2c:b4:
71:87:94:e9:64:d2:f2:21:cf:43:d3:cc:1b:58:94:b9:3b:d2:
40:35:98:54:b0:df:94:d4:34:61:2b:4c:80:eb:78:28:45:e0:
b4:20:ee:1d:79:ea:cf:76:a9:aa:ba:f2:e1:16:22:b9:6e:b4:
d1:c5:a0:fe:4d:48:c7:ed:97:36:11:e2:b7:68:a9:ec:a2:6a:
58:c4:13:d5:5d:17:f3:55:b7:67:12:a7:c3:47:31:91:95:f2:
8a:16:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:01 2025 by rpki-client