Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS42708.roa
File:                     AS42708.roa (raw, json)
Hash identifier:          tHKJWtAS889xZaCLHw0SLPtPhLhaC49U9Xl9YXfHqzg=
Subject key identifier:   7F:E5:CB:17:3E:24:44:37:40:13:F7:61:8B:8D:D2:64:37:94:27:C6
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       5B529AAA866260193B0BB5DCF2E971E68C732239
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS42708.roa
Signing time:             Wed 28 Jan 2026 14:55:36 +0000
ROA not before:           Wed 28 Jan 2026 14:50:36 +0000
ROA not after:            Wed 27 Jan 2027 14:55:36 +0000
asID:                     42708
IP address blocks:        2a0b:506::/32 maxlen: 48
                          2a0b:507::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:9a:aa:86:62:60:19:3b:0b:b5:dc:f2:e9:71:e6:8c:73:22:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jan 28 14:50:36 2026 GMT
            Not After : Jan 27 14:55:36 2027 GMT
        Subject: CN=7FE5CB173E2444374013F7618B8DD264379427C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:fa:a3:ae:69:b8:30:63:a2:2b:57:f4:07:
                    a1:8f:b7:8a:da:d7:21:a2:c0:c5:b6:df:d2:21:26:
                    0d:9f:09:6b:9e:5b:47:be:68:59:a7:f4:1e:9d:ba:
                    59:e6:db:b1:18:a4:b0:bd:0b:f4:57:41:bd:a5:94:
                    a2:1a:5a:5f:c3:e9:8f:c6:51:1b:2f:cc:54:c6:5c:
                    16:11:a5:e8:b2:7f:75:11:f1:7c:27:b4:d8:c5:6a:
                    97:81:48:db:f7:09:3a:b7:f9:bb:6c:75:c4:46:20:
                    43:03:2b:1a:36:19:c5:5c:09:63:f6:ae:a9:b8:58:
                    ee:1b:ff:ac:ad:1d:16:d1:d0:92:07:78:76:7e:e2:
                    35:37:a9:65:0e:11:c3:ff:67:86:eb:d4:de:80:ae:
                    52:20:21:0e:61:bc:1f:da:71:a5:5b:5e:43:51:1d:
                    79:46:4b:fc:13:6d:57:86:2e:79:10:d1:6e:ed:cd:
                    b3:be:4b:2b:35:d6:1e:eb:db:6f:04:64:74:0a:fb:
                    0c:a5:ba:bd:53:db:60:8d:8e:31:61:34:fb:3f:9a:
                    9d:b2:91:7a:b3:7b:30:da:a6:ad:37:17:f2:0f:db:
                    ca:3a:b2:bd:a6:7c:18:17:09:9f:ed:bd:3f:ea:ff:
                    d8:84:a9:6c:3c:09:69:24:85:02:1c:53:6b:59:be:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:CB:17:3E:24:44:37:40:13:F7:61:8B:8D:D2:64:37:94:27:C6
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS42708.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:506::/31

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:c5:32:d9:c1:6a:f8:2a:06:98:a0:9e:d5:2b:97:34:46:
         8b:dd:e7:76:8c:97:55:b8:d3:d8:34:60:74:78:48:05:f4:c8:
         b9:0a:73:c2:41:84:d2:29:88:65:fc:6d:de:2e:ed:24:c8:3a:
         1e:45:ab:ca:0d:48:4e:5c:d9:88:a2:1f:93:a0:b2:c2:c6:f4:
         e7:e9:a2:75:b8:56:72:57:aa:18:b0:4e:e0:65:8d:71:2a:96:
         e3:97:d0:2b:10:81:eb:45:73:fd:e3:c7:49:c9:2a:2f:62:93:
         54:74:6e:d9:f5:89:70:52:65:8f:5a:cd:a3:72:c6:86:3c:fe:
         3a:22:84:b6:0a:f9:e8:d3:5f:b6:8d:46:1e:7f:e9:87:1d:74:
         aa:74:27:38:03:ce:32:43:2d:f1:0e:d7:7f:19:2f:bb:a6:d4:
         19:3c:ca:4a:a8:f7:a5:1f:30:ca:1c:b7:f3:93:13:bc:f9:3f:
         53:73:26:d1:88:c6:10:13:8c:31:6e:f8:78:01:b8:fa:a6:a9:
         72:71:15:fc:41:da:b1:c5:b4:de:6b:9a:95:14:d1:2d:c0:37:
         fc:58:3e:21:03:a4:99:67:98:62:12:ba:e0:14:0e:f1:5c:3b:
         a7:3b:32:29:01:ca:24:06:32:0e:a7:3a:7c:9b:0e:22:f6:40:
         51:0c:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----