Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: nxcaCsRCr9pZjDFXB5DE+6Dlit1d25vgv59B3229Zv0=
Subject key identifier: E2:F9:F7:0B:57:43:62:06:04:7E:56:97:F2:5A:81:22:4A:79:70:6E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0B2CA1AF2C55C9930A8971C826021BE2DA076B0A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
Signing time: Wed 16 Sep 2026 07:21:42 +0000
ROA not before: Wed 16 Sep 2026 07:16:42 +0000
ROA not after: Wed 15 Sep 2027 07:21:42 +0000
asID: 42689
IP address blocks: 51.146.154.0/24 maxlen: 24
51.146.157.0/24 maxlen: 24
51.146.159.0/24 maxlen: 24
51.146.208.0/23 maxlen: 24
51.146.210.0/24 maxlen: 24
51.146.250.0/23 maxlen: 24
51.194.34.0/23 maxlen: 24
51.194.48.0/22 maxlen: 24
51.194.60.0/22 maxlen: 24
94.116.8.0/22 maxlen: 24
94.194.4.0/22 maxlen: 24
94.194.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2c:a1:af:2c:55:c9:93:0a:89:71:c8:26:02:1b:e2:da:07:6b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 07:16:42 2026 GMT
Not After : Sep 15 07:21:42 2027 GMT
Subject: CN=E2F9F70B57436206047E5697F25A81224A79706E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:96:62:ef:35:4c:8f:9c:47:c5:fd:42:c5:09:
85:e5:b6:77:37:27:55:68:12:c5:bf:41:5a:9e:58:
e4:43:a5:4f:3c:27:fa:d2:30:da:d3:8a:c6:5b:f7:
9b:a5:43:11:54:3f:0e:eb:ff:fd:0a:6b:e6:c1:41:
4b:7a:1a:8c:48:27:80:87:37:d4:94:ad:63:96:f2:
74:0b:5a:e5:9d:7c:9e:21:68:7e:fe:e4:0d:66:b4:
0d:7e:3a:60:31:35:98:22:e0:a3:5b:a1:b7:97:d4:
17:35:78:1a:84:72:01:0b:d8:c7:90:34:04:5d:38:
a9:91:85:77:4a:04:b3:b5:3a:bb:0b:6d:a9:da:04:
8d:1d:ac:58:1a:4b:0d:e7:5a:73:de:ef:a3:44:d8:
c6:c6:50:e8:da:6f:da:25:38:94:8f:5f:6f:56:7e:
7b:30:c3:20:09:3d:18:6b:28:8c:7a:6f:7d:a9:05:
0d:99:84:06:54:56:f1:ec:aa:a7:3c:73:83:2c:4a:
2b:9e:fb:89:4e:24:09:08:d5:b6:67:40:de:43:19:
2a:79:6d:cb:d7:22:2f:23:06:21:56:84:33:7a:a9:
dd:f0:5c:13:4a:7f:28:60:e8:a1:b7:30:61:8d:4e:
f0:17:a7:1b:4e:60:be:44:36:90:dd:2c:a8:39:62:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:F7:0B:57:43:62:06:04:7E:56:97:F2:5A:81:22:4A:79:70:6E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.154.0/24
51.146.157.0/24
51.146.159.0/24
51.146.208.0-51.146.210.255
51.146.250.0/23
51.194.34.0/23
51.194.48.0/22
51.194.60.0/22
94.116.8.0/22
94.194.4.0/22
94.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:46:de:52:eb:9d:4b:fd:15:be:3d:9c:2e:6c:e6:00:c8:64:
96:b7:57:f1:2a:df:3d:19:d0:53:4d:cb:59:e3:57:7b:47:ca:
fb:1b:45:4a:17:88:37:ef:60:a7:f0:56:96:eb:ad:53:65:87:
ec:ed:03:49:9d:9b:02:20:01:7d:76:78:9f:5c:56:16:f2:c6:
68:6b:dd:6d:73:65:28:7c:e5:ad:8c:18:80:6c:f4:1d:74:6c:
ed:46:66:e9:e7:65:2e:28:36:25:93:50:72:62:9f:04:81:23:
fc:e4:cc:a5:07:2c:1b:12:af:8f:25:e9:64:13:cf:0f:6e:c8:
07:57:10:66:4f:35:52:74:5c:6b:a6:a1:45:2a:1f:a3:ab:1d:
f9:b2:f8:ca:8d:25:db:a0:c7:04:1c:e4:b4:c4:30:b2:b6:11:
d0:32:5d:f2:8f:0a:19:b3:8b:80:c5:ff:ee:94:51:8a:d4:b4:
03:3c:ea:13:e2:01:c5:3c:5f:ad:22:88:1e:f8:c7:64:ea:cd:
9e:89:32:1b:8e:69:81:f7:9c:9b:a6:8b:fb:2f:4d:0b:9a:22:
b0:fa:c9:e7:33:f9:79:83:bb:41:f3:30:77:f2:d1:82:75:02:
94:a8:2a:c5:02:d4:49:20:38:c0:f9:9d:b7:bd:f1:99:e0:1e:
83:58:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:02:52 2026 by rpki-client