Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 1p4STx/gN+lJFEbqXlsEP3+f9ZHwZ0hldVXYiSab0eE=
Subject key identifier: 18:A7:E7:88:39:4F:A1:AB:25:C7:B9:97:63:F0:B8:2C:6D:0E:F6:8A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2305960999CF3337A5A5164A0333A679DD2772F4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS26042.roa
Signing time: Sun 27 Sep 2026 23:49:35 +0000
ROA not before: Sun 27 Sep 2026 23:44:35 +0000
ROA not after: Sun 26 Sep 2027 23:49:35 +0000
asID: 26042
IP address blocks: 143.20.149.0/24 maxlen: 24
143.20.161.0/24 maxlen: 24
143.20.170.0/24 maxlen: 24
143.20.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:05:96:09:99:cf:33:37:a5:a5:16:4a:03:33:a6:79:dd:27:72:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 27 23:44:35 2026 GMT
Not After : Sep 26 23:49:35 2027 GMT
Subject: CN=18A7E788394FA1AB25C7B99763F0B82C6D0EF68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:3b:38:ab:ef:1b:10:d1:ac:04:2a:30:32:
44:92:6d:78:af:94:c9:d8:70:79:e8:aa:76:19:8d:
53:80:13:e5:d2:d9:ee:d1:8a:46:30:39:42:b0:6c:
2a:4d:d8:00:9c:cb:0d:22:a6:4d:2c:fc:c9:59:a5:
32:b1:74:af:73:a8:e6:8c:0d:e4:b3:a3:5d:e4:51:
e9:73:88:53:ff:b8:e4:1c:7f:c8:b6:51:73:39:81:
53:ae:b2:ae:12:15:3c:96:d2:3e:38:18:21:b9:ad:
f5:f2:38:3a:d2:c9:4f:0a:20:f3:c7:aa:14:52:f0:
60:36:6c:5c:f6:11:70:f4:73:47:95:94:67:b2:6a:
75:de:f3:96:45:ea:9f:9d:39:8b:cd:33:4c:80:42:
ad:29:ed:e0:f8:9d:9c:4a:74:f1:ec:6d:65:da:a4:
5a:cc:23:c6:36:36:92:47:a1:e9:79:9e:3a:60:0e:
71:cc:32:7e:d7:39:ca:ae:9d:72:5b:cc:95:7f:84:
3a:69:12:54:42:04:81:cb:32:96:41:68:7d:3e:cb:
03:5f:74:69:9e:bb:ba:81:22:53:35:6c:91:16:1c:
d0:bb:28:f1:15:c6:7d:59:8f:eb:c9:d9:47:05:b2:
05:e8:85:62:8b:b0:45:fa:37:e6:d9:c2:4f:c2:19:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A7:E7:88:39:4F:A1:AB:25:C7:B9:97:63:F0:B8:2C:6D:0E:F6:8A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.149.0/24
143.20.161.0/24
143.20.170.0/24
143.20.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7d:07:e3:07:7f:c1:ce:24:23:73:3b:4c:84:a1:62:60:93:
55:0a:8e:4f:39:6a:99:86:a7:57:6e:91:cc:a8:0d:26:f4:3a:
d1:2c:13:93:a7:f1:21:2b:fc:74:d6:0a:7e:b3:f0:6c:09:26:
32:57:8b:20:b6:1b:d0:e9:9d:00:72:7e:f5:cb:39:ea:10:51:
df:4f:11:c5:d6:f1:1f:50:6f:d0:ad:20:dd:97:60:4c:3a:a5:
12:21:28:ef:00:de:8a:fe:a9:d4:75:cf:3e:20:3f:49:bd:c9:
1b:de:04:4a:60:b2:81:43:f3:ed:5b:ec:60:e3:04:65:b8:f2:
47:b4:c9:eb:9c:a2:a8:85:29:a2:ff:63:d2:33:9a:5c:ad:fb:
aa:70:ff:c9:4a:b2:95:b3:5e:39:86:87:e5:0f:94:7c:36:d9:
ed:6c:64:7f:1b:9c:51:ee:86:3f:de:21:9e:73:d3:c6:5b:36:
c6:b5:72:5b:3d:de:64:8d:a5:77:9f:14:00:19:5e:2e:d8:3b:
41:bf:d9:30:03:83:9d:e4:71:6d:b2:9b:63:2f:aa:0e:df:5f:
24:43:7c:2a:b9:2a:5b:78:92:5f:84:af:f9:bb:04:88:e1:0a:
46:05:51:dc:5b:19:9b:82:93:8c:ae:16:1e:71:25:68:f0:f6:
98:ca:fc:09
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUIwWWCZnPMzelpRZKAzOmed0ncvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MjcyMzQ0MzVaFw0yNzA5MjYyMzQ5MzVaMDMxMTAvBgNV
BAMTKDE4QTdFNzg4Mzk0RkExQUIyNUM3Qjk5NzYzRjBCODJDNkQwRUY2OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAjs4q+8bENGsBCowMkSSbXiv
lMnYcHnoqnYZjVOAE+XS2e7RikYwOUKwbCpN2ACcyw0ipk0s/MlZpTKxdK9zqOaM
DeSzo13kUelziFP/uOQcf8i2UXM5gVOusq4SFTyW0j44GCG5rfXyODrSyU8KIPPH
qhRS8GA2bFz2EXD0c0eVlGeyanXe85ZF6p+dOYvNM0yAQq0p7eD4nZxKdPHsbWXa
pFrMI8Y2NpJHoel5njpgDnHMMn7XOcqunXJbzJV/hDppElRCBIHLMpZBaH0+ywNf
dGmeu7qBIlM1bJEWHNC7KPEVxn1Zj+vJ2UcFsgXohWKLsEX6N+bZwk/CGR0/AgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUGKfniDlPoaslx7mXY/C4LG0O9oowHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjYwNDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACPFJUD
BACPFKEDBACPFKoDBACPFOYwDQYJKoZIhvcNAQELBQADggEBABt9B+MHf8HOJCNz
O0yEoWJgk1UKjk85apmGp1dukcyoDSb0OtEsE5On8SEr/HTWCn6z8GwJJjJXiyC2
G9DpnQByfvXLOeoQUd9PEcXW8R9Qb9CtIN2XYEw6pRIhKO8A3or+qdR1zz4gP0m9
yRveBEpgsoFD8+1b7GDjBGW48ke0yeucoqiFKaL/Y9Izmlyt+6pw/8lKspWzXjmG
h+UPlHw22e1sZH8bnFHuhj/eIZ5z08ZbNsa1cls93mSNpXefFAAZXi7YO0G/2TAD
g53kcW2ym2Mvqg7fXyRDfCq5Klt4kl+Er/m7BIjhCkYFUdxbGZuCk4yuFh5xJWjw
9pjK/Ak=
-----END CERTIFICATE-----
Generated at Sun Nov 8 07:43:31 2026 by rpki-client