Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: SgWJP5ZI29L50Lajj9iwLJMljeBy0XcyC78LLqgV1hg=
Subject key identifier: 4B:5A:3C:B7:8F:3A:E6:6D:B6:1E:B5:8A:F6:55:24:97:7D:C8:C0:F7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 47ADAD415B1A8648C16DB8106C0618C548187CE5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
Signing time: Tue 08 Sep 2026 00:07:35 +0000
ROA not before: Tue 08 Sep 2026 00:02:35 +0000
ROA not after: Tue 07 Sep 2027 00:07:35 +0000
asID: 42689
IP address blocks: 46.202.28.0/24 maxlen: 24
46.202.52.0/24 maxlen: 24
91.124.4.0/24 maxlen: 24
91.124.5.0/24 maxlen: 24
91.124.25.0/24 maxlen: 24
91.124.53.0/24 maxlen: 24
91.124.56.0/24 maxlen: 24
91.124.61.0/24 maxlen: 24
91.124.193.0/24 maxlen: 24
91.124.218.0/24 maxlen: 24
91.124.239.0/24 maxlen: 24
91.124.254.0/24 maxlen: 24
92.113.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ad:ad:41:5b:1a:86:48:c1:6d:b8:10:6c:06:18:c5:48:18:7c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 00:02:35 2026 GMT
Not After : Sep 7 00:07:35 2027 GMT
Subject: CN=4B5A3CB78F3AE66DB61EB58AF65524977DC8C0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:c4:71:4c:3b:70:7e:7f:86:02:64:2f:ee:
9f:f7:01:1e:a2:ff:fa:35:28:5d:34:5e:35:d2:a6:
7b:ab:16:bd:c7:2b:51:59:61:35:aa:2b:56:82:44:
a6:de:ea:66:83:79:aa:39:f7:4f:03:b0:4a:e1:19:
f5:82:cd:98:cd:8a:b6:7c:a0:0a:b3:04:50:86:de:
3d:44:ea:46:42:10:b1:b0:1d:a3:ed:f0:35:9b:67:
24:c9:10:76:ff:b5:89:26:f9:62:8e:1d:06:ff:57:
6e:54:a8:c4:73:2c:32:17:28:34:e6:db:e1:b0:0a:
21:f1:70:4c:a2:fc:ec:e4:82:3c:f6:ee:30:2e:7f:
d3:22:07:8d:7a:88:c6:3f:52:dc:f1:16:57:e6:52:
f2:30:c1:ff:ab:88:ff:33:94:95:e1:fb:5b:03:52:
a0:01:ef:ae:08:27:a0:ef:f4:bb:c9:85:05:00:30:
e0:95:e9:a5:e0:c1:46:64:95:98:87:84:cf:e7:19:
1a:1f:0b:d5:41:05:ba:3f:5a:92:9e:86:04:fa:d7:
f8:fb:ce:f9:34:da:7c:da:0b:a4:e8:fd:7d:b2:49:
10:ae:48:47:7b:7c:66:66:2f:7b:b7:70:e0:e9:62:
81:d6:d6:52:6e:e0:a0:da:b3:96:f2:bd:0f:05:11:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:3C:B7:8F:3A:E6:6D:B6:1E:B5:8A:F6:55:24:97:7D:C8:C0:F7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.28.0/24
46.202.52.0/24
91.124.4.0/23
91.124.25.0/24
91.124.53.0/24
91.124.56.0/24
91.124.61.0/24
91.124.193.0/24
91.124.218.0/24
91.124.239.0/24
91.124.254.0/24
92.113.62.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c0:73:49:63:a2:df:ae:b4:b1:ff:9e:3f:91:43:4b:83:f8:
e4:af:c1:ae:db:0f:b8:35:6a:2a:c1:9e:fb:b1:fe:92:2c:21:
67:9b:90:91:d6:e1:16:6e:ab:ef:09:d2:fb:57:59:7a:df:f0:
2a:a1:93:77:88:40:2d:1a:c3:1e:bb:5a:2d:1f:9b:d1:78:34:
2f:45:83:40:fe:59:0a:17:a1:0a:ee:59:4f:fe:12:4e:7a:e3:
a5:1f:79:7f:4d:30:21:26:7d:82:b9:f2:d1:0a:d2:1c:ec:69:
4f:8b:94:54:fd:ae:5b:1a:e3:1f:b6:28:1e:6b:9c:74:bd:ec:
63:54:d9:57:b0:a1:50:34:4f:9c:4a:80:92:9f:50:e8:92:bb:
06:b9:84:47:b1:5c:89:82:2e:31:e1:9f:13:b1:8a:6f:d2:94:
bd:04:f8:a9:0f:ad:bf:80:20:f9:09:30:4c:da:c9:ce:dc:ed:
e1:4a:73:a5:d8:0f:e8:48:1a:96:07:d3:27:cd:47:92:fa:41:
8e:1b:31:ed:00:29:fd:96:8e:74:c3:87:3f:1f:cf:41:3d:11:
48:02:2a:f3:dd:02:c0:65:fc:55:97:10:94:85:f8:a4:ea:06:
22:dc:1e:da:6a:ee:cd:bf:c4:66:02:84:a9:8e:1e:5b:e9:fa:
97:9d:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:03 2026 by rpki-client