Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: fDG37o9DUGYh409D3meaPE876JP/DskcrAfygXxycng=
Subject key identifier: 25:C0:14:E6:D6:1F:E1:9E:82:CE:32:87:E8:26:B9:35:B5:E4:D5:15
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 59C61881706AD2EE17373938D14064E383C57673
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Sat 18 Oct 2025 00:08:18 +0000
ROA not before: Sat 18 Oct 2025 00:03:18 +0000
ROA not after: Sat 17 Oct 2026 00:08:18 +0000
asID: 26042
IP address blocks: 162.141.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c6:18:81:70:6a:d2:ee:17:37:39:38:d1:40:64:e3:83:c5:76:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 18 00:03:18 2025 GMT
Not After : Oct 17 00:08:18 2026 GMT
Subject: CN=25C014E6D61FE19E82CE3287E826B935B5E4D515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:ae:ca:de:c9:52:9c:45:c8:c7:98:82:08:
da:93:44:3c:a9:3a:20:9a:30:84:82:53:31:2c:3c:
9e:9d:c6:e5:b7:d1:e8:27:23:c5:74:d2:81:55:8d:
78:84:77:53:5e:f5:50:cc:6b:18:8e:c2:be:af:e9:
ee:db:09:29:f1:8d:ab:c1:28:06:a4:98:93:32:f4:
af:3b:cb:4e:be:0c:72:ba:c6:7f:7c:05:ab:5d:83:
54:6e:ec:fa:b7:cd:e6:ec:67:67:a1:10:43:6f:d4:
c6:10:4e:ff:2d:a2:0b:2a:7a:33:05:32:60:d7:bd:
d5:7e:d6:eb:7a:a4:70:dc:d8:c0:e5:93:6e:cd:69:
2a:6c:a4:9e:61:98:40:18:05:6c:68:2e:bb:5f:ab:
db:86:a7:d5:e3:3f:2a:88:25:7d:d7:10:7a:20:04:
7e:bb:91:6e:01:b8:a4:aa:f9:0e:7f:c3:aa:4e:4f:
8c:70:9f:3a:7f:71:64:9d:19:99:1c:07:17:22:6f:
f5:5a:ff:8e:51:38:fa:c1:da:dd:ca:37:11:da:bc:
5f:38:25:7e:17:a1:1c:60:b2:37:93:87:48:db:f7:
11:42:55:c0:c5:56:06:1f:1e:8b:95:9e:e7:ed:6f:
09:d3:ea:09:57:f1:c2:88:1d:1e:71:9b:fc:3b:1d:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:14:E6:D6:1F:E1:9E:82:CE:32:87:E8:26:B9:35:B5:E4:D5:15
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.15.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f2:ae:39:ea:4c:3b:ce:96:b2:47:77:01:ba:22:89:b5:05:
83:09:ed:ee:d5:09:42:81:c2:11:0f:f7:bf:7a:14:c0:dd:3e:
75:7c:25:c8:72:7c:be:28:08:97:7d:27:19:d8:cf:a0:27:ca:
2d:68:aa:f6:ce:1c:f1:11:b8:a5:7d:ae:9b:f9:c7:43:81:3c:
fb:4b:56:d2:f5:cb:8e:f6:b4:71:e0:19:ca:3c:e3:b3:5e:59:
5f:db:6d:54:52:d7:0f:5d:61:7a:99:c8:b2:4e:09:24:85:4d:
1b:e1:af:1b:25:98:0f:89:06:69:22:1e:86:a3:63:df:1d:09:
ee:c9:56:3e:8d:58:4d:4a:b5:c2:03:c2:35:99:19:80:9d:df:
a1:05:05:35:cb:be:eb:aa:b5:e1:f7:80:7b:08:60:d9:0a:0f:
ec:1e:64:ce:08:96:fe:18:3b:62:d0:d9:16:b5:3b:ec:8b:d9:
77:d3:a2:9e:d4:fb:e0:1f:10:a2:70:6d:03:d2:20:c2:df:00:
bd:d1:be:45:3a:dd:a8:d5:8b:2a:2a:54:ab:f2:09:b8:dc:b4:
6d:8d:20:e9:46:82:f9:87:d5:72:93:e5:43:5e:18:9a:60:fe:
e2:97:83:cd:f9:b9:fd:64:0d:97:02:1e:f5:a8:b2:bf:3d:43:
ad:93:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:39 2025 by rpki-client