Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: hiKBd1gUFZr0Q6oiHeXVxij3vuORHqz/FRp/LC+qrTM=
Subject key identifier: 0C:37:A6:06:FB:AB:F5:79:F3:3D:2B:99:DF:56:37:04:9C:A8:34:87
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10C8E611BA60102DF7BF4B08F220544885183AFE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Tue 17 Jun 2025 18:46:45 +0000
ROA not before: Tue 17 Jun 2025 18:41:45 +0000
ROA not after: Tue 16 Jun 2026 18:46:45 +0000
asID: 26042
IP address blocks: 96.62.101.0/24 maxlen: 24
167.148.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c8:e6:11:ba:60:10:2d:f7:bf:4b:08:f2:20:54:48:85:18:3a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 17 18:41:45 2025 GMT
Not After : Jun 16 18:46:45 2026 GMT
Subject: CN=0C37A606FBABF579F33D2B99DF5637049CA83487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:6c:9e:7e:43:39:5f:76:42:fb:85:eb:59:
d3:1d:b6:43:8f:20:8c:a5:69:7f:50:cb:57:0c:04:
78:bd:46:d5:f6:19:7a:66:43:3b:ae:39:06:63:c3:
67:ae:81:a2:c4:97:5e:fd:36:d1:31:0f:c1:e8:9d:
86:04:fd:86:60:ff:6f:b8:5d:a3:af:7b:26:d2:32:
c1:85:33:a0:b7:e1:7c:95:f6:f9:6c:f2:a2:d8:4a:
e6:88:59:02:e5:fe:fc:9e:23:a3:80:ae:e9:02:04:
df:97:e8:f7:c3:76:ba:d7:0c:3a:62:3b:43:b5:85:
8d:20:3c:75:ee:72:8a:b3:34:27:99:f8:6f:55:47:
2b:33:b3:fc:a9:3d:8b:0b:08:c2:68:2b:3c:d3:93:
f2:29:1f:c3:4e:27:ad:c6:c5:f6:26:00:5d:73:4f:
ab:9b:c7:3d:6c:51:b7:fe:9b:9a:3c:2c:07:7a:a0:
02:56:e3:0e:e9:75:0c:b7:cd:36:82:bc:db:ed:08:
44:f0:66:84:2d:72:1b:ef:e0:b0:a0:a0:b2:de:62:
ac:c3:ac:39:70:de:56:7b:bb:cc:f0:0d:a3:a1:5b:
2a:fb:2a:d0:90:bf:06:c9:3e:13:ce:01:12:35:6b:
99:bf:ad:e4:43:d3:c8:9d:94:7c:9c:f2:61:06:9c:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:A6:06:FB:AB:F5:79:F3:3D:2B:99:DF:56:37:04:9C:A8:34:87
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.101.0/24
167.148.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d7:4e:9a:9d:5a:94:9f:ad:57:93:8c:29:ad:ee:84:83:1c:
bc:e1:a7:22:1d:3a:8a:8e:7b:74:75:e3:ec:02:e0:42:72:30:
bc:d4:71:55:32:6d:94:2b:b3:97:13:ad:60:79:81:0f:70:d2:
6b:9a:55:a3:fc:da:4a:d7:3a:40:10:59:e2:09:5d:70:23:36:
a0:f7:3e:6a:23:6c:96:c3:8c:a7:31:49:e5:7c:c8:23:2f:08:
5c:95:c4:1a:dc:59:f0:d7:29:25:c6:04:14:44:eb:53:48:c9:
dc:5d:cf:ae:36:16:97:d3:0b:e2:e4:e4:fb:21:9e:8f:18:3a:
18:c5:c7:48:ac:a7:21:b1:24:b2:10:32:cb:86:fb:9f:79:43:
9c:f7:63:79:d5:01:e0:88:cd:fe:25:09:d5:86:f4:3a:3f:6e:
f6:e0:18:29:a8:be:ab:74:4e:57:32:26:3f:a5:f8:6b:1b:4d:
b3:c4:ef:0a:61:77:19:3f:63:1d:57:d3:b1:33:86:12:ae:bc:
b6:0c:aa:b6:f6:f1:a8:7f:15:27:21:1a:b4:e9:e8:7a:2c:be:
e1:e9:8a:a1:4f:8c:5f:90:21:6a:48:87:49:c3:d7:f6:19:a1:
8c:65:0e:91:78:c6:52:ce:fe:d3:c4:a3:24:24:a7:bf:dc:63:
f2:dd:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:33:58 2025 by rpki-client