Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: 7r1o81QkS3YpLhsomJ+wQ3D5xNJQbd5Zqe3Knr0LPKQ=
Subject key identifier: 6D:BD:C6:3A:79:DD:FD:1E:F8:3B:9A:A5:77:5D:5B:06:35:4C:C8:7D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5F3A742CD0422A43D47CA6536A25560E2DF263B8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
Signing time: Sat 28 Mar 2026 00:04:19 +0000
ROA not before: Fri 27 Mar 2026 23:59:19 +0000
ROA not after: Sat 27 Mar 2027 00:04:19 +0000
asID: 42960
IP address blocks: 143.14.199.0/24 maxlen: 24
146.103.48.0/24 maxlen: 24
155.117.123.0/24 maxlen: 24
162.141.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3a:74:2c:d0:42:2a:43:d4:7c:a6:53:6a:25:56:0e:2d:f2:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 27 23:59:19 2026 GMT
Not After : Mar 27 00:04:19 2027 GMT
Subject: CN=6DBDC63A79DDFD1EF83B9AA5775D5B06354CC87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:8d:57:f2:4a:1c:4b:76:32:70:61:5f:c6:
04:3a:8b:1b:21:43:1b:35:0c:96:85:ff:8d:28:2c:
76:f7:6f:2c:15:f7:04:5e:7b:83:81:b3:79:78:8c:
e4:c1:09:16:b8:d0:a0:d4:79:92:32:0f:47:6c:ce:
6a:17:87:90:72:1f:be:c3:f0:b3:2e:1d:41:a7:19:
a6:db:46:c5:91:ae:a5:61:46:ca:bd:f0:16:d4:63:
24:f5:99:38:fd:31:ee:ca:63:8c:d0:c3:d6:bb:e5:
b7:5b:cf:e8:e4:ee:99:ad:b3:0d:dc:3d:50:e9:70:
ac:fb:94:ed:3d:41:0c:d4:2a:a5:1a:ab:2f:a2:50:
3f:f0:a9:f8:0f:2a:be:f9:a7:30:79:c7:12:9b:cc:
3c:d3:b1:62:05:af:0d:11:39:d1:1b:3a:85:e1:e9:
92:a0:90:78:e9:fd:dd:58:9b:44:0b:0a:ed:3c:45:
52:31:18:4c:70:d7:3b:a4:ba:b2:15:6c:66:b2:f4:
63:4c:1c:f9:b5:18:93:c9:b7:f4:d5:55:a7:93:12:
14:cd:db:53:24:58:80:e6:e1:b5:61:ae:cf:22:a8:
75:58:08:82:e3:1b:bb:43:ac:44:8d:b0:38:18:38:
10:5c:8c:2d:80:5c:ba:29:fc:a6:07:2c:b1:8e:75:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:C6:3A:79:DD:FD:1E:F8:3B:9A:A5:77:5D:5B:06:35:4C:C8:7D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.199.0/24
146.103.48.0/24
155.117.123.0/24
162.141.97.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2a:43:0c:15:57:05:71:a8:36:40:6b:b6:9d:7a:87:fd:ef:
b8:66:60:9d:41:d7:82:09:f5:17:34:27:d6:dd:8c:c7:b2:8d:
13:c2:79:9d:4c:73:f3:c1:9c:ee:05:77:1c:53:e9:1b:3a:34:
71:cc:64:89:bd:78:77:fe:09:fc:75:3d:86:11:ad:1c:83:25:
5f:27:8f:45:ff:63:86:e8:d3:16:d4:07:5e:0e:45:9c:3f:b2:
a0:24:8f:68:aa:dd:cb:e5:c2:f6:75:74:79:2f:9d:72:72:3d:
f9:31:ed:2e:1b:b2:01:64:78:5f:5b:34:bb:04:42:30:b2:44:
3a:d8:4d:3d:c3:84:47:0d:3c:3e:92:42:6c:e3:c7:d1:cf:0c:
9c:93:14:c8:41:2f:eb:87:7f:02:f3:40:cd:61:59:fa:bd:ff:
ac:d3:80:ce:a7:7a:f7:a0:1f:fd:71:41:07:f2:58:5e:da:64:
78:59:80:fd:9d:b2:e7:e8:e1:84:f5:58:dc:1d:31:89:c7:dd:
90:4a:2e:b4:6b:10:47:7d:15:5c:74:9a:52:15:45:37:48:84:
57:89:d4:55:92:3d:96:93:6a:e0:54:87:25:a6:d9:3e:c3:b3:
2d:61:71:6f:f6:30:3c:30:7a:39:63:0b:e4:9f:bb:c8:cf:e7:
91:f1:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:45 2026 by rpki-client