Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: d+Ett5gVojvkqhM/WDEsu/SAF4hEQOCPq/u2oYIVySc=
Subject key identifier: 7F:F5:AC:F9:06:F9:FE:51:29:26:D4:B2:99:84:9F:B3:5A:73:9C:4A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6AE0E087F5DE066E4AC7019854CF587B8925E28F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
Signing time: Fri 20 Mar 2026 11:52:58 +0000
ROA not before: Fri 20 Mar 2026 11:47:58 +0000
ROA not after: Fri 19 Mar 2027 11:52:58 +0000
asID: 42689
IP address blocks: 82.24.188.0/24 maxlen: 24
82.25.137.0/24 maxlen: 24
82.25.141.0/24 maxlen: 24
82.25.144.0/24 maxlen: 24
82.25.184.0/24 maxlen: 24
82.27.9.0/24 maxlen: 24
82.27.99.0/24 maxlen: 24
82.27.104.0/24 maxlen: 24
82.27.120.0/24 maxlen: 24
82.27.206.0/24 maxlen: 24
82.39.230.0/24 maxlen: 24
82.39.231.0/24 maxlen: 24
82.39.246.0/24 maxlen: 24
82.39.247.0/24 maxlen: 24
82.47.184.0/24 maxlen: 24
82.47.191.0/24 maxlen: 24
82.47.249.0/24 maxlen: 24
82.47.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e0:e0:87:f5:de:06:6e:4a:c7:01:98:54:cf:58:7b:89:25:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 20 11:47:58 2026 GMT
Not After : Mar 19 11:52:58 2027 GMT
Subject: CN=7FF5ACF906F9FE512926D4B299849FB35A739C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:43:d3:49:88:58:ff:ac:ab:16:f3:0a:0f:
ab:51:5c:56:02:2f:d0:d6:54:65:79:df:8b:75:5c:
8c:c9:c3:bf:b2:42:d4:d3:ac:07:b7:c7:c6:dd:26:
9e:77:3c:d1:bb:69:ec:42:6e:bb:97:18:6f:ff:a3:
19:8a:e8:43:de:30:19:dc:dd:5a:74:5e:22:ea:a4:
b6:1a:bc:c1:a0:14:04:3c:b1:ba:ae:d8:dd:af:a1:
70:2a:5a:e2:ee:94:60:52:72:5d:8b:05:18:95:ee:
e3:23:b1:8d:f2:34:ea:0f:f9:b9:51:c6:b1:69:93:
03:41:60:66:1c:45:83:77:5f:d5:55:a4:99:07:6f:
aa:1e:0c:d8:de:3a:28:fa:bc:67:21:19:6c:ba:9d:
6f:19:9c:e7:e7:13:71:52:94:e5:69:9d:19:6a:e2:
67:16:1e:13:f5:d8:e8:1f:61:85:e8:a3:ee:c9:b7:
97:12:12:4e:2a:e1:52:cf:aa:e9:da:52:f2:12:da:
04:05:84:40:85:ac:2f:84:0c:93:d5:b1:af:0f:c8:
f8:0d:55:1b:96:3a:0c:0e:cc:fd:e9:93:bd:d7:45:
20:53:f2:48:fc:19:b0:50:bd:6a:f0:44:b1:26:f1:
61:ef:cf:35:19:b2:89:96:61:b9:6e:d9:88:9b:59:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:AC:F9:06:F9:FE:51:29:26:D4:B2:99:84:9F:B3:5A:73:9C:4A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.188.0/24
82.25.137.0/24
82.25.141.0/24
82.25.144.0/24
82.25.184.0/24
82.27.9.0/24
82.27.99.0/24
82.27.104.0/24
82.27.120.0/24
82.27.206.0/24
82.39.230.0/23
82.39.246.0/23
82.47.184.0/24
82.47.191.0/24
82.47.249.0/24
82.47.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d6:de:87:13:86:3f:d8:b1:32:ea:4e:e4:29:48:ee:e1:2d:
b2:3c:ea:dd:c1:8e:27:23:a8:27:9c:4f:b9:ce:64:f1:3f:fe:
6b:50:73:9c:03:08:d9:c3:18:1b:2b:c8:87:78:57:2f:09:57:
4a:1a:12:28:f4:02:09:0b:09:52:e3:ed:29:bf:5f:a8:12:97:
75:36:2f:03:f3:7a:ce:f6:49:e2:c3:48:5f:78:0f:2d:ee:b1:
07:29:09:1b:8a:f1:11:73:2e:fb:d6:8e:aa:35:94:ec:0a:39:
94:f6:00:af:71:c9:71:d9:36:88:2c:ff:3f:b4:b0:53:d7:49:
af:fd:da:87:24:34:d3:3c:1e:4b:0d:b1:61:c4:e8:cc:26:66:
54:ea:a3:5c:31:02:52:39:50:5e:1f:89:f5:a5:7a:03:30:23:
24:54:cf:8f:7b:2e:2b:bc:45:3f:8f:61:df:60:86:80:5e:90:
14:b0:f0:db:8b:41:ac:b4:4f:a3:78:ce:16:dc:5b:81:80:2f:
f7:c2:6d:56:26:f8:17:06:34:8d:6a:df:c5:45:70:8f:31:9b:
e9:56:be:ba:de:fe:2f:c2:c2:e5:d8:c8:4a:6e:f0:58:95:6c:
ad:48:52:a6:1a:2d:c1:f8:13:66:81:57:be:aa:16:e1:cf:02:
a6:6e:df:33
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUauDgh/XeBm5KxwGYVM9Ye4kl4o8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjAxMTQ3NThaFw0yNzAzMTkxMTUyNThaMDMxMTAvBgNV
BAMTKDdGRjVBQ0Y5MDZGOUZFNTEyOTI2RDRCMjk5ODQ5RkIzNUE3MzlDNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuakPTSYhY/6yrFvMKD6tRXFYC
L9DWVGV534t1XIzJw7+yQtTTrAe3x8bdJp53PNG7aexCbruXGG//oxmK6EPeMBnc
3Vp0XiLqpLYavMGgFAQ8sbqu2N2voXAqWuLulGBScl2LBRiV7uMjsY3yNOoP+blR
xrFpkwNBYGYcRYN3X9VVpJkHb6oeDNjeOij6vGchGWy6nW8ZnOfnE3FSlOVpnRlq
4mcWHhP12OgfYYXoo+7Jt5cSEk4q4VLPqunaUvIS2gQFhECFrC+EDJPVsa8PyPgN
VRuWOgwOzP3pk73XRSBT8kj8GbBQvWrwRLEm8WHvzzUZsomWYblu2YibWZs7AgMB
AAGjggJjMIICXzAdBgNVHQ4EFgQUf/Ws+Qb5/lEpJtSymYSfs1pznEowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIweQYIKwYBBQUHAQcBAf8EajBoMGYEAgABMGADBABSGLwD
BABSGYkDBABSGY0DBABSGZADBABSGbgDBABSGwkDBABSG2MDBABSG2gDBABSG3gD
BABSG84DBAFSJ+YDBAFSJ/YDBABSL7gDBABSL78DBABSL/kDBABSL/8wDQYJKoZI
hvcNAQELBQADggEBAKDW3ocThj/YsTLqTuQpSO7hLbI86t3BjicjqCecT7nOZPE/
/mtQc5wDCNnDGBsryId4Vy8JV0oaEij0AgkLCVLj7Sm/X6gSl3U2LwPzes72SeLD
SF94Dy3usQcpCRuK8RFzLvvWjqo1lOwKOZT2AK9xyXHZNogs/z+0sFPXSa/92ock
NNM8HksNsWHE6MwmZlTqo1wxAlI5UF4fifWlegMwIyRUz497Liu8RT+PYd9ghoBe
kBSw8NuLQay0T6N4zhbcW4GAL/fCbVYm+BcGNI1q38VFcI8xm+lWvrre/i/CwuXY
yEpu8FiVbK1IUqYaLcH4E2aBV76qFuHPAqZu3zM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:33:41 2026 by rpki-client