Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: 1WifNUe6Xx22Wvi3rRBWqMv99mtLVi+E/TOAmd7EfkQ=
Subject key identifier: 94:13:AB:7F:80:F9:B8:ED:8C:57:AB:48:A5:86:36:B5:A9:AC:2D:5E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3AC9EAACA13569D47535F9168D711112D060DCCD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42960.roa
Signing time: Tue 24 Mar 2026 15:45:15 +0000
ROA not before: Tue 24 Mar 2026 15:40:15 +0000
ROA not after: Tue 23 Mar 2027 15:45:15 +0000
asID: 42960
IP address blocks: 141.11.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c9:ea:ac:a1:35:69:d4:75:35:f9:16:8d:71:11:12:d0:60:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 24 15:40:15 2026 GMT
Not After : Mar 23 15:45:15 2027 GMT
Subject: CN=9413AB7F80F9B8ED8C57AB48A58636B5A9AC2D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:5e:84:26:fa:ad:7e:06:38:c9:1e:bb:ee:
36:4c:5b:a5:cd:b5:80:ad:3d:6d:b8:37:27:44:a4:
68:72:ca:c7:1d:68:a5:6a:7b:dd:fe:45:94:07:14:
a4:45:60:53:c8:de:b8:3b:b2:26:a4:ba:84:57:50:
ab:dd:1b:84:6e:f0:00:ee:3c:0e:2f:a4:7a:d5:30:
7a:c2:7e:5a:37:d7:ad:41:cf:c6:80:1e:20:9f:14:
65:3a:67:a2:fe:34:e4:1f:d1:81:ab:a4:da:63:18:
f2:9c:cd:18:86:a3:5f:65:59:28:5c:40:7f:96:a9:
19:b7:c5:31:a5:cd:fd:89:e2:98:70:84:ba:e6:18:
38:d8:e1:65:e6:38:2b:e6:a8:14:c4:54:27:95:43:
5c:dc:90:f5:50:23:84:66:9f:81:02:3b:b5:e4:2a:
5e:79:49:16:9a:12:42:f8:54:ac:73:30:ec:d4:69:
28:4b:0e:35:c6:a9:06:f9:7f:cd:ab:5f:83:85:5d:
71:5f:ae:5c:e1:39:70:6a:bd:1a:9b:18:aa:c8:ee:
2b:0e:3f:df:32:48:cc:60:df:52:2f:22:35:1f:02:
09:7f:c2:b4:9a:1b:69:7d:16:2d:53:38:fb:eb:84:
56:87:ea:91:e1:d3:5d:6d:94:00:d8:5e:6b:d5:6a:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:AB:7F:80:F9:B8:ED:8C:57:AB:48:A5:86:36:B5:A9:AC:2D:5E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9c:31:0f:2c:94:87:d7:3b:9d:03:42:60:76:60:0f:7e:66:
d2:b1:54:3e:f3:6f:7f:a1:b3:e1:f6:77:9b:5f:d7:3d:78:9e:
93:8b:34:46:ec:70:15:5b:1e:46:8e:7d:d8:3d:5e:f7:44:38:
84:27:a2:3f:38:9e:ca:96:d5:fb:68:32:da:17:1d:ec:e6:a7:
ea:71:b8:36:58:06:ab:22:e4:25:c1:b1:4b:41:93:35:dd:36:
7e:25:61:df:b2:65:c9:26:de:d2:ba:e1:91:62:55:bc:98:45:
9a:a6:af:9e:1e:72:67:97:5e:86:1c:13:e0:2d:e3:e3:77:6e:
28:e1:0a:5f:d8:37:58:f4:16:1a:17:72:e7:7e:6a:ab:bc:eb:
5e:c0:eb:ea:c8:19:4e:5b:51:9c:df:f9:9d:33:df:b1:67:cc:
f6:65:77:6e:b2:5a:7a:b2:e4:6d:af:8b:91:b7:dc:27:ab:26:
70:57:36:a8:e9:e8:25:a4:8f:29:94:fa:80:f8:b3:92:1c:92:
0e:a7:6d:c8:e9:f9:7f:55:bd:e9:56:a1:ab:52:e8:6a:c1:7e:
2d:65:27:f4:a1:9a:4e:39:cb:a8:04:e9:55:b7:a5:b4:cd:eb:
87:79:06:66:94:c5:27:58:53:fe:e1:f7:9c:81:0d:0b:41:a8:
05:b5:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:40:42 2026 by rpki-client