Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: bNGEv1zP/cfbhpwcB4VwsPQe/KLjYI6CKyHvCYoWrS8=
Subject key identifier: E7:08:E0:77:69:8C:5B:CE:31:AD:8A:EA:CC:7D:58:00:B4:48:E8:33
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0BB923148D16A31ACEEB79410F3819886D6524CA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42960.roa
Signing time: Wed 11 Nov 2026 16:08:55 +0000
ROA not before: Wed 11 Nov 2026 16:03:55 +0000
ROA not after: Wed 10 Nov 2027 16:08:55 +0000
asID: 42960
IP address blocks: 141.11.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b9:23:14:8d:16:a3:1a:ce:eb:79:41:0f:38:19:88:6d:65:24:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 11 16:03:55 2026 GMT
Not After : Nov 10 16:08:55 2027 GMT
Subject: CN=E708E077698C5BCE31AD8AEACC7D5800B448E833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:cc:bf:b7:4c:90:b6:03:27:f0:98:bb:5e:
8a:17:6a:f5:59:16:03:4c:fb:fe:be:58:41:b8:e7:
83:6f:f1:7b:aa:46:e3:86:8b:ca:94:a2:26:d8:ee:
d7:a8:6a:f7:30:fb:56:16:97:bc:f0:20:12:0f:79:
be:f7:c8:63:17:16:d7:9c:e9:19:52:c0:01:7c:86:
dc:0b:b3:55:ca:76:08:b6:df:62:fb:e5:98:cc:44:
96:9a:1f:6e:fb:da:29:10:91:11:70:7b:de:a8:d3:
b0:88:28:8f:62:c4:01:5b:d9:27:4b:90:0e:13:34:
9f:7d:ec:ac:b8:6d:b0:84:bb:21:ac:d4:26:5f:68:
c7:2a:0a:af:4b:57:fc:d2:53:68:50:08:09:7b:ce:
ae:a4:55:21:46:aa:cb:f6:32:3f:fd:20:5b:12:04:
cf:95:83:84:5a:22:fb:05:a6:13:dc:f2:30:e2:0e:
7b:78:29:ef:5a:03:b4:af:35:68:9a:03:ac:64:f3:
19:3e:79:82:e4:3b:20:e4:2b:94:ce:b3:61:6e:0d:
fe:74:91:07:db:ba:da:83:2f:21:0d:8d:e4:bf:13:
9f:29:a8:6a:ea:88:e5:79:aa:4b:8b:c1:4c:f7:ac:
c0:15:9f:44:7b:d9:be:c0:cb:9d:4e:56:e0:92:27:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:E0:77:69:8C:5B:CE:31:AD:8A:EA:CC:7D:58:00:B4:48:E8:33
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:45:e3:63:12:4f:ae:07:61:18:2c:90:5f:3b:ee:16:69:8f:
73:7d:20:1d:f6:5a:2d:d0:45:d8:79:ac:99:da:01:88:bc:f6:
4d:e8:1e:5b:2e:b8:4d:71:92:83:b2:05:fa:78:b2:b1:38:75:
66:cc:f7:86:66:02:14:80:e5:bb:9b:78:83:75:41:13:ab:3b:
c1:e2:53:49:ae:b9:46:ca:9a:15:19:f7:f7:dd:44:1e:87:f9:
cc:60:3b:2f:19:88:2a:5b:41:50:75:f0:31:b9:d6:dc:e5:4d:
88:47:c8:c8:b3:45:f1:c5:fb:ed:0d:bc:39:1b:14:3f:b0:68:
b0:83:c7:67:73:38:b7:39:90:22:0d:fa:6d:3f:4d:ef:8b:34:
52:15:e2:b0:c5:4f:e3:a3:3b:e4:5d:95:74:57:bb:6b:b8:3f:
d9:17:3a:2e:ed:0c:8d:4c:b1:a1:cd:95:0e:bf:4d:83:97:f8:
af:0e:db:31:07:6f:27:2b:91:78:96:5e:b1:ae:be:bf:d8:11:
42:ae:0e:ba:b7:1e:4c:31:ec:1e:3d:75:d8:a8:f7:c0:9e:e7:
ff:77:ac:0c:08:bf:75:ed:62:c4:25:00:b9:dd:95:3b:df:a0:
35:d4:e0:79:52:d0:17:03:0a:1c:19:0b:f5:6e:26:29:be:55:
4d:d2:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:00:40 2026 by rpki-client