Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: xbM1km0KSJ/BYBKNlRFogdWVf3NKyf+FSpS6zvAobgY=
Subject key identifier: 65:34:56:86:17:18:16:E0:1F:3F:01:21:E9:6A:69:72:C9:63:88:1B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 630EF113CBD55DD60E42E34C9192403AE9938BA7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
Signing time: Wed 01 Jul 2026 12:38:03 +0000
ROA not before: Wed 01 Jul 2026 12:33:03 +0000
ROA not after: Wed 30 Jun 2027 12:38:03 +0000
asID: 42689
IP address blocks: 46.202.28.0/24 maxlen: 24
46.202.52.0/24 maxlen: 24
91.124.4.0/24 maxlen: 24
91.124.5.0/24 maxlen: 24
91.124.25.0/24 maxlen: 24
91.124.53.0/24 maxlen: 24
91.124.56.0/24 maxlen: 24
91.124.61.0/24 maxlen: 24
91.124.193.0/24 maxlen: 24
91.124.218.0/24 maxlen: 24
91.124.239.0/24 maxlen: 24
91.124.240.0/24 maxlen: 24
91.124.254.0/24 maxlen: 24
92.113.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0e:f1:13:cb:d5:5d:d6:0e:42:e3:4c:91:92:40:3a:e9:93:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 1 12:33:03 2026 GMT
Not After : Jun 30 12:38:03 2027 GMT
Subject: CN=65345686171816E01F3F0121E96A6972C963881B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:00:be:20:28:e4:7a:40:d7:f6:d0:74:e0:
2e:fd:c8:64:66:3d:d1:1a:05:ab:28:90:8d:4a:8e:
8b:3a:c5:ac:ba:15:df:44:b6:dc:a9:20:b5:ea:db:
5f:18:e7:01:0f:f2:df:83:1d:06:dc:bb:05:00:65:
66:1b:c0:10:29:64:b3:d7:7f:40:65:7a:4c:a8:43:
52:ef:8d:1c:15:be:82:6a:b5:80:88:83:54:18:54:
96:fd:33:a3:d7:1e:83:ef:39:23:06:59:64:71:f8:
5d:9a:c1:b3:d1:ec:ba:0b:62:29:c8:a2:89:7c:cd:
b4:e1:8b:25:12:2b:bb:65:b1:47:ad:e5:78:a2:91:
b6:ec:f1:e0:3c:ae:ce:7e:cb:5e:a5:b3:5f:78:66:
c3:10:1a:86:70:6d:21:65:17:a1:19:b0:f4:d5:40:
52:1e:85:47:d0:1c:4f:f3:9d:f8:20:f5:df:4c:bd:
de:24:56:02:a3:0e:bd:6f:3a:47:d1:7b:03:7c:92:
e9:19:b4:b3:41:72:42:f8:c7:15:ab:de:56:53:ba:
d1:77:40:f4:27:10:29:89:ce:c6:02:a8:3d:0e:8f:
f8:1f:fb:65:9c:b5:c6:e3:b2:13:4a:9d:68:db:2b:
28:cd:c8:42:65:41:fd:d0:82:01:da:8a:74:19:df:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:56:86:17:18:16:E0:1F:3F:01:21:E9:6A:69:72:C9:63:88:1B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.28.0/24
46.202.52.0/24
91.124.4.0/23
91.124.25.0/24
91.124.53.0/24
91.124.56.0/24
91.124.61.0/24
91.124.193.0/24
91.124.218.0/24
91.124.239.0-91.124.240.255
91.124.254.0/24
92.113.62.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1b:a8:e3:90:82:a3:98:d1:98:4f:29:86:19:da:ad:6e:6d:
03:57:87:46:25:84:5e:af:db:66:4b:84:18:ca:8b:86:35:74:
7f:57:8c:6c:0b:65:a4:a7:15:3b:17:ac:d8:c0:0a:a5:80:ab:
cb:aa:34:76:79:56:ae:e0:b4:63:0d:4b:c1:eb:9a:bc:5b:c6:
44:6c:79:8b:50:3e:90:a9:3b:4c:bf:e6:98:24:a8:0b:ff:c6:
e1:22:60:b6:b9:1b:99:d0:0f:3c:64:8b:76:02:db:9c:5e:e8:
f8:3e:c0:43:17:d2:d5:a1:1e:7e:21:22:86:e5:4d:9a:f1:7a:
ec:4a:f2:10:50:f1:9a:69:81:04:54:8d:5e:ba:7e:a4:6b:57:
9e:d2:0d:4b:91:f2:c5:41:47:48:1c:c1:a0:79:04:33:0d:b9:
6f:7c:50:1f:5e:83:25:27:d3:5f:64:7e:2e:52:3a:a1:ff:89:
49:e5:58:18:54:2c:66:4a:9d:c0:7b:f4:5b:07:de:05:00:8e:
5d:3a:98:75:0e:d5:2d:bd:6f:7b:9f:36:a3:04:30:5e:e7:97:
99:a2:64:b6:a6:48:5a:24:d6:74:fb:40:d4:b5:90:cb:25:c6:
68:e4:46:e7:ab:be:20:7b:7f:f7:f3:6f:18:27:ef:42:88:aa:
f5:72:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:29:31 2026 by rpki-client