Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: +mAWUalNTfbUD1i/BiuB34r5nJqXIoVM2EyO93xihms=
Subject key identifier: DC:E2:D9:13:CB:C0:C6:8A:0A:A1:01:83:E6:C0:E6:7F:7F:13:13:BD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 19FF4562F63DC97AD51B056082105C304E3D09DB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
Signing time: Mon 29 Sep 2025 23:35:39 +0000
ROA not before: Mon 29 Sep 2025 23:30:39 +0000
ROA not after: Mon 28 Sep 2026 23:35:39 +0000
asID: 42689
IP address blocks: 46.202.28.0/24 maxlen: 24
46.202.52.0/24 maxlen: 24
91.124.4.0/24 maxlen: 24
91.124.5.0/24 maxlen: 24
91.124.25.0/24 maxlen: 24
91.124.53.0/24 maxlen: 24
91.124.56.0/24 maxlen: 24
91.124.61.0/24 maxlen: 24
91.124.193.0/24 maxlen: 24
91.124.218.0/24 maxlen: 24
91.124.239.0/24 maxlen: 24
91.124.240.0/24 maxlen: 24
91.124.254.0/24 maxlen: 24
95.134.77.0/24 maxlen: 24
95.134.86.0/24 maxlen: 24
95.134.87.0/24 maxlen: 24
95.134.149.0/24 maxlen: 24
178.92.248.0/24 maxlen: 24
178.94.54.0/24 maxlen: 24
178.94.68.0/24 maxlen: 24
178.94.123.0/24 maxlen: 24
178.95.11.0/24 maxlen: 24
178.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ff:45:62:f6:3d:c9:7a:d5:1b:05:60:82:10:5c:30:4e:3d:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 29 23:30:39 2025 GMT
Not After : Sep 28 23:35:39 2026 GMT
Subject: CN=DCE2D913CBC0C68A0AA10183E6C0E67F7F1313BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:f7:60:d2:05:74:32:ad:36:56:d2:67:87:
b8:71:49:b1:26:e8:15:90:dc:7b:3e:f8:35:d5:bf:
52:cf:d8:62:36:a9:24:26:e8:f8:0e:6b:e4:c8:01:
c2:71:16:c1:c3:79:84:30:fa:bf:9e:c1:90:9e:79:
5d:21:96:00:1d:a6:dd:6e:0a:04:b6:68:bf:fd:05:
44:fc:dc:45:5b:b3:3e:b7:ea:64:37:66:b4:ff:69:
04:cb:8f:7a:aa:9a:40:ff:48:77:0b:62:e8:d6:41:
fc:67:61:af:b2:a1:8f:58:b8:b2:2d:8a:29:d9:fa:
b5:54:77:39:31:16:f6:ec:e1:61:2d:3d:88:5d:6b:
51:62:55:6c:5f:05:0f:be:ee:1e:99:24:f6:0d:a8:
e1:c7:d0:fd:21:8f:f2:fc:b5:01:44:f9:41:bf:18:
c3:f3:6c:d3:5c:af:c1:bc:29:cc:51:1b:09:ee:ae:
63:4b:6e:89:69:bb:08:4d:3a:c7:9c:19:84:e6:f3:
b2:15:47:7c:10:c5:68:51:a1:2a:29:02:de:b8:88:
b1:a3:25:f7:a5:f4:c7:e9:e5:08:49:11:71:28:41:
b0:bb:a3:2d:63:3d:c9:cd:3d:e1:2a:24:55:77:5a:
b6:9f:55:7d:7c:85:df:61:d4:78:6c:86:5f:91:28:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:D9:13:CB:C0:C6:8A:0A:A1:01:83:E6:C0:E6:7F:7F:13:13:BD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.28.0/24
46.202.52.0/24
91.124.4.0/23
91.124.25.0/24
91.124.53.0/24
91.124.56.0/24
91.124.61.0/24
91.124.193.0/24
91.124.218.0/24
91.124.239.0-91.124.240.255
91.124.254.0/24
95.134.77.0/24
95.134.86.0/23
95.134.149.0/24
178.92.248.0/24
178.94.54.0/24
178.94.68.0/24
178.94.123.0/24
178.95.11.0/24
178.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
33:27:09:9b:1a:de:87:c2:82:06:55:b1:13:d7:d7:d8:47:d7:
1f:67:ca:92:95:6b:ff:ff:10:95:a7:89:4b:4c:49:af:16:09:
3d:63:d9:51:03:79:4e:e7:6a:0d:9a:b3:fe:cb:e3:b9:a6:b4:
df:1a:09:41:e1:03:82:bb:b7:dc:01:ec:05:6d:c1:45:1d:bc:
f1:6d:2c:ac:52:1b:e1:cb:f7:1c:77:6e:74:d5:a2:d2:ad:ba:
e3:d0:aa:27:46:89:1d:7c:0d:b6:db:4d:2d:5c:1f:f9:be:69:
c0:fe:cc:2a:54:ac:40:5d:43:c1:9e:74:20:e0:50:f2:f9:5c:
dd:05:10:1d:5b:28:8d:e9:91:9c:89:09:e8:1f:ba:f2:85:de:
11:d2:12:92:67:d7:31:2e:7f:47:46:da:49:29:5d:d8:0f:ff:
c3:3a:95:78:12:8c:c5:db:45:9b:35:37:e6:c8:d4:af:0d:76:
9a:45:ce:28:8e:95:57:8a:5e:f1:0d:9a:94:4c:7d:e1:2f:60:
df:9b:fc:3e:93:2f:e3:c1:af:0a:bf:cb:79:54:b2:b5:67:23:
22:39:21:d7:c9:d4:f9:18:98:03:df:36:7f:2c:ba:a4:a0:5c:
bd:bc:ee:41:63:48:b0:b6:03:fe:48:24:a6:9f:e7:66:7c:fe:
4b:a1:1c:e4
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUGf9FYvY9yXrVGwVgghBcME49CdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MjkyMzMwMzlaFw0yNjA5MjgyMzM1MzlaMDMxMTAvBgNV
BAMTKERDRTJEOTEzQ0JDMEM2OEEwQUExMDE4M0U2QzBFNjdGN0YxMzEzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Vfdg0gV0Mq02VtJnh7hxSbEm
6BWQ3Hs++DXVv1LP2GI2qSQm6PgOa+TIAcJxFsHDeYQw+r+ewZCeeV0hlgAdpt1u
CgS2aL/9BUT83EVbsz636mQ3ZrT/aQTLj3qqmkD/SHcLYujWQfxnYa+yoY9YuLIt
iinZ+rVUdzkxFvbs4WEtPYhda1FiVWxfBQ++7h6ZJPYNqOHH0P0hj/L8tQFE+UG/
GMPzbNNcr8G8KcxRGwnurmNLbolpuwhNOsecGYTm87IVR3wQxWhRoSopAt64iLGj
Jfel9Mfp5QhJEXEoQbC7oy1jPcnNPeEqJFV3WrafVX18hd9h1Hhshl+RKA61AgMB
AAGjggKIMIIChDAdBgNVHQ4EFgQU3OLZE8vAxooKoQGD5sDmf38TE70wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgZ0GCCsGAQUFBwEHAQH/BIGNMIGKMIGHBAIAATCBgAME
AC7KHAMEAC7KNAMEAVt8BAMEAFt8GQMEAFt8NQMEAFt8OAMEAFt8PQMEAFt8wQME
AFt82jAMAwQAW3zvAwQAW3zwAwQAW3z+AwQAX4ZNAwQBX4ZWAwQAX4aVAwQAslz4
AwQAsl42AwQAsl5EAwQAsl57AwQAsl8LAwQAsl8VMA0GCSqGSIb3DQEBCwUAA4IB
AQAzJwmbGt6HwoIGVbET19fYR9cfZ8qSlWv//xCVp4lLTEmvFgk9Y9lRA3lO52oN
mrP+y+O5prTfGglB4QOCu7fcAewFbcFFHbzxbSysUhvhy/ccd2501aLSrbrj0Kon
RokdfA22200tXB/5vmnA/swqVKxAXUPBnnQg4FDy+VzdBRAdWyiN6ZGciQnoH7ry
hd4R0hKSZ9cxLn9HRtpJKV3YD//DOpV4EozF20WbNTfmyNSvDXaaRc4ojpVXil7x
DZqUTH3hL2Dfm/w+ky/jwa8Kv8t5VLK1ZyMiOSHXydT5GJgD3zZ/LLqkoFy9vO5B
Y0iwtgP+SCSmn+dmfP5LoRzk
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:35:38 2025 by rpki-client