Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: RKPgzft8DHyx2Zyd9POs94CxOqTNTlnqDOBzz99ZSps=
Subject key identifier: D0:38:FA:38:A4:00:7C:5D:CF:43:19:CA:05:71:E6:A1:B1:DE:C5:A3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2D1DCDB9B929D4FF388B270B1B9D5EE7C2C76DCD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
Signing time: Tue 12 May 2026 11:34:35 +0000
ROA not before: Tue 12 May 2026 11:29:35 +0000
ROA not after: Tue 11 May 2027 11:34:35 +0000
asID: 42689
IP address blocks: 46.202.28.0/24 maxlen: 24
46.202.52.0/24 maxlen: 24
91.124.4.0/24 maxlen: 24
91.124.5.0/24 maxlen: 24
91.124.25.0/24 maxlen: 24
91.124.53.0/24 maxlen: 24
91.124.56.0/24 maxlen: 24
91.124.61.0/24 maxlen: 24
91.124.193.0/24 maxlen: 24
91.124.218.0/24 maxlen: 24
91.124.239.0/24 maxlen: 24
91.124.240.0/24 maxlen: 24
91.124.254.0/24 maxlen: 24
92.113.62.0/24 maxlen: 24
178.92.31.0/24 maxlen: 24
178.93.87.0/24 maxlen: 24
178.93.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1d:cd:b9:b9:29:d4:ff:38:8b:27:0b:1b:9d:5e:e7:c2:c7:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 12 11:29:35 2026 GMT
Not After : May 11 11:34:35 2027 GMT
Subject: CN=D038FA38A4007C5DCF4319CA0571E6A1B1DEC5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:d7:27:ec:bc:60:46:4c:63:e7:ae:f2:2e:
85:e0:6d:ee:19:f6:c3:39:6e:a9:82:98:48:77:92:
f0:a6:61:be:ad:36:65:7b:48:a1:cb:c2:fb:c5:1c:
eb:9a:c8:10:6b:82:2f:16:76:f5:d3:68:3f:6a:cd:
c4:4b:dd:98:17:fe:43:2f:0e:ff:86:b7:e1:9d:72:
92:82:64:1d:ea:6c:93:75:49:b0:32:b0:65:bd:a7:
a5:e2:3a:f0:98:3d:39:b2:c2:26:97:f4:9c:38:62:
e9:80:14:10:8c:80:64:dc:40:05:04:68:76:c9:ee:
28:d7:55:28:0c:43:e1:98:49:d7:af:4a:d9:1b:a1:
23:43:6a:ee:40:bd:3b:b2:08:a6:d4:fd:5d:31:da:
15:9e:00:50:c8:ce:41:3c:fa:23:19:a1:79:6d:38:
76:99:f4:de:fc:46:1c:53:c8:b2:09:17:19:dd:d8:
29:de:74:44:b1:3b:da:4f:da:15:f5:2f:8b:78:a4:
f9:7b:15:da:22:f5:c1:8d:fe:9c:07:c9:7b:7e:21:
3a:f5:7c:b7:05:e8:cb:4a:a1:7a:de:2e:70:f0:e5:
cc:a4:2a:e1:b9:89:38:27:97:4e:73:8b:74:a9:1c:
87:8b:a7:df:53:8b:67:a6:c4:15:c6:d3:61:ec:b8:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:FA:38:A4:00:7C:5D:CF:43:19:CA:05:71:E6:A1:B1:DE:C5:A3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.28.0/24
46.202.52.0/24
91.124.4.0/23
91.124.25.0/24
91.124.53.0/24
91.124.56.0/24
91.124.61.0/24
91.124.193.0/24
91.124.218.0/24
91.124.239.0-91.124.240.255
91.124.254.0/24
92.113.62.0/24
178.92.31.0/24
178.93.87.0/24
178.93.90.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bf:64:13:ec:20:44:c6:2d:2a:2a:ea:24:42:f6:e2:9f:e6:
17:3d:52:5e:78:c1:ad:00:29:59:a5:55:81:3f:ae:f9:a4:32:
71:44:28:48:76:d8:77:11:7c:c0:e5:0a:43:5b:9d:34:e2:ed:
3c:f6:8f:38:cd:0f:49:04:52:e2:17:40:c0:fa:be:9f:c9:99:
72:cb:58:23:7c:93:98:68:cd:02:72:bd:97:5c:2d:0f:be:f6:
3b:94:6d:05:3a:30:93:26:84:a6:51:76:8c:d0:39:2e:fe:2c:
21:d9:16:b1:c5:e1:de:cb:b3:dc:96:64:c5:77:ab:a8:b8:73:
63:13:ef:09:c6:59:5f:1c:72:d2:4a:32:f8:a6:21:17:a2:f7:
38:6a:89:61:d7:a4:02:30:92:36:af:14:c0:5d:72:ea:87:16:
dc:38:33:e0:b4:8d:7b:3e:23:b7:0f:4d:03:20:77:8c:a4:d4:
0f:62:43:d9:9b:3a:f9:77:13:bd:0f:42:49:10:92:8b:c9:9c:
9b:16:d1:6e:78:18:e9:c6:4a:11:77:e5:7f:df:c0:4d:fb:7a:
db:a5:c7:7a:36:b3:80:34:02:3d:45:cd:1b:cc:e9:b0:32:4e:
d6:77:4c:8a:d3:c3:36:83:39:f6:16:46:3a:c1:fe:6b:72:04:
51:e8:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:28:17 2026 by rpki-client