Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: BCWrnj/JiU+VUZoOyWOqbE0NUMJ5Sl3BYNdffweZa78=
Subject key identifier: EA:A5:E1:60:9E:B1:0D:F1:99:31:5B:1B:F9:CB:58:74:18:06:D1:3B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 57B6E1E83E5CE5A40D7002FD66D20D6AB5D6733B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS42831.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 42831
IP address blocks: 46.236.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b6:e1:e8:3e:5c:e5:a4:0d:70:02:fd:66:d2:0d:6a:b5:d6:73:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=EAA5E1609EB10DF199315B1BF9CB58741806D13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:0d:db:b7:d9:ad:e4:0e:14:35:5f:c0:37:
9f:48:c2:87:77:8f:3e:ab:89:92:13:a0:11:a3:72:
42:30:15:20:5b:52:28:2f:5c:d8:7a:b0:a6:e3:63:
c9:68:b5:36:a5:dc:a5:2f:d0:bf:ca:1e:21:b2:da:
c7:23:27:01:12:a2:4f:1f:f6:4e:b9:6d:33:64:a5:
00:25:19:11:0a:f5:cf:2f:80:e1:f7:07:73:94:e4:
d4:33:7a:f6:ff:96:40:6f:cd:d8:50:e2:7f:41:0d:
6e:10:28:2a:f7:79:f4:0e:6d:7d:ff:37:84:5d:e8:
6b:14:e4:ca:56:0d:fb:6c:88:a9:e4:64:3d:95:2d:
19:2b:55:ad:92:3e:86:19:d1:09:fd:02:4c:00:5a:
68:1d:0b:43:37:2b:bd:6e:30:33:6c:e2:e1:ce:78:
d4:45:21:78:cb:c6:56:6f:51:16:48:5d:f4:db:46:
b2:08:bd:d5:2e:97:62:b7:b6:68:df:f0:8a:74:1e:
da:c6:65:6f:6c:78:9a:d2:5a:bd:8c:ed:b7:68:6c:
71:1e:3d:d6:1c:de:e6:5b:6d:a7:1b:89:a6:b3:f2:
4c:23:04:fd:2b:0c:75:5e:52:a2:93:63:be:8e:82:
2c:5b:fe:62:cf:8a:2a:6b:bd:ef:16:ba:2f:b3:cd:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A5:E1:60:9E:B1:0D:F1:99:31:5B:1B:F9:CB:58:74:18:06:D1:3B
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.215.0/24
Signature Algorithm: sha256WithRSAEncryption
54:15:8d:66:0d:06:6b:13:42:39:72:51:b9:77:f2:c0:69:3c:
0a:c0:f7:d5:87:26:f6:f9:25:c8:5b:b0:04:8a:8f:e6:7b:c9:
16:87:ef:6c:2b:7a:62:18:94:4b:10:e1:80:7e:f3:2b:02:ab:
f9:a3:55:42:bd:21:65:82:6a:4f:86:b6:c8:78:cc:01:41:bf:
a8:fa:fe:d3:ea:b4:fb:78:96:99:3c:95:09:e6:17:1d:fe:78:
95:a6:1e:45:f8:e9:ca:4c:21:e2:27:d3:23:41:09:0c:b8:e4:
5d:f6:99:7c:5b:0d:d2:fd:3f:41:9d:4f:b6:6e:52:80:70:f7:
09:c6:f1:3e:28:e3:01:5f:2e:d2:c1:ca:16:bb:03:70:19:a6:
4e:36:05:6d:31:a3:00:d3:2d:80:5c:9e:aa:d6:2a:5d:5c:c2:
ae:d1:bc:92:98:ae:66:9e:56:bb:55:5c:c5:0d:69:df:c9:58:
dc:43:e4:af:40:6f:7c:b3:9d:ff:e5:9f:11:db:97:6b:f8:51:
f8:3c:57:d0:5e:55:a0:c0:d8:1a:54:22:a1:83:3a:11:7b:68:
4d:58:3f:2c:23:be:dc:63:f0:20:b9:bb:65:81:15:e5:80:a9:
39:3f:00:8e:d7:69:2a:95:fd:14:b0:a6:f5:5c:1e:97:d8:ec:
c3:df:3f:c6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUV7bh6D5c5aQNcAL9ZtINarXWczswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MDExMDQ0MzBaFw0yNzA4MzExMDQ5MzBaMDMxMTAvBgNV
BAMTKEVBQTVFMTYwOUVCMTBERjE5OTMxNUIxQkY5Q0I1ODc0MTgwNkQxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsw3bt9mt5A4UNV/AN59Iwod3
jz6riZIToBGjckIwFSBbUigvXNh6sKbjY8lotTal3KUv0L/KHiGy2scjJwESok8f
9k65bTNkpQAlGREK9c8vgOH3B3OU5NQzevb/lkBvzdhQ4n9BDW4QKCr3efQObX3/
N4Rd6GsU5MpWDftsiKnkZD2VLRkrVa2SPoYZ0Qn9AkwAWmgdC0M3K71uMDNs4uHO
eNRFIXjLxlZvURZIXfTbRrIIvdUul2K3tmjf8Ip0HtrGZW9seJrSWr2M7bdobHEe
PdYc3uZbbacbiaaz8kwjBP0rDHVeUqKTY76Ogixb/mLPiiprve8Wui+zzbhvAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU6qXhYJ6xDfGZMVsb+ctYdBgG0TswHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAu7Ncw
DQYJKoZIhvcNAQELBQADggEBAFQVjWYNBmsTQjlyUbl38sBpPArA99WHJvb5Jchb
sASKj+Z7yRaH72wremIYlEsQ4YB+8ysCq/mjVUK9IWWCak+Gtsh4zAFBv6j6/tPq
tPt4lpk8lQnmFx3+eJWmHkX46cpMIeIn0yNBCQy45F32mXxbDdL9P0GdT7ZuUoBw
9wnG8T4o4wFfLtLByha7A3AZpk42BW0xowDTLYBcnqrWKl1cwq7RvJKYrmaeVrtV
XMUNad/JWNxD5K9Ab3yznf/lnxHbl2v4Ufg8V9BeVaDA2BpUIqGDOhF7aE1YPywj
vtxj8CC5u2WBFeWAqTk/AI7XaSqV/RSwpvVcHpfY7MPfP8Y=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:01 2026 by rpki-client