Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: LU4nfIogYj8Fi/dTIPz6n/ed85xSv2yemV0MDOeiYak=
Subject key identifier: A0:57:D0:DE:15:F6:1C:1A:3B:5B:BF:A8:C3:D1:F1:73:DF:6D:EB:67
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 60174F4612DF1430318A167422F0ED8EE394182E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
Signing time: Tue 26 May 2026 15:47:50 +0000
ROA not before: Tue 26 May 2026 15:42:50 +0000
ROA not after: Tue 25 May 2027 15:47:50 +0000
asID: 42831
IP address blocks: 51.194.134.0/24 maxlen: 24
51.194.136.0/24 maxlen: 24
51.194.138.0/24 maxlen: 24
51.241.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:17:4f:46:12:df:14:30:31:8a:16:74:22:f0:ed:8e:e3:94:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 26 15:42:50 2026 GMT
Not After : May 25 15:47:50 2027 GMT
Subject: CN=A057D0DE15F61C1A3B5BBFA8C3D1F173DF6DEB67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:9d:c4:81:82:ae:4d:16:9c:b4:fc:c1:95:
9d:82:69:96:26:78:c6:75:82:4c:53:a9:e8:8c:b2:
ce:a9:f8:b4:d8:89:64:21:fd:27:37:06:9b:e7:6d:
43:49:7c:cf:bf:9b:46:b8:6e:96:60:47:3e:59:66:
77:20:e8:f5:93:12:63:b5:6a:81:e0:83:a0:79:69:
00:ba:67:af:35:17:ee:1a:26:ce:56:d3:56:46:f6:
c6:ad:03:f7:55:0a:df:1b:75:0c:1a:5f:3b:91:b5:
56:1d:08:09:c3:23:b9:d4:d2:06:8a:6e:7c:94:8d:
99:e3:f9:d7:58:c1:71:a5:4e:f2:9d:9d:c8:66:0b:
df:fd:5b:e0:a7:87:7b:62:1b:d6:fb:5c:3c:69:15:
aa:f3:b1:91:57:f2:78:cf:d9:71:7f:e9:67:cc:84:
69:4d:64:14:64:f2:20:45:4c:15:ab:94:5c:61:de:
e5:e4:04:e3:89:14:f3:af:0b:2e:f8:7b:7d:d0:6a:
23:e1:3f:0f:39:37:80:b3:f8:68:92:d9:10:31:9d:
c9:c8:a5:8e:17:cf:ed:64:07:98:2a:de:cc:58:0d:
58:d4:be:cf:1b:c9:12:77:26:5c:5d:54:2d:72:19:
13:12:b5:81:fb:b6:13:cf:87:b4:a2:e3:5b:b5:02:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:D0:DE:15:F6:1C:1A:3B:5B:BF:A8:C3:D1:F1:73:DF:6D:EB:67
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.134.0/24
51.194.136.0/24
51.194.138.0/24
51.241.184.0/23
Signature Algorithm: sha256WithRSAEncryption
25:38:8f:27:02:bd:57:58:be:2c:13:24:df:a6:f6:b5:54:55:
54:ce:8d:d1:d7:ad:18:46:c3:89:8a:3e:83:8f:81:45:ad:52:
cb:ae:4d:43:1f:40:f2:3d:97:98:92:63:ba:66:a2:62:9f:ed:
13:f3:fd:2e:6a:eb:07:f3:dd:9f:c7:72:31:7a:bd:68:54:5d:
79:03:e7:41:06:30:36:0a:ca:d7:66:22:2f:a3:09:31:74:1d:
8d:e3:71:16:e5:36:fc:e6:a2:a4:9c:e1:17:91:82:9a:15:d9:
15:22:86:df:2f:cd:4b:0f:f9:3e:01:83:e9:15:24:2e:51:1b:
9c:1a:82:11:7a:6c:fb:94:71:9f:6d:82:cb:62:e5:e1:66:52:
62:ec:6d:6d:28:6d:26:9b:fd:64:1d:8c:7d:f7:b3:62:79:f1:
ed:57:b9:0e:22:06:24:cb:25:c9:29:1a:46:39:81:e9:d8:23:
85:37:d7:51:e7:b1:cd:23:2e:22:26:65:17:79:70:6e:37:1a:
55:77:16:b8:4a:17:d9:69:d4:70:05:54:ba:2d:73:3c:af:eb:
44:e8:12:97:d0:57:2a:98:b5:96:a0:94:08:be:5e:96:81:74:
de:cb:62:2d:a9:b9:16:de:cf:e2:34:17:a2:d7:31:db:11:2a:
a5:e3:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:13 2026 by rpki-client