Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: 5oNUXWTK7NkqHIh/69J8ROwkgw7pipo+DK0+Gsly/aU=
Subject key identifier: D2:9F:34:46:67:BE:AE:B3:3D:40:FC:E8:09:50:2F:5A:9F:87:B0:9F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2AA9711D11A6BAED2FFA5554BCC7B4083EAE9A04
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
Signing time: Wed 04 Mar 2026 09:26:58 +0000
ROA not before: Wed 04 Mar 2026 09:21:58 +0000
ROA not after: Wed 03 Mar 2027 09:26:58 +0000
asID: 42831
IP address blocks: 143.20.15.0/24 maxlen: 24
143.20.46.0/24 maxlen: 24
143.20.60.0/24 maxlen: 24
143.20.67.0/24 maxlen: 24
143.20.118.0/24 maxlen: 24
143.20.119.0/24 maxlen: 24
143.20.123.0/24 maxlen: 24
143.20.146.0/24 maxlen: 24
143.20.154.0/24 maxlen: 24
143.20.181.0/24 maxlen: 24
143.20.183.0/24 maxlen: 24
143.20.193.0/24 maxlen: 24
143.20.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a9:71:1d:11:a6:ba:ed:2f:fa:55:54:bc:c7:b4:08:3e:ae:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Mar 4 09:21:58 2026 GMT
Not After : Mar 3 09:26:58 2027 GMT
Subject: CN=D29F344667BEAEB33D40FCE809502F5A9F87B09F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:22:00:07:d8:3e:67:cc:8d:22:97:43:a5:
ed:08:55:d1:53:8e:39:0d:34:e5:54:02:54:1e:4d:
55:37:4d:26:92:5b:fe:2d:80:fc:e0:c2:43:fd:35:
77:7d:06:17:21:08:3b:82:cf:28:90:eb:97:a6:39:
14:c6:f7:e5:7a:fc:fc:8b:6b:68:a9:17:c9:24:1d:
be:5f:ea:35:ad:0b:1a:92:84:c0:7c:5d:dd:16:72:
b9:67:48:b1:2f:3d:07:4f:73:6d:44:96:2d:c0:87:
ff:f9:f3:dc:1a:a8:5f:c5:b3:89:4a:b1:40:68:7f:
02:e3:40:13:3d:7c:f5:9b:c6:dc:5a:b4:c0:e0:51:
61:2e:2a:aa:a4:ca:c6:e2:7c:bb:5c:f8:84:a6:d1:
c4:b3:d0:30:21:a6:76:b3:ff:e0:d3:ff:b4:7d:8a:
6f:52:c9:fa:d0:32:90:cf:53:f1:67:37:59:8e:6c:
84:35:50:c0:6a:59:37:6b:c0:6c:ec:84:b6:d2:24:
17:12:39:f2:e9:f7:5e:10:2e:5d:64:b2:d7:76:4e:
cc:86:b1:42:1b:97:5b:d5:4c:be:15:ab:05:58:45:
18:1f:69:5f:60:20:60:67:4d:93:95:e7:87:1b:b2:
94:08:b0:0e:0e:df:e5:45:d4:09:4c:b4:b9:e2:de:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:34:46:67:BE:AE:B3:3D:40:FC:E8:09:50:2F:5A:9F:87:B0:9F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.15.0/24
143.20.46.0/24
143.20.60.0/24
143.20.67.0/24
143.20.118.0/23
143.20.123.0/24
143.20.146.0/24
143.20.154.0/24
143.20.181.0/24
143.20.183.0/24
143.20.193.0/24
143.20.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4f:4f:14:ab:54:5d:bc:f5:77:82:cd:00:ad:a6:ed:bb:43:
b2:84:6a:56:5f:02:95:01:15:79:e7:cf:19:b1:8c:47:68:8f:
b1:4d:0b:45:15:b3:85:2f:f4:46:cd:20:6e:45:00:f8:0f:6f:
8c:61:74:3e:6a:83:7c:59:8d:0b:5e:d4:3a:77:ed:5a:01:7f:
49:ee:84:d0:0f:22:72:af:01:c8:ec:3b:e2:06:36:7b:c0:36:
43:86:1d:e8:b3:a3:f0:99:14:da:66:92:5a:f7:2e:f4:83:70:
80:3c:7a:65:48:43:33:46:dc:65:01:96:e3:83:0e:b0:58:fe:
4a:0f:de:5c:97:eb:3d:2f:c7:c8:7f:fe:90:08:e5:40:89:2e:
fb:b8:ed:e3:b3:3b:38:4d:fd:39:6d:65:9c:8b:3d:b9:f0:15:
72:05:22:73:b0:0c:c4:76:0b:77:a3:32:a8:91:8a:11:bd:9b:
c4:cc:a6:19:e1:3a:d6:2e:8f:69:35:69:c8:e0:72:90:8c:54:
b6:0f:c2:20:e7:39:26:26:80:17:12:b5:ed:af:d5:3d:16:c5:
f1:6b:c1:a7:97:d6:c1:ef:39:f1:fb:6d:33:a4:92:d8:2e:85:
7b:fe:59:ac:37:dd:e2:d0:bc:e4:1b:44:90:5c:d8:12:6f:b2:
d4:fd:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:41:20 2026 by rpki-client