Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: FXdywjLtsIMMqMwA6Vf5LCtPnT7jXvPaZwol9FUvnFo=
Subject key identifier: 2A:DC:6D:E3:D3:EA:A6:E2:22:13:61:44:4F:08:FA:2D:A0:5E:67:AD
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5C26F3544635B9E34F421AF2F0909EED985DABFE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
Signing time: Fri 04 Sep 2026 00:04:47 +0000
ROA not before: Thu 03 Sep 2026 23:59:47 +0000
ROA not after: Fri 03 Sep 2027 00:04:47 +0000
asID: 42831
IP address blocks: 143.20.15.0/24 maxlen: 24
143.20.46.0/24 maxlen: 24
143.20.67.0/24 maxlen: 24
143.20.119.0/24 maxlen: 24
143.20.123.0/24 maxlen: 24
143.20.154.0/24 maxlen: 24
143.20.181.0/24 maxlen: 24
143.20.183.0/24 maxlen: 24
143.20.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:26:f3:54:46:35:b9:e3:4f:42:1a:f2:f0:90:9e:ed:98:5d:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 23:59:47 2026 GMT
Not After : Sep 3 00:04:47 2027 GMT
Subject: CN=2ADC6DE3D3EAA6E2221361444F08FA2DA05E67AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:61:a9:8f:22:ae:48:35:b0:13:26:bb:17:
8f:7f:0e:4a:98:f1:fd:65:fe:88:a4:0b:7c:59:ef:
65:8b:b8:44:79:cd:66:cb:cf:80:e2:c7:46:32:cc:
e8:6c:ed:fc:0e:0a:c7:95:dd:46:e8:3b:09:58:02:
ac:17:53:c3:e2:b9:fc:49:99:95:97:3d:0e:fc:32:
9b:54:c9:48:d7:7c:5b:d8:c3:78:28:4f:43:82:be:
b3:0d:6f:ac:26:7c:73:25:71:5b:58:d1:42:8e:2a:
ad:d6:c8:bd:55:31:47:80:0a:b2:cb:ea:b7:c5:b1:
6d:a6:89:98:78:39:00:81:b7:d1:fe:83:84:70:14:
60:84:c4:2c:29:bd:65:b3:90:4d:e1:95:76:b1:62:
33:c2:42:31:53:54:d4:b7:62:b0:5a:74:56:42:ed:
26:2a:aa:8f:22:bd:83:c0:98:ca:ab:72:91:23:c4:
3d:c2:a8:dd:fa:d9:e0:15:b2:ca:86:48:28:6a:96:
ab:d1:f1:ae:4c:76:00:97:72:4b:d8:ea:fd:83:76:
2d:22:25:73:05:49:b1:17:aa:4d:bd:33:d4:b9:f3:
65:1e:4d:01:0f:6b:22:5e:ce:af:b6:11:38:ce:b3:
91:44:fb:c5:90:a2:81:78:13:ce:89:10:fe:a1:28:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:6D:E3:D3:EA:A6:E2:22:13:61:44:4F:08:FA:2D:A0:5E:67:AD
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.15.0/24
143.20.46.0/24
143.20.67.0/24
143.20.119.0/24
143.20.123.0/24
143.20.154.0/24
143.20.181.0/24
143.20.183.0/24
143.20.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:33:68:45:41:ea:26:29:b0:84:67:53:ad:94:cd:3f:46:16:
bb:3c:88:5c:fd:ed:77:b6:f6:0c:8f:71:7f:1e:28:5b:02:62:
3a:65:d0:21:a8:f0:3a:96:58:45:7e:9c:a4:cd:b1:e5:70:f5:
f5:30:e4:41:7e:85:8f:73:86:ff:0b:80:4e:95:b0:f5:53:04:
ca:44:3e:a1:b0:f0:ee:e6:f4:8f:e0:9b:1c:95:7c:58:d4:a7:
c4:0c:58:c6:99:f3:79:f4:2b:59:36:f4:48:08:f7:eb:e7:72:
df:7d:1c:4d:a0:c9:2d:ec:41:4c:c7:6a:32:b5:69:d7:88:0f:
52:7e:a5:aa:2e:6c:74:d5:7a:ae:40:18:bb:bb:85:b1:37:ef:
02:46:93:21:60:c3:4a:fb:8c:7f:9d:b8:46:b4:19:1f:81:2b:
1c:5e:7d:e1:d4:fc:ce:b7:d3:f6:31:00:20:16:b9:c2:d2:63:
06:79:b0:e5:55:7d:ea:fa:5c:8b:e4:4d:2d:4b:18:14:c3:d4:
01:e9:1a:84:e9:09:26:18:10:fa:f1:88:35:93:c7:e2:a6:46:
98:43:c9:7a:b7:0f:ea:f8:52:e6:22:ee:37:27:cd:b8:60:4a:
86:32:2d:42:40:38:bb:2b:fa:3b:45:59:80:df:15:88:fd:34:
a9:04:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:34:43 2026 by rpki-client