Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: I0BuWc8CwCnkJ13UPoyg95ZBDZM8tlvqIaF/PwYLToo=
Subject key identifier: F1:01:3B:2A:B4:E8:97:D8:97:27:B0:AC:88:5E:BF:3F:03:D7:DF:0E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0FDE57D01EE65E176EB45958A5E0470B04A97422
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42831.roa
Signing time: Sun 01 Mar 2026 16:04:24 +0000
ROA not before: Sun 01 Mar 2026 15:59:24 +0000
ROA not after: Sun 28 Feb 2027 16:04:24 +0000
asID: 42831
IP address blocks: 82.21.128.0/24 maxlen: 24
82.21.131.0/24 maxlen: 24
82.22.49.0/24 maxlen: 24
82.22.56.0/24 maxlen: 24
82.22.58.0/24 maxlen: 24
82.22.145.0/24 maxlen: 24
82.24.24.0/24 maxlen: 24
82.24.33.0/24 maxlen: 24
82.24.126.0/24 maxlen: 24
82.25.41.0/24 maxlen: 24
82.25.59.0/24 maxlen: 24
82.25.187.0/24 maxlen: 24
82.25.205.0/24 maxlen: 24
82.26.120.0/24 maxlen: 24
82.26.140.0/24 maxlen: 24
82.38.18.0/24 maxlen: 24
82.38.29.0/24 maxlen: 24
82.38.30.0/24 maxlen: 24
82.38.33.0/24 maxlen: 24
82.38.48.0/24 maxlen: 24
82.38.49.0/24 maxlen: 24
82.38.50.0/24 maxlen: 24
82.38.99.0/24 maxlen: 24
82.38.182.0/24 maxlen: 24
82.39.115.0/24 maxlen: 24
82.39.119.0/24 maxlen: 24
82.39.132.0/24 maxlen: 24
82.39.144.0/24 maxlen: 24
82.39.153.0/24 maxlen: 24
82.39.184.0/24 maxlen: 24
82.39.204.0/24 maxlen: 24
82.41.4.0/24 maxlen: 24
82.41.16.0/24 maxlen: 24
82.41.17.0/24 maxlen: 24
82.41.18.0/24 maxlen: 24
82.41.43.0/24 maxlen: 24
82.41.59.0/24 maxlen: 24
82.41.118.0/24 maxlen: 24
82.41.121.0/24 maxlen: 24
82.41.144.0/24 maxlen: 24
82.41.145.0/24 maxlen: 24
82.41.147.0/24 maxlen: 24
82.41.201.0/24 maxlen: 24
82.41.203.0/24 maxlen: 24
2a13:9500:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:de:57:d0:1e:e6:5e:17:6e:b4:59:58:a5:e0:47:0b:04:a9:74:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 1 15:59:24 2026 GMT
Not After : Feb 28 16:04:24 2027 GMT
Subject: CN=F1013B2AB4E897D89727B0AC885EBF3F03D7DF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:46:ea:55:e9:ed:8e:a5:3f:93:05:45:74:
3a:3c:c2:40:49:d5:2c:10:95:f0:09:32:a7:f8:38:
54:04:7a:fa:83:20:99:5e:c3:e4:05:7a:44:59:99:
cc:aa:82:b2:29:fc:08:3b:91:b1:03:e7:4a:43:f5:
8e:3c:b2:fa:26:a7:06:b0:35:1f:2c:e8:7f:58:64:
a0:3a:a2:2a:07:1a:46:4d:cb:c4:1a:b6:f9:c4:f5:
6d:e3:13:12:f7:4a:0f:ba:40:81:6f:44:01:31:8a:
d1:b1:55:8f:b7:ad:f6:1f:71:0d:76:f8:19:ea:c9:
0e:bb:e5:31:4f:9c:cb:f3:ca:28:fb:f0:64:13:79:
aa:b0:83:ca:bb:20:39:a9:e7:1f:87:7e:c6:27:52:
3d:b0:8a:f5:7b:da:bf:df:c6:64:86:fd:45:a5:08:
ab:c7:9d:67:76:14:9f:d7:fb:c6:80:88:a9:58:82:
c5:07:da:96:c1:8c:2c:93:b8:02:30:14:57:ef:11:
a0:46:0d:7f:01:97:1a:e7:2a:8e:63:17:55:bb:34:
f5:00:ae:16:82:fa:97:10:cd:d6:31:88:a7:6f:4e:
aa:b3:ee:52:4c:ce:30:06:63:78:98:10:13:38:1d:
8a:74:c9:1d:7f:e9:09:36:0b:66:92:d5:74:45:fa:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:01:3B:2A:B4:E8:97:D8:97:27:B0:AC:88:5E:BF:3F:03:D7:DF:0E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.128.0/24
82.21.131.0/24
82.22.49.0/24
82.22.56.0/24
82.22.58.0/24
82.22.145.0/24
82.24.24.0/24
82.24.33.0/24
82.24.126.0/24
82.25.41.0/24
82.25.59.0/24
82.25.187.0/24
82.25.205.0/24
82.26.120.0/24
82.26.140.0/24
82.38.18.0/24
82.38.29.0-82.38.30.255
82.38.33.0/24
82.38.48.0-82.38.50.255
82.38.99.0/24
82.38.182.0/24
82.39.115.0/24
82.39.119.0/24
82.39.132.0/24
82.39.144.0/24
82.39.153.0/24
82.39.184.0/24
82.39.204.0/24
82.41.4.0/24
82.41.16.0-82.41.18.255
82.41.43.0/24
82.41.59.0/24
82.41.118.0/24
82.41.121.0/24
82.41.144.0/23
82.41.147.0/24
82.41.201.0/24
82.41.203.0/24
IPv6:
2a13:9500:108::/48
Signature Algorithm: sha256WithRSAEncryption
4c:66:b0:4b:85:60:8b:34:17:e6:10:08:bb:45:2a:23:16:87:
37:78:1e:77:1b:10:6b:3b:3e:89:bf:2e:48:06:77:e5:84:ed:
4d:29:f5:c4:76:9c:13:4a:ea:82:cd:0c:4e:36:9f:f4:9f:11:
d3:33:ef:8b:7c:17:bf:a9:37:be:19:cf:ba:ac:98:1f:f6:56:
92:1e:64:bc:a2:31:66:bf:10:d4:8b:8b:53:96:02:81:e0:d0:
48:b1:e4:28:b2:aa:82:e8:7a:c9:e2:53:18:30:d4:7b:fd:97:
4e:fd:57:b9:50:b3:b9:26:d3:37:99:b3:34:87:30:6d:7d:06:
17:a9:1c:c1:f1:82:88:fe:b7:c8:b9:c0:d7:c8:e1:29:5c:d6:
5e:b4:c8:79:30:01:bd:df:1e:63:dc:ad:0f:2c:21:49:76:be:
0c:31:4b:17:be:50:44:10:09:58:5f:f3:98:ec:06:0c:4b:53:
7c:a3:54:fd:3b:9b:63:e3:56:c4:19:3d:68:7f:00:af:35:19:
38:62:4b:7d:b9:41:2e:0e:81:3d:02:74:36:f8:59:83:ba:36:
7c:fc:c1:83:38:15:d0:06:f1:02:6d:53:a0:7f:fe:b8:c3:b0:
57:ee:ee:f2:b5:31:1a:10:ac:9e:37:10:08:fd:f0:76:4a:1f:
9a:78:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:25 2026 by rpki-client