Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: 8eOmxrvYH2uxWNJQBB2dcfiGxMBvefn93Xlesc2EsUM=
Subject key identifier: B0:F8:7F:9A:6A:5E:34:2B:AB:74:3B:C5:AC:FB:F4:BD:B3:76:A7:31
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E639918DCDB9F990970AE7FDDBB72D3F57631AB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
Signing time: Fri 24 Jul 2026 09:05:11 +0000
ROA not before: Fri 24 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Jul 2027 09:05:11 +0000
asID: 42831
IP address blocks: 51.194.134.0/24 maxlen: 24
51.194.136.0/24 maxlen: 24
51.194.138.0/24 maxlen: 24
51.241.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:63:99:18:dc:db:9f:99:09:70:ae:7f:dd:bb:72:d3:f5:76:31:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 24 09:00:11 2026 GMT
Not After : Jul 23 09:05:11 2027 GMT
Subject: CN=B0F87F9A6A5E342BAB743BC5ACFBF4BDB376A731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:28:c6:f3:22:ca:04:e6:08:78:b4:e2:5d:
94:20:27:43:71:e9:28:00:65:90:af:80:0a:e2:d5:
d0:58:88:97:54:9c:e3:1d:b5:83:8a:7d:2e:b3:46:
71:ba:f6:32:c3:44:ed:75:b8:66:04:06:00:b0:2b:
46:90:00:db:2e:c2:99:61:a2:9d:93:2c:23:60:bb:
b9:68:62:92:c8:72:a8:d6:c1:d9:36:fb:34:9e:7e:
4c:85:52:9f:52:11:e4:45:f5:2f:d5:95:5a:35:0d:
e3:7a:2a:09:f0:af:3a:95:59:4b:b3:6c:c5:a0:63:
f5:0d:53:da:ae:81:39:c9:e8:fd:72:e2:13:cb:ef:
f5:ae:a1:33:a0:dc:d3:cb:77:77:1a:69:45:dc:3c:
48:75:cd:09:b7:09:9c:93:40:61:f7:12:be:e1:67:
3f:ad:2d:fb:f2:a6:ba:5b:ea:d4:43:dd:39:47:14:
e8:45:0b:b1:cd:ee:8b:b9:c1:00:54:39:99:70:b1:
bf:01:4d:72:14:a6:6c:11:d9:63:77:1e:95:b5:25:
9e:6c:36:97:fc:85:56:2f:46:f9:82:f2:6d:31:6a:
24:70:3a:04:ae:46:e8:4b:43:6a:4d:74:94:35:c3:
a7:23:2e:f7:fd:2d:08:6b:7f:36:96:39:01:c3:14:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:7F:9A:6A:5E:34:2B:AB:74:3B:C5:AC:FB:F4:BD:B3:76:A7:31
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.134.0/24
51.194.136.0/24
51.194.138.0/24
51.241.184.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:ba:96:42:cf:b3:2e:0c:e8:ba:88:12:f8:97:14:00:a0:e3:
aa:9c:b1:84:e5:5a:f4:0e:25:da:26:0d:b2:0d:4f:91:b7:1d:
35:bc:64:5b:44:9c:6e:ab:41:e9:0b:77:41:48:47:0e:cc:bf:
3e:86:71:c3:d0:1c:1d:2b:9f:c5:5d:97:05:26:c4:4d:f0:76:
a3:aa:9e:e1:f4:64:bf:fe:a5:82:e1:82:0d:63:16:80:fa:10:
b0:53:4d:af:9f:e8:4a:40:7e:aa:3b:65:d3:ca:49:cf:68:22:
c6:2c:e0:b0:c6:8c:c7:d0:4b:0d:e3:0f:04:bb:5a:dc:f5:9f:
20:c3:23:82:66:e8:bb:ce:bc:8b:37:24:79:4d:23:29:de:cc:
0c:51:9d:d8:11:79:91:89:96:c2:1c:68:6e:7e:74:de:08:e9:
83:94:33:75:d1:50:a1:6d:75:7d:57:77:17:66:1b:cd:96:24:
84:c3:ae:cb:1b:34:72:56:e1:e8:1b:52:1a:3e:af:0c:3b:9d:
bb:3a:c6:87:6d:36:80:58:48:b6:26:d0:21:13:82:b0:05:ef:
69:a7:f0:f4:c1:3c:04:9a:01:98:51:1b:cb:6e:74:84:77:af:
3b:11:ef:41:81:bf:fb:03:cb:b8:14:ae:45:6c:4f:6e:31:26:
c1:e3:28:ed
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUHmOZGNzbn5kJcK5/3bty0/V2MaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MjQwOTAwMTFaFw0yNzA3MjMwOTA1MTFaMDMxMTAvBgNV
BAMTKEIwRjg3RjlBNkE1RTM0MkJBQjc0M0JDNUFDRkJGNEJEQjM3NkE3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPijG8yLKBOYIeLTiXZQgJ0Nx
6SgAZZCvgAri1dBYiJdUnOMdtYOKfS6zRnG69jLDRO11uGYEBgCwK0aQANsuwplh
op2TLCNgu7loYpLIcqjWwdk2+zSefkyFUp9SEeRF9S/VlVo1DeN6KgnwrzqVWUuz
bMWgY/UNU9qugTnJ6P1y4hPL7/WuoTOg3NPLd3caaUXcPEh1zQm3CZyTQGH3Er7h
Zz+tLfvyprpb6tRD3TlHFOhFC7HN7ou5wQBUOZlwsb8BTXIUpmwR2WN3HpW1JZ5s
Npf8hVYvRvmC8m0xaiRwOgSuRuhLQ2pNdJQ1w6cjLvf9LQhrfzaWOQHDFFBFAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUsPh/mmpeNCurdDvFrPv0vbN2pzEwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAAzwoYD
BAAzwogDBAAzwooDBAEz8bgwDQYJKoZIhvcNAQELBQADggEBAB66lkLPsy4M6LqI
EviXFACg46qcsYTlWvQOJdomDbINT5G3HTW8ZFtEnG6rQekLd0FIRw7Mvz6GccPQ
HB0rn8VdlwUmxE3wdqOqnuH0ZL/+pYLhgg1jFoD6ELBTTa+f6EpAfqo7ZdPKSc9o
IsYs4LDGjMfQSw3jDwS7Wtz1nyDDI4Jm6LvOvIs3JHlNIynezAxRndgReZGJlsIc
aG5+dN4I6YOUM3XRUKFtdX1XdxdmG82WJITDrssbNHJW4egbUho+rww7nbs6xodt
NoBYSLYm0CETgrAF72mn8PTBPASaAZhRG8tudIR3rzsR70GBv/sDy7gUrkVsT24x
JsHjKO0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:23:27 2026 by rpki-client