Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: DsHCn5qmFLi+9zeyOKDHjvVCd2fyK15vRpp9uYdTXqs=
Subject key identifier: 0B:21:29:C1:9C:0D:65:FE:F0:D9:D4:05:1B:C2:F2:12:4E:91:BC:A3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 03F5BE912C20B01C7F564788D453725D1882C870
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42831.roa
Signing time: Tue 08 Sep 2026 17:49:33 +0000
ROA not before: Tue 08 Sep 2026 17:44:33 +0000
ROA not after: Tue 07 Sep 2027 17:49:33 +0000
asID: 42831
IP address blocks: 141.11.61.0/24 maxlen: 24
141.11.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f5:be:91:2c:20:b0:1c:7f:56:47:88:d4:53:72:5d:18:82:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 8 17:44:33 2026 GMT
Not After : Sep 7 17:49:33 2027 GMT
Subject: CN=0B2129C19C0D65FEF0D9D4051BC2F2124E91BCA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:3b:25:f1:91:31:c4:95:be:43:ee:79:50:
79:1b:21:6d:61:14:8e:11:83:e3:d1:53:a1:0c:43:
db:5d:fb:62:f5:75:e3:00:c2:31:00:6a:56:88:80:
ae:d9:6c:f7:da:de:32:b1:ea:0d:b3:7a:ff:a2:25:
02:34:ee:a7:f4:4c:27:9e:fd:47:b6:8e:e7:87:c0:
05:1a:d5:41:35:f9:f7:46:5a:91:11:32:06:a2:72:
09:40:c4:8f:3b:b2:91:21:d5:ba:cd:e2:39:be:a0:
2d:52:74:9f:fa:50:93:3c:32:07:97:ff:77:a4:6f:
47:4e:53:c7:73:33:56:a5:c0:54:63:45:6e:7a:3d:
06:80:72:4a:a7:85:f0:38:2c:4d:d2:ed:af:61:30:
ad:d6:50:e3:9f:03:5c:93:a0:9c:ad:b8:55:40:38:
84:a3:07:bb:86:75:17:b5:64:22:32:44:42:dd:14:
99:83:e0:96:b6:99:93:e3:b3:e9:51:99:03:a0:da:
9a:cb:22:91:bb:ab:06:16:19:b6:76:29:07:eb:5e:
48:e8:74:5b:58:5a:23:0c:c6:93:10:67:90:7c:fe:
09:e7:c1:82:9f:d8:c3:b0:a6:78:33:d3:e4:65:93:
17:a1:7d:b4:99:54:7f:45:d1:d6:44:06:89:0b:93:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:29:C1:9C:0D:65:FE:F0:D9:D4:05:1B:C2:F2:12:4E:91:BC:A3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.61.0/24
141.11.214.0/23
Signature Algorithm: sha256WithRSAEncryption
52:40:33:38:0e:61:c0:42:ad:66:cf:c0:9b:71:1a:e2:ad:87:
c3:2a:5a:01:12:e2:10:4e:13:b5:ea:e2:c0:ac:2f:8b:38:2e:
d7:1c:b1:62:05:09:b9:e6:e4:14:de:e5:a6:6b:c3:c4:19:20:
8e:60:1b:4c:38:6a:58:b3:ab:e9:9c:a3:c7:e8:d4:8c:08:51:
42:c3:e8:23:47:1e:3d:54:53:3f:ff:31:e4:95:da:a6:34:c4:
4f:e3:b9:90:9b:a4:40:f5:ab:f4:1d:9b:0e:68:17:b8:bd:17:
f0:59:74:6c:0a:97:f4:50:bf:51:ba:fd:e6:cd:f4:4f:b5:06:
44:91:1f:1f:7a:0a:5c:19:b3:ff:03:87:3c:15:e8:09:f7:c8:
b2:88:df:55:67:b2:6c:5c:30:33:79:55:ad:e2:7e:2f:56:38:
81:1b:9c:fe:cb:a8:57:b2:cf:fd:a9:3d:7f:66:0c:21:8d:42:
d5:3c:31:2a:9a:6e:35:b9:7f:39:b8:2f:65:3d:76:35:95:93:
39:eb:3d:ca:a3:e7:51:da:8d:d3:f9:08:79:2e:93:8b:e0:f2:
74:29:50:ed:c8:3a:de:14:3d:a0:40:2f:33:6f:b7:f6:52:7b:
17:fd:83:98:f2:3a:bc:1a:d9:c9:b4:67:f6:e0:2e:14:44:22:
cd:60:05:65
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUA/W+kSwgsBx/VkeI1FNyXRiCyHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA5MDgxNzQ0MzNaFw0yNzA5MDcxNzQ5MzNaMDMxMTAvBgNV
BAMTKDBCMjEyOUMxOUMwRDY1RkVGMEQ5RDQwNTFCQzJGMjEyNEU5MUJDQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvDsl8ZExxJW+Q+55UHkbIW1h
FI4Rg+PRU6EMQ9td+2L1deMAwjEAalaIgK7ZbPfa3jKx6g2zev+iJQI07qf0TCee
/Ue2jueHwAUa1UE1+fdGWpERMgaicglAxI87spEh1brN4jm+oC1SdJ/6UJM8MgeX
/3ekb0dOU8dzM1alwFRjRW56PQaAckqnhfA4LE3S7a9hMK3WUOOfA1yToJytuFVA
OISjB7uGdRe1ZCIyRELdFJmD4Ja2mZPjs+lRmQOg2prLIpG7qwYWGbZ2KQfrXkjo
dFtYWiMMxpMQZ5B8/gnnwYKf2MOwpngz0+RlkxehfbSZVH9F0dZEBokLk0/dAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUCyEpwZwNZf7w2dQFG8LyEk6RvKMwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNCz0D
BAGNC9YwDQYJKoZIhvcNAQELBQADggEBAFJAMzgOYcBCrWbPwJtxGuKth8MqWgES
4hBOE7Xq4sCsL4s4LtccsWIFCbnm5BTe5aZrw8QZII5gG0w4alizq+mco8fo1IwI
UULD6CNHHj1UUz//MeSV2qY0xE/juZCbpED1q/Qdmw5oF7i9F/BZdGwKl/RQv1G6
/ebN9E+1BkSRHx96ClwZs/8DhzwV6An3yLKI31VnsmxcMDN5Va3ifi9WOIEbnP7L
qFeyz/2pPX9mDCGNQtU8MSqabjW5fzm4L2U9djWVkznrPcqj51HajdP5CHkuk4vg
8nQpUO3IOt4UPaBALzNvt/ZSexf9g5jyOrwa2cm0Z/bgLhREIs1gBWU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:53:43 2026 by rpki-client