Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: xidlVaUmJpzqWxM7t20++PHKRx4oHJF7+braYqePfJ4=
Subject key identifier: 8C:36:A4:AD:CE:20:10:9D:52:0B:0A:1F:42:C3:25:E5:EA:66:7F:41
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2ACAA56EE2D41E83F1798E1DB31D2E134C3058C5
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
Signing time: Sat 19 Sep 2026 00:00:19 +0000
ROA not before: Fri 18 Sep 2026 23:55:19 +0000
ROA not after: Sat 18 Sep 2027 00:00:19 +0000
asID: 42831
IP address blocks: 143.20.15.0/24 maxlen: 24
143.20.46.0/24 maxlen: 24
143.20.67.0/24 maxlen: 24
143.20.119.0/24 maxlen: 24
143.20.123.0/24 maxlen: 24
143.20.181.0/24 maxlen: 24
143.20.183.0/24 maxlen: 24
143.20.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ca:a5:6e:e2:d4:1e:83:f1:79:8e:1d:b3:1d:2e:13:4c:30:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 18 23:55:19 2026 GMT
Not After : Sep 18 00:00:19 2027 GMT
Subject: CN=8C36A4ADCE20109D520B0A1F42C325E5EA667F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:e7:e7:de:81:4f:e4:6c:13:6c:b5:99:30:
40:46:31:b6:fc:5e:ad:92:90:cb:03:63:fc:e5:24:
21:2c:99:75:0f:9b:06:18:57:33:99:aa:63:d0:c9:
ac:58:d0:09:5e:43:11:c0:17:ef:cc:24:f5:a8:48:
db:ad:e2:9f:25:b6:be:f3:3b:f2:ac:76:4d:63:75:
dd:9f:ec:3b:89:0b:02:02:bf:45:0e:af:26:d5:14:
bc:e7:44:64:d1:82:84:0e:b9:b7:e5:13:9f:89:36:
cb:94:91:0c:e4:d1:ce:32:83:ce:d1:99:5c:31:0f:
5d:0b:f4:f7:f5:c3:5c:fb:5e:b6:fd:ee:86:4a:43:
9a:6c:56:03:72:70:ad:52:a9:1e:8a:ef:84:04:78:
1c:50:14:8a:62:e3:7c:23:73:d1:da:db:ae:d6:52:
f1:19:68:85:ae:46:17:db:6a:7c:d6:94:64:6e:87:
72:e2:a4:7a:51:d4:18:83:9c:6d:a5:fc:52:27:fc:
d6:a8:32:5f:4d:3b:c6:7e:37:50:20:1f:22:8d:dc:
ef:42:ea:1b:12:ce:14:f5:5f:f0:4a:e5:c0:b4:ca:
90:bd:46:06:b2:84:3b:ea:c0:42:c7:60:01:4a:8e:
5d:bb:0e:07:ab:7a:76:ce:f2:62:c6:58:5b:a3:93:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:A4:AD:CE:20:10:9D:52:0B:0A:1F:42:C3:25:E5:EA:66:7F:41
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.15.0/24
143.20.46.0/24
143.20.67.0/24
143.20.119.0/24
143.20.123.0/24
143.20.181.0/24
143.20.183.0/24
143.20.193.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:7a:82:b3:ec:73:97:58:59:6c:e0:70:0c:35:fe:05:68:69:
c6:c5:b5:63:41:ba:24:95:98:52:92:58:36:fd:a1:8b:c6:be:
44:cc:83:1f:81:d0:3d:51:45:1d:ba:c0:88:fe:1d:32:66:fc:
17:2e:36:46:12:c3:12:9c:fc:41:90:6b:4e:0a:e5:fc:80:10:
46:50:28:46:d2:d9:a3:7c:ff:90:79:d5:ac:98:17:5b:3f:01:
01:70:b2:bf:2a:75:dd:79:9d:85:7f:31:61:0a:02:0b:fb:07:
2c:88:f7:a5:44:07:77:06:5c:a7:b1:b0:cb:e6:94:ff:1c:68:
01:71:b3:fe:ce:4c:53:07:97:71:44:9c:01:60:6c:ff:0d:aa:
f8:0b:49:b4:2c:f8:cf:2b:60:02:a6:a2:53:72:a7:03:99:a3:
97:96:fd:e5:30:bc:6f:a7:de:e0:3c:4c:e5:d5:ec:ca:3d:e4:
a1:25:c1:7d:1c:9d:71:93:44:90:70:cb:e6:74:9a:c7:1a:e9:
24:0c:bd:56:94:82:5a:fc:a5:f4:4d:4e:d7:88:ba:61:a4:d8:
2c:6d:25:ba:67:87:31:39:87:c9:01:67:9e:aa:c2:eb:35:7c:
75:68:41:20:7c:41:04:30:2c:70:62:32:fe:e6:33:b6:84:f8:
34:e0:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:02:21 2026 by rpki-client