Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=
Subject key identifier: 08:45:6B:20:4E:77:25:DD:E3:8D:0D:07:E2:A1:A4:53:D3:CE:EF:67
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 07309EE3FB262B968B528214C1A051DDE9986AD9
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS42831.roa
Signing time: Tue 30 Sep 2025 10:03:13 +0000
ROA not before: Tue 30 Sep 2025 09:58:13 +0000
ROA not after: Tue 29 Sep 2026 10:03:13 +0000
asID: 42831
IP address blocks: 46.236.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:30:9e:e3:fb:26:2b:96:8b:52:82:14:c1:a0:51:dd:e9:98:6a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:13 2025 GMT
Not After : Sep 29 10:03:13 2026 GMT
Subject: CN=08456B204E7725DDE38D0D07E2A1A453D3CEEF67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:9b:68:ea:ab:49:a6:c4:61:54:1f:e9:6a:
7a:72:10:8d:f0:d6:0e:48:3c:c5:6f:80:98:a9:4a:
19:c8:78:d3:b0:1e:0f:d1:aa:71:a7:e6:ea:25:7d:
67:de:03:b3:85:cf:95:ae:cf:e6:74:9c:51:21:d8:
f8:73:b3:be:7f:c6:a5:1d:2a:92:49:c4:42:27:26:
69:98:a0:3f:ed:cb:05:c5:1d:e3:0d:2e:2a:e8:57:
e8:fd:09:7a:ed:03:65:e1:55:1e:13:31:7e:24:c2:
f7:c6:8c:df:23:0f:e9:74:ac:de:c4:cc:8d:3d:67:
14:e0:40:05:dc:79:28:2f:e4:f8:db:00:92:18:46:
1b:f6:72:35:48:d7:5a:24:fc:01:41:ea:d9:fa:2c:
11:8d:e0:06:82:22:aa:c4:1b:b3:63:cc:2d:99:7f:
10:c4:0c:4e:00:1b:a7:8f:d0:4c:f2:99:15:80:ea:
02:8d:75:5b:eb:ae:20:7e:07:1a:ff:e7:5b:5f:66:
82:4e:42:8e:5d:0d:d0:ad:b6:95:3c:c4:76:ff:8b:
43:76:18:f2:6e:4d:62:c8:25:19:fa:dc:61:99:d5:
d5:ba:ae:c9:4b:3a:c7:5f:92:62:95:43:2e:1c:e8:
c9:11:91:83:8d:90:97:3f:16:88:00:e9:fd:c0:bc:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:6B:20:4E:77:25:DD:E3:8D:0D:07:E2:A1:A4:53:D3:CE:EF:67
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.215.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f8:df:b9:7c:dc:88:dd:5a:79:77:8f:b3:a5:e9:a0:bf:cd:
27:fe:5b:0b:43:02:58:f1:42:7f:71:00:ae:b1:e9:b6:e9:93:
1e:fe:56:94:75:26:e5:e3:91:a0:44:04:c7:d8:2f:04:7c:18:
36:f4:03:68:c9:4a:ed:03:6a:8e:0f:f9:82:81:5c:f1:ee:48:
84:6c:a0:53:fe:3c:44:1e:9c:c2:95:c0:dd:42:84:d5:b0:c3:
d1:e4:24:04:6b:7d:e2:77:94:58:7c:cb:b0:77:09:5b:97:94:
73:45:50:43:d3:79:a4:de:2a:67:7a:11:83:fd:c0:76:4a:44:
1b:d7:6b:1c:43:66:31:1d:c3:98:ca:20:57:21:d5:b2:41:ae:
0d:09:29:d8:a3:db:88:1d:d7:73:fe:5b:9d:8e:18:06:a5:27:
be:67:8f:9e:14:1c:85:82:af:b8:2b:84:5f:e3:af:dc:9e:b3:
3a:32:bd:71:7d:d0:54:ed:59:93:e8:36:1f:2e:db:fd:70:f0:
00:5f:92:b6:77:d5:0f:d3:19:b3:aa:46:a9:92:54:a6:af:13:
ca:08:8b:5d:28:28:51:f5:c8:17:99:20:8d:1a:4d:cf:25:23:
6e:01:e2:d4:7f:71:28:f6:ee:f6:b8:60:d3:ad:a0:e8:50:76:
7d:2d:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:22 2025 by rpki-client