Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          uWXlNI/sworEatyvBDgAAPcqMLLgLaop9DXqhp9Bnjg=
Subject key identifier:   97:AF:F7:A5:22:82:93:88:9B:C1:A5:52:8D:80:00:3A:95:38:CC:BB
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       7E90C7382D55F9221FAB3376BDBAD3E0DC4D85D8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
Signing time:             Fri 24 Jul 2026 00:01:10 +0000
ROA not before:           Thu 23 Jul 2026 23:56:10 +0000
ROA not after:            Fri 23 Jul 2027 00:01:10 +0000
asID:                     42831
IP address blocks:        51.194.134.0/24 maxlen: 24
                          51.194.136.0/24 maxlen: 24
                          51.194.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:90:c7:38:2d:55:f9:22:1f:ab:33:76:bd:ba:d3:e0:dc:4d:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jul 23 23:56:10 2026 GMT
            Not After : Jul 23 00:01:10 2027 GMT
        Subject: CN=97AFF7A5228293889BC1A5528D80003A9538CCBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:d5:10:6d:2f:4d:15:16:9a:1e:3d:ed:8d:
                    df:80:2b:08:73:95:c8:9b:04:ac:4e:40:5d:d6:3f:
                    9e:a4:e3:4f:86:1b:e1:15:37:13:c6:be:37:24:6e:
                    d7:96:84:3d:f8:5b:bd:2e:b5:e7:d9:e6:3a:4e:39:
                    ca:c3:a7:c9:f2:f0:26:b4:53:45:45:c9:e6:3e:12:
                    d4:ca:14:4d:87:bf:98:f6:84:77:4e:da:6f:40:26:
                    07:2a:a9:a3:6d:3a:ac:85:75:e6:81:36:d0:ef:f9:
                    70:db:2b:b8:5d:e9:5c:27:da:a9:90:32:b0:06:2b:
                    b3:b2:b5:1f:fe:15:06:2a:9b:90:7b:9d:ad:a0:3e:
                    b9:de:ba:f4:05:10:9f:a1:89:0f:a1:53:87:ab:62:
                    c2:92:02:bf:a5:b9:17:c3:97:11:d1:18:62:04:3c:
                    6b:f3:6c:a0:60:e2:c7:14:57:df:a3:76:b0:9b:ff:
                    35:8b:68:d6:33:0d:1a:c9:4e:82:01:af:a4:44:2e:
                    9d:58:19:d0:27:f6:74:a2:30:72:b0:72:3d:10:6c:
                    db:a7:eb:7b:1d:15:5a:0c:82:f0:cf:3d:56:58:95:
                    50:17:31:f0:e2:ea:81:7f:19:4f:e5:95:0f:eb:e5:
                    59:9d:24:cb:34:7b:61:2f:b3:ee:d5:f5:3e:9e:0e:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:F7:A5:22:82:93:88:9B:C1:A5:52:8D:80:00:3A:95:38:CC:BB
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.134.0/24
                  51.194.136.0/24
                  51.194.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c0:67:79:dc:66:67:5e:29:8f:72:63:e5:d3:9a:e2:46:dc:
         e1:b8:1f:59:77:f6:80:01:9b:44:bb:42:77:ce:a5:88:93:ad:
         0c:3b:6d:59:57:fc:aa:76:72:41:d4:42:52:49:65:34:d3:7b:
         bc:9a:c0:34:a1:45:3d:9e:5d:5c:49:04:66:72:dd:a3:a2:f4:
         5e:ef:2f:64:c5:26:1d:3e:48:77:ed:bf:45:d6:b5:d7:3a:25:
         20:f8:b4:20:6e:08:31:c4:36:bf:a9:6e:1c:bd:c1:24:7b:0b:
         d0:d3:c6:7c:46:a5:76:df:e1:dd:0f:ae:38:20:0c:05:0e:ae:
         1e:f3:69:ba:ab:a2:5e:2e:9e:85:45:bf:95:51:d1:e7:4a:60:
         36:c8:43:d3:b2:ab:47:fe:9a:e5:ef:cc:f7:50:46:14:a2:0b:
         8c:70:8e:5d:59:65:56:e7:c7:23:53:7a:7a:39:a1:df:7a:3f:
         06:1d:99:5b:54:d0:52:69:6e:40:09:cf:f8:bd:98:7a:e7:cc:
         c8:02:78:2d:04:5c:7f:9a:d9:ed:ed:fb:a3:f0:7e:15:6f:4a:
         2e:44:4f:a0:05:19:ff:66:75:37:41:05:c9:01:81:98:d2:d6:
         5c:0c:9a:0d:41:f4:a7:1c:3d:f4:d4:18:0f:9f:99:1f:c6:d8:
         25:6c:92:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:14 2026 by rpki-client