Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: bR79Imkw1KYwjGuO3Y+zk2nieOrymOMk8GJfKl4zxSw=
Subject key identifier: D7:7D:72:12:E8:CD:26:AC:F3:12:DD:D3:03:38:88:87:B5:B7:CA:F1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 371D85A015DA3EC263594CC467871F38A2DBE24F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
Signing time: Sat 25 Apr 2026 14:02:53 +0000
ROA not before: Sat 25 Apr 2026 13:57:53 +0000
ROA not after: Sat 24 Apr 2027 14:02:53 +0000
asID: 42831
IP address blocks: 51.194.134.0/24 maxlen: 24
51.194.136.0/24 maxlen: 24
51.194.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1d:85:a0:15:da:3e:c2:63:59:4c:c4:67:87:1f:38:a2:db:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 25 13:57:53 2026 GMT
Not After : Apr 24 14:02:53 2027 GMT
Subject: CN=D77D7212E8CD26ACF312DDD303388887B5B7CAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:34:24:d4:97:4f:95:1c:6e:1f:11:6f:a7:
97:b4:ba:db:29:de:45:1c:b7:2a:4d:6c:c4:a9:91:
fd:36:d6:f0:7e:2e:ba:a1:4b:48:ec:bc:88:9d:06:
b3:0e:e5:a5:c2:7d:06:a8:fd:a6:71:46:0b:b6:32:
15:c4:ab:e7:6e:0e:6f:6f:2f:8c:66:0d:fc:f1:fe:
44:0b:99:d9:8a:8d:c4:22:74:a7:bb:8a:80:28:02:
b4:f5:91:21:85:3e:2d:00:8b:82:79:20:16:49:80:
45:94:b5:c1:ef:5f:80:9c:9e:17:2f:27:60:5f:d9:
95:d1:d0:2f:d9:d6:09:a2:c4:4b:24:ce:62:d6:98:
a0:9d:1a:0d:8c:a9:f0:f1:b5:b7:25:ba:21:6f:1c:
9c:e0:a3:3e:54:f5:cc:7e:d4:0d:58:01:c7:b1:f1:
2f:ce:95:17:15:be:84:87:23:65:0a:6c:e4:5b:79:
a5:6e:2e:02:e9:28:03:7c:59:01:c4:a6:a7:28:a4:
59:1f:cd:88:be:d0:ed:54:21:9e:58:2f:4f:eb:42:
f8:1a:de:6b:e4:a7:f0:41:a0:16:59:1a:65:bb:f2:
d5:76:6d:cc:3b:12:cc:8d:4a:48:ba:13:b8:86:e5:
45:72:0f:44:0a:67:cb:47:65:d3:c9:09:8d:88:df:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:72:12:E8:CD:26:AC:F3:12:DD:D3:03:38:88:87:B5:B7:CA:F1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.134.0/24
51.194.136.0/24
51.194.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:48:d8:4c:33:b2:e4:b1:4a:27:28:4d:7d:49:14:a2:34:e4:
76:4b:22:30:7a:26:e3:15:ee:09:5b:00:79:d0:7d:df:35:4b:
6a:29:f9:ae:b5:d3:72:c0:f9:ad:58:ab:9b:d6:6a:6a:a9:b0:
0c:aa:1e:09:56:1f:80:33:26:9a:98:c3:3e:58:1d:53:dd:10:
3a:7b:53:a3:9b:92:f2:79:4f:ab:e1:a2:e3:e1:50:10:99:e9:
8a:7e:2e:1e:73:c3:88:f9:cf:bc:e9:11:09:2e:55:dc:1f:ce:
41:f8:54:08:5f:24:dc:fd:91:f0:e9:99:ad:e9:da:4e:ee:63:
7f:01:b6:00:bd:25:e7:c9:45:cd:7e:e0:de:38:28:ad:44:25:
9e:2d:dc:17:04:0b:f0:52:ad:3f:dc:51:a6:2f:94:ab:b4:02:
77:7e:44:b3:27:6e:01:ac:01:e2:b8:48:0c:7f:e7:a7:20:6a:
30:8e:9c:e4:e9:71:62:ca:d7:f5:ff:cd:0a:1e:f1:4c:ec:ab:
ed:c3:0c:b2:04:54:2e:80:35:1c:fb:5e:9c:44:82:01:47:73:
1e:cd:a8:99:6a:f8:7c:c1:a8:bd:c8:a2:ba:e0:83:c4:43:d5:
bb:d1:3a:87:d4:80:e3:93:8e:a9:f0:3e:f4:57:99:a4:61:95:
08:e6:46:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:58 2026 by rpki-client