Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: r40cmyrMEWihQB0rkL/FIG2oVCjeu4OMux0VAfyMn+w=
Subject key identifier: E4:C6:BA:3F:FC:1B:90:64:77:24:81:C8:69:4A:51:1E:2A:D0:C8:0A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4CFEBFCB5CF723155ECF0D35D5EA220BAE340D28
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42831.roa
Signing time: Tue 07 Oct 2025 16:55:08 +0000
ROA not before: Tue 07 Oct 2025 16:50:08 +0000
ROA not after: Tue 06 Oct 2026 16:55:08 +0000
asID: 42831
IP address blocks: 141.11.61.0/24 maxlen: 24
141.11.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:bf:cb:5c:f7:23:15:5e:cf:0d:35:d5:ea:22:0b:ae:34:0d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 7 16:50:08 2025 GMT
Not After : Oct 6 16:55:08 2026 GMT
Subject: CN=E4C6BA3FFC1B9064772481C8694A511E2AD0C80A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:93:f9:01:6d:df:15:b9:5e:00:61:86:7f:
ea:dc:1c:0e:d1:7e:22:5c:a1:40:4b:36:b8:31:35:
38:40:7b:96:5b:d0:6b:41:d7:ed:e0:c2:6d:af:67:
e2:14:9e:25:1d:72:96:c4:61:fc:51:79:54:de:4a:
c0:5b:66:f4:08:1c:39:27:f8:44:fc:b8:6b:8f:f0:
66:4b:42:91:eb:3e:a2:8a:b0:68:ec:b5:4f:53:d5:
7d:77:10:e5:73:f3:5d:ab:7a:e5:6a:9f:ea:f1:17:
c9:61:d4:08:d8:2d:8a:a1:fc:56:ef:47:32:d4:17:
91:a4:eb:79:0b:b2:53:70:e6:3d:6f:1f:e4:dc:72:
67:dd:98:ed:83:11:67:db:de:c1:ff:9a:61:ae:b0:
0b:83:5b:66:a8:87:34:e8:47:ca:49:33:45:c5:b6:
3d:30:46:16:2d:1c:e1:7e:9e:f0:60:a0:3e:1f:03:
70:42:e2:29:9c:ab:81:13:61:32:fa:b7:d2:25:c0:
00:0b:c4:25:db:80:98:da:ca:38:fa:71:a8:04:63:
7d:0e:97:08:f0:97:8c:30:03:63:6b:b4:1b:27:50:
ab:06:a0:f2:ab:76:00:3b:34:fc:ca:b6:54:c8:11:
b7:d2:5e:8e:1a:97:6d:60:67:d8:ff:fe:81:08:fe:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:BA:3F:FC:1B:90:64:77:24:81:C8:69:4A:51:1E:2A:D0:C8:0A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.61.0/24
141.11.214.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:fe:bb:64:38:7a:88:76:ce:90:9e:2f:7d:f2:47:ad:0b:3c:
68:f4:9d:51:ac:31:27:cd:0d:bb:bb:96:e6:78:51:0a:ef:b1:
c0:06:36:08:1f:a1:ed:f7:95:9e:fc:57:0b:d4:51:6d:24:0d:
07:71:9f:5f:f3:a9:c4:01:8d:a8:88:ec:6d:cb:cd:91:a1:06:
a1:e9:ef:0e:45:47:7d:ab:47:73:5c:6a:17:a8:59:ca:2b:83:
87:43:d7:d6:67:74:cf:50:19:a1:72:b7:40:19:9d:a4:a5:2f:
a6:14:8b:5d:37:d4:81:29:c0:1e:a7:79:d4:28:22:96:50:92:
30:62:e4:f3:3f:4c:e1:5e:73:f6:4b:90:9b:b2:7f:4e:57:9f:
b7:58:c9:a3:59:83:29:d4:87:ad:57:37:43:a2:b8:40:1c:92:
58:3b:e2:37:6d:26:e0:88:d4:99:d4:6c:0c:ea:84:fc:f9:f4:
5d:f6:b4:c3:36:6e:7f:f3:56:e3:eb:e6:de:c8:32:15:8f:fe:
ed:c3:e8:f1:0e:7e:88:42:c5:f6:9e:d4:4a:bb:6d:70:06:a2:
b4:1c:3c:9c:e9:04:8a:2e:9e:e5:03:8d:33:25:69:dd:c0:8e:
5a:ab:73:32:5e:48:d2:a4:a6:5b:d9:31:2e:e3:49:1c:2e:51:
2b:12:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:03 2025 by rpki-client