Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: YxhagXwU7rGAQtDOOxC7D5JWdtaixT0VJ8vEMpAOye8=
Subject key identifier: F3:39:FB:CC:3D:51:54:49:2C:DF:2D:CA:F7:90:A7:57:B7:AC:99:7F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 558ED6DB944EEC387EFB3BB1C566E960E5E0EF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
Signing time: Wed 01 Oct 2025 17:47:25 +0000
ROA not before: Wed 01 Oct 2025 17:42:25 +0000
ROA not after: Wed 30 Sep 2026 17:47:25 +0000
asID: 42831
IP address blocks: 143.20.16.0/22 maxlen: 22
143.20.67.0/24 maxlen: 24
143.20.70.0/23 maxlen: 23
143.20.118.0/24 maxlen: 24
143.20.119.0/24 maxlen: 24
143.20.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8e:d6:db:94:4e:ec:38:7e:fb:3b:b1:c5:66:e9:60:e5:e0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 1 17:42:25 2025 GMT
Not After : Sep 30 17:47:25 2026 GMT
Subject: CN=F339FBCC3D5154492CDF2DCAF790A757B7AC997F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:97:f6:bb:d0:a3:0e:ee:35:9d:39:6c:2f:
ac:e9:0d:58:ff:69:07:65:59:de:65:da:2c:b6:84:
70:3e:a8:9c:86:7d:24:de:0c:4e:b4:79:91:f6:53:
38:9e:7d:89:48:c7:6b:84:a0:21:04:80:11:7c:2e:
36:1d:44:6c:d1:f8:2d:98:50:8d:b6:27:3f:98:7e:
d3:63:59:bb:ae:41:5e:59:19:67:fc:4d:54:db:4c:
f9:61:73:0f:96:0a:fa:c4:fe:4f:db:01:cd:05:96:
39:2f:a4:5d:16:ca:67:81:e8:25:cd:c5:f2:cb:e7:
93:51:c7:09:46:da:2e:97:79:f2:27:38:9d:59:c6:
ba:13:6f:93:85:3f:ce:1f:40:a3:39:67:64:e1:cc:
12:3f:34:41:f9:fe:04:2d:62:76:d5:67:22:e0:9b:
c3:0a:6e:ce:aa:f9:64:0f:ff:25:9a:24:a7:14:1a:
84:12:09:1a:ed:5d:ea:fb:9e:4c:10:96:f7:dd:10:
cb:a2:95:c1:6d:21:dc:31:af:19:47:ea:49:a0:19:
4a:78:c3:44:59:55:db:f2:04:06:e4:09:2e:4c:3e:
62:17:65:4a:0a:bf:04:90:44:3f:5c:1b:b4:20:7d:
0d:12:76:15:64:cd:2d:dc:81:62:33:61:00:e6:35:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:FB:CC:3D:51:54:49:2C:DF:2D:CA:F7:90:A7:57:B7:AC:99:7F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.16.0/22
143.20.67.0/24
143.20.70.0/23
143.20.118.0/23
143.20.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:75:e3:da:09:a8:8a:8a:aa:7c:78:ce:a0:6f:35:34:21:4e:
83:48:15:df:04:87:40:e6:5a:ce:de:0f:fb:e4:36:2a:b4:4d:
80:27:c5:8c:14:15:0c:0d:e4:3c:f3:3c:af:0e:8b:da:b9:a3:
1d:0e:44:ce:ea:69:f4:f8:1c:b8:a0:04:4d:b6:60:3e:a1:44:
84:40:2b:ad:09:cb:89:e2:2b:06:56:6e:52:ac:1c:81:8a:41:
41:c9:61:6a:f0:ad:00:c5:4c:0d:99:d7:23:52:92:65:90:c7:
25:f8:45:ac:ef:33:7a:37:3a:f8:12:68:de:ce:85:2f:6f:50:
47:71:17:1d:8c:80:08:ec:b1:ed:7a:d6:6a:5f:3d:1d:7e:ee:
49:2b:0b:dd:6e:a6:bc:0d:b3:cc:ce:aa:56:4a:ce:b9:c3:ae:
3f:f3:c0:80:04:11:0d:50:cf:f5:c8:d3:b0:0a:11:8a:13:01:
3e:61:30:fe:34:77:fb:31:46:52:8b:d6:ac:18:7d:7c:76:49:
28:67:09:42:47:70:f7:e5:d0:54:ec:cc:db:81:11:da:67:c9:
63:cc:62:9d:46:42:c4:b0:4e:cf:ca:92:83:a4:7c:2d:59:55:
2d:ed:c5:8f:7a:ee:bc:cb:33:1a:50:a2:db:69:8f:05:d5:25:
a1:a0:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:48 2025 by rpki-client