Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: TV2oIGhr1FgQ39CPhulUVBKEtKwQX0GRalEi0k6PXmc=
Subject key identifier: 79:3A:E3:E1:9F:03:21:D2:DC:55:73:5C:6D:5D:EB:E8:03:FD:3B:10
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 57B449DE692CF6444F6B64F36A34A51CD8E22752
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
Signing time: Thu 19 Mar 2026 04:14:38 +0000
ROA not before: Thu 19 Mar 2026 04:09:38 +0000
ROA not after: Thu 18 Mar 2027 04:14:38 +0000
asID: 42831
IP address blocks: 143.20.15.0/24 maxlen: 24
143.20.46.0/24 maxlen: 24
143.20.60.0/24 maxlen: 24
143.20.67.0/24 maxlen: 24
143.20.119.0/24 maxlen: 24
143.20.123.0/24 maxlen: 24
143.20.146.0/24 maxlen: 24
143.20.154.0/24 maxlen: 24
143.20.181.0/24 maxlen: 24
143.20.183.0/24 maxlen: 24
143.20.193.0/24 maxlen: 24
143.20.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b4:49:de:69:2c:f6:44:4f:6b:64:f3:6a:34:a5:1c:d8:e2:27:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Mar 19 04:09:38 2026 GMT
Not After : Mar 18 04:14:38 2027 GMT
Subject: CN=793AE3E19F0321D2DC55735C6D5DEBE803FD3B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:a4:89:8e:58:56:44:7b:ec:f2:96:cd:8f:
1b:a6:e2:24:28:0f:7f:a7:1e:f1:df:89:d1:1a:02:
3e:c4:c8:ad:7a:8a:f2:1a:3e:5e:1a:b3:67:43:34:
b5:d5:10:f8:23:a9:2d:28:d4:1c:48:8b:31:55:a3:
03:52:49:43:5c:8a:c8:4e:6f:3d:80:d1:1d:c6:3b:
ad:a2:18:c7:1c:bc:03:ae:7c:20:c6:ff:be:8f:eb:
96:38:da:a5:be:1b:73:ec:4d:62:36:10:ba:98:94:
1b:60:fe:39:65:a4:69:c4:82:50:44:3d:65:36:d7:
60:33:7f:8b:78:06:6d:91:07:ec:ae:6d:29:8b:8d:
cf:7a:a4:e9:a9:7d:03:2a:e4:70:8b:1e:aa:f4:ea:
d8:35:13:44:b5:49:9f:df:e9:e6:09:75:34:a6:e1:
47:6d:33:20:60:7a:cf:8b:58:d3:44:fc:3b:ef:12:
c7:1a:37:59:a0:b1:46:27:85:3c:b6:d5:e3:fe:4a:
48:41:ca:b8:7d:32:7b:ff:61:1c:05:fb:7f:4f:55:
b5:45:3e:3f:4c:c2:c7:a4:55:1f:51:42:62:ef:97:
63:d3:78:76:9f:8f:74:96:c0:73:29:50:e8:2c:42:
07:2d:7b:0a:c2:a2:d4:1a:33:8c:4c:1f:cc:b0:2e:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:E3:E1:9F:03:21:D2:DC:55:73:5C:6D:5D:EB:E8:03:FD:3B:10
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.15.0/24
143.20.46.0/24
143.20.60.0/24
143.20.67.0/24
143.20.119.0/24
143.20.123.0/24
143.20.146.0/24
143.20.154.0/24
143.20.181.0/24
143.20.183.0/24
143.20.193.0/24
143.20.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:19:fe:7e:1c:07:b1:ab:32:d3:7f:93:38:83:25:16:8b:de:
03:fb:d0:01:ca:73:5a:96:7a:6e:9d:bf:7b:0c:73:1b:0c:76:
e5:6b:7d:1a:4a:16:5a:18:17:49:5e:a5:18:0d:50:85:8d:d4:
4d:d7:54:b7:13:93:81:66:38:5a:24:3a:1e:fe:87:90:3c:54:
0c:63:33:f3:a1:a2:48:df:c0:d1:d2:39:1d:c2:91:81:1c:8e:
86:34:db:19:1e:a6:06:ca:2d:27:30:73:88:67:e1:f8:3a:ba:
30:2a:f0:4f:cb:45:23:f5:5d:b8:9d:63:36:67:54:54:bf:23:
77:74:d2:1e:00:83:f5:1a:47:c6:92:73:e9:15:1b:6f:0f:dc:
c9:76:e1:08:e9:82:67:bb:9e:40:70:51:dd:8a:36:d0:4c:ae:
ec:bb:4a:95:a1:21:45:0b:0b:21:db:bf:eb:a8:a3:3c:c5:fd:
6d:65:66:f4:3c:19:25:30:6c:ef:0e:db:f5:ca:58:56:f6:b5:
16:9e:27:ca:4e:62:89:ce:ef:b3:8d:84:be:7d:a9:bd:ca:03:
3e:75:ba:59:14:f6:cd:76:04:e5:6c:41:64:e4:23:51:6d:37:
11:b8:f1:97:cc:18:e4:6c:c6:7a:05:7b:07:07:95:32:c8:95:
cb:f7:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:31:23 2026 by rpki-client