Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: YRAvhEjVevEeKcqxunWebgz5WErPrH2YfqiMDtkjUa4=
Subject key identifier: 7F:2D:76:1D:2A:12:B9:EC:EB:E5:40:25:47:AA:C1:CA:82:82:7F:6B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 28BB287448DD0CDE77EBE1A14C5806735D565E3C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42831.roa
Signing time: Wed 24 Sep 2025 13:37:41 +0000
ROA not before: Wed 24 Sep 2025 13:32:41 +0000
ROA not after: Wed 23 Sep 2026 13:37:41 +0000
asID: 42831
IP address blocks: 46.203.18.0/24 maxlen: 24
46.203.93.0/24 maxlen: 24
46.203.105.0/24 maxlen: 24
91.124.118.0/24 maxlen: 24
92.113.91.0/24 maxlen: 24
95.135.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bb:28:74:48:dd:0c:de:77:eb:e1:a1:4c:58:06:73:5d:56:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 24 13:32:41 2025 GMT
Not After : Sep 23 13:37:41 2026 GMT
Subject: CN=7F2D761D2A12B9ECEBE5402547AAC1CA82827F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:21:ab:79:8c:9f:25:f3:c8:7b:78:54:79:
e7:2b:90:07:d8:84:4a:41:5d:b9:b0:45:b0:24:f7:
8f:52:e1:b9:ef:b5:91:46:aa:22:7c:f4:5e:4c:0f:
ca:4c:85:d8:4e:36:08:32:1e:17:11:ec:95:1d:43:
c8:60:ff:b7:04:f1:fd:12:26:09:fc:af:66:79:67:
97:1f:15:ca:f6:73:2b:49:61:65:5a:5e:71:ab:84:
d3:c5:17:1c:ab:ba:03:1a:ca:81:24:31:80:b2:79:
89:40:ce:7f:b9:77:de:23:20:0b:1b:f1:da:23:40:
91:fd:16:67:78:99:78:6b:e6:0a:44:32:6f:9e:a7:
b4:76:04:69:da:b0:e3:ea:cf:47:80:e9:57:0f:d7:
f6:be:2f:4e:c2:cb:39:76:85:23:5b:10:71:3a:42:
2c:1d:b5:43:94:8b:71:69:53:0a:70:a0:2a:e6:96:
b6:e3:ab:12:41:eb:fe:f9:18:cb:30:07:6f:43:53:
e9:7d:55:85:a1:ae:bc:a5:88:49:18:e2:6f:f2:fb:
d5:cb:64:d5:59:67:0e:d6:02:38:a1:6e:b2:89:10:
19:eb:72:f2:29:67:d1:7d:69:6f:b6:d3:16:0e:e7:
b2:58:d7:1e:9b:18:93:4f:62:bf:3b:72:43:27:d7:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:76:1D:2A:12:B9:EC:EB:E5:40:25:47:AA:C1:CA:82:82:7F:6B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.18.0/24
46.203.93.0/24
46.203.105.0/24
91.124.118.0/24
92.113.91.0/24
95.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f6:db:5b:9f:24:c2:d8:ca:b2:6f:20:4f:bd:46:d7:5f:86:
5d:40:22:0f:86:ee:e6:4a:b7:f9:dc:59:6d:22:c5:fc:00:60:
b2:c9:3e:f5:af:e1:c6:b3:ba:43:d8:dc:71:57:69:b2:94:48:
1f:ef:b7:2a:d2:f3:26:bd:d7:1a:b0:63:dc:5c:69:00:bf:d8:
a7:d0:f1:12:1f:e2:6a:72:23:75:d0:59:27:77:32:68:f9:22:
94:55:5b:43:14:ae:31:5e:29:86:59:d7:78:40:d4:ef:48:8e:
57:ee:dc:53:80:05:91:0b:e4:40:b0:ff:83:66:7e:96:82:00:
88:f9:85:0c:b1:bc:9e:cf:33:34:74:0a:50:45:cb:c0:d2:15:
c7:21:29:f1:de:c6:cb:69:c7:68:c1:0c:79:fa:e2:23:c2:61:
a8:dd:5f:49:ec:4e:d0:b5:56:1c:eb:5d:0a:b8:6e:f1:18:b2:
ed:e5:c2:b4:6d:34:f7:d5:9c:07:0d:62:ce:75:a7:f4:82:49:
42:20:69:4c:2c:30:cc:cd:d8:37:10:e6:f5:0d:cd:5d:6c:f5:
4a:d0:cd:ce:e0:95:e7:e6:0c:fb:60:a6:a4:51:18:ae:ef:88:
0b:b9:55:92:6a:0e:d5:cc:c7:60:c5:ac:68:ef:cd:b4:4c:d3:
34:53:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:37:13 2025 by rpki-client