Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: npm8ccHGJlinnUTfeOkAuMbGKsx1X+gEyhvfRJ7PzSQ=
Subject key identifier: 26:76:AA:E8:0A:7F:FF:7C:A2:DF:27:FD:77:C1:A0:9E:F1:E9:78:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5E999DB8E9FCE2C73BFF10E868E0C2653DA64A91
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31898.roa
Signing time: Mon 21 Sep 2026 00:05:47 +0000
ROA not before: Mon 21 Sep 2026 00:00:47 +0000
ROA not after: Mon 20 Sep 2027 00:05:47 +0000
asID: 31898
IP address blocks: 143.14.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:99:9d:b8:e9:fc:e2:c7:3b:ff:10:e8:68:e0:c2:65:3d:a6:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 00:00:47 2026 GMT
Not After : Sep 20 00:05:47 2027 GMT
Subject: CN=2676AAE80A7FFF7CA2DF27FD77C1A09EF1E9784B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:c5:a1:ae:ea:cc:d2:8f:08:e7:76:e0:f9:
05:ab:a0:32:67:22:b9:08:4d:b4:5d:ff:4a:58:37:
6f:91:73:54:27:73:70:38:75:e0:5b:9d:96:dc:f8:
c7:56:11:2a:1e:74:d6:47:5a:25:4c:ca:50:ef:4a:
c5:81:af:a1:7e:1a:a0:e6:95:c2:c5:00:a6:fd:de:
c2:38:f4:0b:de:74:89:99:a6:78:f6:6d:c2:d3:1c:
16:92:6f:73:78:a9:98:1d:3e:f1:14:fb:52:b2:37:
8a:c2:7a:48:5b:2d:c6:c7:c2:e1:1d:50:f0:1f:22:
d4:2f:cc:61:8b:ba:49:1c:c2:a6:b7:8a:39:71:4b:
a1:e0:be:9e:69:b5:a5:ff:b7:bb:91:4e:07:dd:a0:
6f:e3:d1:68:4b:e2:c0:53:d5:24:61:85:e6:02:ae:
2d:6b:bf:70:23:99:01:f2:aa:53:e8:fc:54:f1:21:
d7:73:f0:94:ad:f5:1e:46:4f:5f:35:f2:7b:80:65:
9e:39:2b:37:28:60:e5:19:6c:79:91:54:2a:50:3f:
b0:02:2d:93:ed:7e:91:03:5b:0b:58:3c:b8:17:d3:
1b:a7:fc:80:71:9b:9e:d3:40:19:fd:0b:6b:eb:87:
f4:9d:08:ab:92:ea:cf:e4:6c:97:63:69:63:a0:9f:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:AA:E8:0A:7F:FF:7C:A2:DF:27:FD:77:C1:A0:9E:F1:E9:78:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ac:c5:58:ac:f5:3f:4f:79:54:06:25:74:70:96:12:dd:a2:
ba:db:e4:ef:f8:c6:55:0a:4a:2b:2a:c1:50:e6:a0:22:99:21:
e1:57:9b:70:6e:fd:f6:69:8e:4f:30:b0:f8:98:7a:f1:ac:aa:
a0:e2:e6:e6:81:0c:6e:5c:21:29:b8:e1:ba:33:cd:79:25:19:
34:69:27:9f:7a:f4:b5:39:17:c0:9f:00:27:f8:f8:1e:c2:e8:
d3:5f:1b:43:a6:da:fc:44:ba:32:2c:fe:20:89:b4:ec:c9:3e:
a1:4c:d4:7b:61:a3:01:9e:1b:21:09:bf:af:a8:6a:f4:6a:2e:
ec:f8:9d:18:91:68:04:65:30:7c:65:bc:cc:71:66:3e:d4:d3:
ab:d5:41:76:30:fc:6a:df:34:ed:dd:de:0b:aa:75:14:90:51:
f4:f7:ee:84:c4:c6:2d:34:d7:cb:7d:f4:a0:63:e6:a6:f2:7b:
5f:1f:df:85:6a:18:10:50:15:7f:56:85:09:bf:3d:2e:e3:d6:
ea:54:78:5e:fd:b8:8d:c7:8a:98:a4:9a:c5:64:b8:ef:48:d2:
38:1a:6b:f3:4a:c9:5a:f2:5d:d1:10:4a:6c:2c:57:0b:80:88:
d2:8f:71:bc:a3:3f:bc:17:53:d7:85:4c:f5:8e:60:7c:e2:55:
26:96:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:43:27 2026 by rpki-client