Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: HIwmkyF6N/bK5Mb8ZzoZxD0m0pj4SMcqOfMKSlhd10o=
Subject key identifier: 58:99:FB:B0:87:1D:FA:9F:F3:9E:BD:55:48:6F:EC:29:42:11:5F:E5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7403FA57909D6E1A8B675CE09AAA19BD50A1D65C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31898.roa
Signing time: Thu 22 Oct 2026 02:04:37 +0000
ROA not before: Thu 22 Oct 2026 01:59:37 +0000
ROA not after: Thu 21 Oct 2027 02:04:37 +0000
asID: 31898
IP address blocks: 143.14.68.0/24 maxlen: 24
143.14.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:fa:57:90:9d:6e:1a:8b:67:5c:e0:9a:aa:19:bd:50:a1:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 22 01:59:37 2026 GMT
Not After : Oct 21 02:04:37 2027 GMT
Subject: CN=5899FBB0871DFA9FF39EBD55486FEC2942115FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:17:ce:42:7f:de:f2:37:1a:fb:f0:d1:59:
8d:4a:1e:d5:a0:e4:4b:d1:87:05:2b:20:64:ac:e7:
3f:d0:a0:8f:4f:a9:2d:db:73:0b:a7:0b:22:61:f9:
94:99:3b:82:a4:bf:a7:e8:50:8f:37:08:f1:f6:e0:
21:d8:f4:61:f6:8d:51:37:e6:7e:4c:27:23:f9:cd:
0f:b1:ee:77:21:fb:b1:76:35:79:9a:36:33:9b:4d:
e5:9a:f8:7b:d1:53:eb:ed:cf:1f:d1:18:ee:f8:dd:
95:bc:14:56:fd:77:d3:09:22:4d:65:ac:93:79:97:
db:9c:93:d1:da:33:95:f5:e0:9e:d8:cf:8b:4b:a0:
03:a6:98:27:d6:bf:5d:75:7d:8d:30:8b:91:66:6d:
61:ae:4c:01:f8:01:44:11:87:25:a9:b6:87:c0:86:
02:a7:ab:d6:39:bb:66:8a:a8:13:92:ca:48:72:cd:
31:3e:ca:86:95:9a:ad:1b:02:82:13:26:d2:92:35:
03:11:20:39:f2:01:ea:bd:22:b9:c8:16:39:36:22:
27:74:3d:7a:ac:2d:29:cf:8b:fc:d0:d3:35:53:d3:
a3:4a:ca:92:5a:2a:47:87:41:5f:9c:c2:63:29:21:
b0:e7:f6:40:5f:2a:97:7b:d4:17:cb:00:75:1b:be:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:FB:B0:87:1D:FA:9F:F3:9E:BD:55:48:6F:EC:29:42:11:5F:E5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.68.0/24
143.14.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:48:3b:f0:d5:76:a0:24:a6:d1:37:44:ca:ea:d5:bc:bb:b9:
29:3a:5b:0d:94:03:64:48:03:d2:67:af:60:c0:f4:13:7f:24:
ee:a0:96:79:be:7b:33:11:95:6b:fb:73:8e:da:80:f6:5e:71:
d4:af:6f:6b:11:11:1d:6b:9c:3b:fa:d7:77:39:aa:41:e4:94:
78:50:9a:95:0a:42:aa:3c:df:12:7d:ca:da:4a:4f:24:4d:c0:
c9:8d:8a:3e:33:eb:d9:5c:86:d5:ff:7f:86:6a:29:9e:90:e3:
3f:80:df:fd:3a:09:ff:6d:a3:76:57:1e:96:44:09:ca:6e:39:
f0:3a:38:11:31:e7:d5:57:15:de:6d:e4:4a:79:82:88:46:ff:
66:3f:c6:e2:00:0c:fe:59:56:1c:00:07:bc:a3:d0:57:c4:b2:
c2:76:12:1f:15:ca:93:72:90:1b:27:bf:f0:98:62:97:2f:22:
af:08:13:c7:37:65:ec:a1:15:ab:42:b6:ad:22:f9:e7:74:7a:
b5:5e:91:db:20:42:47:17:10:35:97:08:32:d4:fb:bb:08:3a:
3b:06:4f:a5:62:9d:47:fc:e1:2d:d6:c9:44:02:59:89:bd:21:
83:8d:4d:69:37:88:a5:ee:2e:27:65:81:76:86:99:cc:6e:28:
55:61:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:33:25 2026 by rpki-client