Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31924.roa
File: AS31924.roa (raw, json)
Hash identifier: 9qbuFFADV/e42ewOBopvBGd17LgC0krp3/8hGMEgHgI=
Subject key identifier: C6:6E:0D:72:3D:9B:1E:32:9D:78:31:DF:12:D1:5D:46:5D:E4:D1:3D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5011C06FD1FDDB1F1C94987D632D6B1C62BA92F4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31924.roa
Signing time: Thu 07 May 2026 20:57:27 +0000
ROA not before: Thu 07 May 2026 20:52:27 +0000
ROA not after: Thu 06 May 2027 20:57:27 +0000
asID: 31924
IP address blocks: 143.14.126.0/24 maxlen: 24
167.148.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:11:c0:6f:d1:fd:db:1f:1c:94:98:7d:63:2d:6b:1c:62:ba:92:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 7 20:52:27 2026 GMT
Not After : May 6 20:57:27 2027 GMT
Subject: CN=C66E0D723D9B1E329D7831DF12D15D465DE4D13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:fa:1f:25:f7:65:bc:e5:ee:13:65:94:ad:
f3:b6:98:fb:7e:b9:08:a3:dc:40:7c:b4:a8:09:d2:
a8:5f:c8:de:c8:ee:79:1c:bb:d9:86:f3:91:c0:c6:
c8:8c:89:af:65:13:b5:24:18:23:92:6d:4e:73:b9:
8f:8e:82:6e:cf:b7:92:89:0b:f4:cc:f0:18:0a:be:
3f:83:63:bf:51:78:d3:01:b9:5f:a3:12:85:4c:1f:
7a:8c:bd:55:52:4f:d4:e6:9c:44:b0:44:ef:ec:cf:
5e:4e:aa:26:8f:a7:b2:14:a2:54:92:c5:54:c1:c5:
e2:d8:72:4f:1e:0e:a3:06:16:16:c2:eb:21:59:e0:
cf:83:6a:1f:f9:d8:b0:e8:5d:59:b2:5d:8f:7f:4b:
85:43:dd:e1:e9:c5:ca:65:1e:8d:0c:b6:20:60:0e:
97:b1:1c:d8:e5:4c:bd:ec:35:91:47:94:66:9a:96:
ab:4b:1f:e3:b1:52:e8:27:e3:c8:16:44:b7:44:14:
2d:85:0d:2b:89:dd:72:51:d5:2b:da:5f:1b:1f:54:
ae:73:99:7e:82:e4:80:20:87:38:c7:06:69:23:0a:
42:ac:a9:e0:73:61:5a:66:2e:d3:ac:5a:e3:77:cd:
58:55:d7:fa:04:0b:eb:8b:f4:11:37:c5:49:9e:a9:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:0D:72:3D:9B:1E:32:9D:78:31:DF:12:D1:5D:46:5D:E4:D1:3D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS31924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.126.0/24
167.148.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d4:a4:8b:8d:8b:37:2f:98:d7:d3:83:ad:61:0c:46:48:c1:
81:8b:ac:33:6a:c1:ad:45:85:b2:01:f0:ce:e3:d7:0d:9c:f4:
77:5c:fe:21:10:29:c2:7c:2d:b7:5c:6e:32:b3:04:61:c2:c7:
19:95:ca:f6:29:ff:3d:11:cb:18:46:cf:46:2c:21:d6:7e:5d:
f9:22:d5:8d:55:ce:69:f8:3c:32:d1:34:ae:36:78:06:5a:0a:
cb:53:8b:2d:9f:d1:76:9a:62:c2:c6:6b:53:11:d9:64:04:6d:
e9:36:64:84:e4:41:dd:0e:c4:50:e3:84:64:cd:06:db:b3:c9:
22:95:08:3f:55:e5:7d:eb:8b:0e:90:f9:c1:6c:33:c3:aa:70:
45:6e:bc:e7:0c:58:79:69:97:72:d2:43:87:ba:01:15:fb:58:
15:7a:7a:bd:4c:45:06:5f:b6:1b:41:dd:7c:27:ec:65:99:4d:
1c:19:12:e5:ae:2c:37:db:a6:8d:33:6a:12:5e:f7:c2:c2:fb:
f9:ea:be:56:0d:f8:68:68:38:d4:a8:d5:6c:e1:4d:a3:38:d4:
e3:7f:50:36:5d:75:6e:82:5f:a6:ec:76:4b:e3:ff:36:58:05:
1d:23:2f:e7:22:ca:75:a7:ab:9f:0b:c7:ac:39:5c:df:29:1d:
64:58:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:26 2026 by rpki-client