Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: 1aNZTnt+9Oa2ogn6Tlpt1mAvq+7+UTIYi/O6eruOLUk=
Subject key identifier: 92:60:FF:2C:74:F2:D1:1F:73:B3:2A:A6:FB:DB:FA:B4:CB:BE:10:F7
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 7A9F1AD85E846147EBD6FA88FB7ABC8A7FFFC3FC
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS31715.roa
Signing time: Mon 23 Mar 2026 14:37:05 +0000
ROA not before: Mon 23 Mar 2026 14:32:05 +0000
ROA not after: Mon 22 Mar 2027 14:37:05 +0000
asID: 31715
IP address blocks: 213.139.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9f:1a:d8:5e:84:61:47:eb:d6:fa:88:fb:7a:bc:8a:7f:ff:c3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Mar 23 14:32:05 2026 GMT
Not After : Mar 22 14:37:05 2027 GMT
Subject: CN=9260FF2C74F2D11F73B32AA6FBDBFAB4CBBE10F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:c0:1e:07:ce:de:65:47:92:67:57:98:4b:
73:7c:43:7b:45:01:2b:88:b6:0b:7c:bd:c6:c3:2c:
94:27:3b:b8:c0:11:e2:00:2d:a5:3e:d5:0a:26:c2:
af:50:08:15:a6:0a:76:55:58:ff:cc:0a:d3:67:d2:
47:ff:4e:c2:b0:13:31:99:a5:94:58:24:43:91:8e:
1d:c6:18:b0:b6:ce:c5:6a:2c:74:66:36:f5:8a:a8:
fd:82:8b:d6:26:12:a6:83:06:8b:dc:6a:5f:c2:b0:
9e:21:e8:58:d0:0e:49:27:d7:b9:6c:59:2e:33:a4:
50:83:40:a6:43:71:5b:e3:df:53:74:7e:ac:7f:a4:
c5:a1:1e:ff:dc:e0:65:c4:96:78:a6:1b:3c:c3:be:
5d:4f:ca:d7:66:18:4d:17:08:5b:f9:43:72:95:c4:
b9:0e:73:46:a3:9e:cd:04:b6:4c:48:55:0a:b3:af:
a6:18:05:60:15:a2:97:81:33:36:ff:5b:5a:bb:af:
a8:55:75:d2:84:87:ae:e4:46:68:b6:fd:f1:f4:79:
70:26:87:d8:c5:15:ca:eb:c6:01:b0:b7:77:b3:fa:
41:39:99:4a:ff:22:18:ba:92:1d:c5:40:bd:af:1b:
55:e5:57:62:6f:82:70:b9:a5:37:9e:0e:bd:8a:1a:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:60:FF:2C:74:F2:D1:1F:73:B3:2A:A6:FB:DB:FA:B4:CB:BE:10:F7
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:3a:7d:c4:12:bd:40:ac:5c:aa:c5:9d:95:3d:bc:b6:90:bb:
45:de:58:ae:3b:57:92:bc:cf:b7:72:4f:a1:af:b5:ff:46:53:
ca:d9:7c:ff:7d:86:32:5c:7d:b1:02:44:0b:f1:9d:f1:22:a7:
51:39:cd:a7:9a:61:fa:13:91:99:0b:1b:b2:1c:39:52:12:b2:
27:00:32:d5:08:16:b6:9b:e6:3a:01:88:81:16:5c:22:50:40:
0b:f8:c8:8a:63:d6:32:e3:32:eb:0f:9c:bb:dd:c6:36:75:4d:
fc:b7:bf:6f:66:0e:e4:da:bd:79:bf:97:cf:5e:8b:a2:1b:20:
81:e5:61:aa:3d:65:0d:a9:4d:54:d9:4f:c6:d1:b0:b2:cc:f4:
8d:fc:24:09:35:f3:46:12:ff:45:5e:d5:6e:2b:cd:3c:dc:7f:
8d:d7:35:7b:1a:af:8f:b0:77:07:92:49:41:db:b4:4e:eb:89:
b4:d8:4a:ae:76:ce:39:f6:f0:6a:e6:54:45:0f:d1:a2:19:38:
2d:aa:b6:74:12:6f:6c:fa:ab:a5:ab:e1:e6:04:e4:c1:52:9e:
e8:34:25:83:38:2b:00:29:a9:e9:31:a1:3e:a0:af:d6:a3:ef:
1d:ba:ae:b7:0d:80:63:84:36:87:49:77:8d:ae:fe:8c:1e:d6:
7b:c7:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:39 2026 by rpki-client