This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31715.roa
File:                     AS31715.roa (raw, json)
Hash identifier:          +ah9LeIYwflmcGHKCAhSoTvNtrIscJkV+zmsafckwqQ=
Subject key identifier:   C8:8C:65:51:D9:2A:AF:E5:99:E9:0E:08:C3:24:F3:52:74:5C:B4:29
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5FB80E5C5B9BB41E7002B1AB60C3F0A89BB28C5B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31715.roa
Signing time:             Tue 20 Jan 2026 13:30:15 +0000
ROA not before:           Tue 20 Jan 2026 13:25:15 +0000
ROA not after:            Tue 19 Jan 2027 13:30:15 +0000
asID:                     31715
IP address blocks:        178.83.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b8:0e:5c:5b:9b:b4:1e:70:02:b1:ab:60:c3:f0:a8:9b:b2:8c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 20 13:25:15 2026 GMT
            Not After : Jan 19 13:30:15 2027 GMT
        Subject: CN=C88C6551D92AAFE599E90E08C324F352745CB429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:15:ba:55:d7:cc:83:71:96:ed:a3:47:a2:
                    6a:ff:da:a8:29:df:b6:71:7b:b1:aa:bc:ce:1a:75:
                    ef:31:a9:5b:d8:f6:72:76:27:4e:fc:28:9e:f8:a4:
                    69:7d:cd:52:27:cc:91:c9:12:5e:59:98:b1:ba:74:
                    e3:7f:bd:23:af:01:cc:a0:e6:10:ec:4a:16:3b:3a:
                    20:af:de:53:06:cf:a0:b4:c2:37:30:8b:2f:26:46:
                    12:ae:ca:af:1b:43:d5:9f:3c:57:59:09:34:43:da:
                    05:55:de:b2:79:94:e6:0d:d5:dd:ac:02:ef:10:52:
                    68:85:4e:5a:9c:fc:8d:12:e0:f8:0b:52:04:15:67:
                    e6:7a:04:04:8b:84:ed:9d:f0:af:c4:18:f6:1d:41:
                    85:06:90:5e:2f:a3:1c:a1:93:bf:f9:c3:34:9f:9c:
                    c6:c9:75:43:3c:c5:28:1c:c1:64:d2:5c:66:43:26:
                    45:61:95:4d:74:cc:d0:60:0c:ce:fe:bc:bc:5e:9d:
                    0a:90:2b:ed:41:c7:34:ba:31:b7:81:85:9c:8e:e9:
                    b8:d6:f8:2d:89:43:8a:85:33:4b:9e:4d:f1:7c:d2:
                    84:e4:ce:9a:8b:1f:91:f0:db:04:94:06:c1:55:9d:
                    11:64:9d:50:41:71:3c:81:a1:4b:93:91:0d:d3:15:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:65:51:D9:2A:AF:E5:99:E9:0E:08:C3:24:F3:52:74:5C:B4:29
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.83.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:83:c6:59:49:56:b0:d2:e6:9e:b9:64:57:ee:c6:dc:84:
         c5:35:7a:91:f3:56:8f:63:48:7d:05:34:c4:62:67:a4:96:0b:
         84:33:07:a9:0c:22:e6:f6:9e:0a:9b:09:35:6a:6e:cf:f7:c5:
         fc:66:f7:7b:c3:01:32:bd:56:87:c1:47:6a:dd:17:9e:93:26:
         0a:d7:6a:77:86:bd:58:e4:cb:f0:55:c3:5b:4a:87:1b:52:33:
         e3:44:d1:e1:e6:bd:6d:93:4c:54:ec:ae:f6:1e:7f:d6:08:6b:
         c3:a1:4d:c5:30:32:6d:28:3d:c1:a9:8a:68:ac:88:63:dc:2b:
         ed:a6:b0:a5:3b:d4:02:59:8c:be:61:9e:e5:28:f5:00:89:e3:
         3b:1e:85:9c:8c:b9:c4:eb:0d:5a:e6:78:b4:a0:7b:d2:37:34:
         9c:33:94:e3:ec:4c:13:53:a8:90:d8:64:8f:27:dd:c0:c7:f7:
         aa:75:a4:3e:32:3c:80:be:88:96:09:65:ee:de:35:31:86:fb:
         5a:65:a8:b6:1f:0c:12:1f:14:a1:27:ca:45:f0:f7:60:df:4d:
         17:d6:50:61:98:d3:cf:b7:e8:9e:68:9f:63:5c:f2:55:db:79:
         48:c5:0a:23:be:b8:ac:66:d3:b7:92:23:6e:00:f4:d8:2e:2b:
         41:14:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:05:33 2026 by rpki-client