Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: MNNgIQC/m9ysQFJTD4i+4jKtwRgvAb2cGUkTln7f7lY=
Subject key identifier: D9:D5:F3:60:61:BC:6D:8B:5A:47:B7:DA:A8:13:C9:07:37:39:61:BF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6AB7BFCBBFF0242DEEFD892E7297C715A8C4080F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
Signing time: Thu 22 Oct 2026 07:47:54 +0000
ROA not before: Thu 22 Oct 2026 07:42:54 +0000
ROA not after: Thu 21 Oct 2027 07:47:54 +0000
asID: 31898
IP address blocks: 82.23.168.0/24 maxlen: 24
82.24.70.0/24 maxlen: 24
82.25.53.0/24 maxlen: 24
82.26.110.0/24 maxlen: 24
82.27.123.0/24 maxlen: 24
82.29.42.0/24 maxlen: 24
82.29.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b7:bf:cb:bf:f0:24:2d:ee:fd:89:2e:72:97:c7:15:a8:c4:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 22 07:42:54 2026 GMT
Not After : Oct 21 07:47:54 2027 GMT
Subject: CN=D9D5F36061BC6D8B5A47B7DAA813C907373961BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:dd:ee:85:93:07:9f:08:80:32:b0:52:fb:
0c:bf:9c:5a:13:1e:27:f3:b4:a9:9a:b2:c6:73:5b:
97:d4:f4:46:45:ac:06:4a:33:d0:ab:ea:5a:27:de:
c0:21:22:f2:82:05:2f:9e:8f:a2:ac:23:b7:19:46:
c6:40:80:f7:1c:f5:da:70:cf:62:e3:17:77:82:25:
19:33:a4:68:ba:df:2e:df:55:00:08:9e:6d:e5:88:
dc:07:77:a6:54:c4:cc:c6:e2:4d:8d:0c:b8:29:97:
0c:14:98:36:dd:f0:46:32:7d:78:07:71:4f:f1:f9:
c1:a8:77:56:e8:0d:24:ee:e2:ce:d3:82:ea:fa:25:
5c:69:90:ea:b0:02:ff:43:39:62:cb:b2:e0:86:b9:
81:d6:16:35:b0:1d:53:d6:de:63:f7:97:e6:4b:e4:
46:94:a4:ae:3b:38:b9:4d:14:a2:f9:fe:07:22:b5:
e4:db:d9:39:3f:0a:40:e4:3c:87:92:ae:c9:db:7a:
22:42:70:bc:22:fc:6d:d1:4f:67:3b:10:b0:5c:41:
ed:c4:d1:2e:0e:d5:5b:c9:e2:90:97:cb:ea:e9:35:
5b:04:5d:ea:83:ec:fd:4b:cb:01:56:89:db:63:22:
9d:e6:45:93:41:af:0e:9c:21:85:43:ab:90:f8:f2:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:F3:60:61:BC:6D:8B:5A:47:B7:DA:A8:13:C9:07:37:39:61:BF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.168.0/24
82.24.70.0/24
82.25.53.0/24
82.26.110.0/24
82.27.123.0/24
82.29.42.0/24
82.29.69.0/24
Signature Algorithm: sha256WithRSAEncryption
64:32:5e:ef:7a:5f:3e:42:65:dc:1d:b1:0a:ab:2b:bd:4d:d3:
31:d6:f5:46:69:df:cd:92:97:ef:3b:99:24:07:15:8c:eb:a6:
92:fb:a7:6f:85:0d:29:ff:06:2c:6a:a8:e3:ad:4f:78:60:03:
a8:eb:a6:0d:6f:11:6f:e2:ee:6f:cf:91:cb:1d:ad:de:00:a7:
dd:73:0c:c3:86:af:4b:5a:5f:83:59:e8:32:ce:4f:98:bc:e2:
8b:f3:30:09:30:6f:c0:fc:8c:09:d2:a1:71:3a:54:a8:e3:fc:
07:ab:0f:6f:61:97:89:f3:08:c9:6f:04:bf:66:45:03:75:5d:
d8:11:89:f8:55:22:7d:e8:4f:10:05:6c:d0:77:b6:db:82:92:
a3:2f:fe:c5:21:73:f1:4f:e9:29:ad:e1:b5:ea:57:65:88:bc:
22:4f:34:ae:42:ec:17:10:56:fc:90:db:e5:2d:f8:1c:9b:02:
d7:49:87:88:51:ff:e0:e4:e7:5d:4e:fa:87:81:d6:26:06:2e:
f1:91:4f:bb:9f:86:2d:5d:e1:55:f2:46:05:9f:61:78:0c:ee:
20:fd:f3:6d:69:b4:2c:82:a0:e6:7c:26:15:ff:5c:e2:9e:92:
ac:58:d7:48:a7:fd:11:d1:54:e6:db:50:d2:00:63:45:7e:a5:
c9:ba:69:59
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUare/y7/wJC3u/YkucpfHFajECA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjIwNzQyNTRaFw0yNzEwMjEwNzQ3NTRaMDMxMTAvBgNV
BAMTKEQ5RDVGMzYwNjFCQzZEOEI1QTQ3QjdEQUE4MTNDOTA3MzczOTYxQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLd3uhZMHnwiAMrBS+wy/nFoT
HifztKmassZzW5fU9EZFrAZKM9Cr6lon3sAhIvKCBS+ej6KsI7cZRsZAgPcc9dpw
z2LjF3eCJRkzpGi63y7fVQAInm3liNwHd6ZUxMzG4k2NDLgplwwUmDbd8EYyfXgH
cU/x+cGod1boDSTu4s7Tgur6JVxpkOqwAv9DOWLLsuCGuYHWFjWwHVPW3mP3l+ZL
5EaUpK47OLlNFKL5/gciteTb2Tk/CkDkPIeSrsnbeiJCcLwi/G3RT2c7ELBcQe3E
0S4O1VvJ4pCXy+rpNVsEXeqD7P1LywFWidtjIp3mRZNBrw6cIYVDq5D48hRrAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU2dXzYGG8bYtaR7faqBPJBzc5Yb8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzE4OTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBABSF6gD
BABSGEYDBABSGTUDBABSGm4DBABSG3sDBABSHSoDBABSHUUwDQYJKoZIhvcNAQEL
BQADggEBAGQyXu96Xz5CZdwdsQqrK71N0zHW9UZp382Sl+87mSQHFYzrppL7p2+F
DSn/BixqqOOtT3hgA6jrpg1vEW/i7m/Pkcsdrd4Ap91zDMOGr0taX4NZ6DLOT5i8
4ovzMAkwb8D8jAnSoXE6VKjj/AerD29hl4nzCMlvBL9mRQN1XdgRifhVIn3oTxAF
bNB3ttuCkqMv/sUhc/FP6Smt4bXqV2WIvCJPNK5C7BcQVvyQ2+Ut+BybAtdJh4hR
/+Dk511O+oeB1iYGLvGRT7ufhi1d4VXyRgWfYXgM7iD9821ptCyCoOZ8JhX/XOKe
kqxY10in/RHRVObbUNIAY0V+pcm6aVk=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:06:43 2026 by rpki-client