Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31924.roa
File: AS31924.roa (raw, json)
Hash identifier: GxOW103qMXK75o/i8BWroHqfv8UlyWCRmAnxtNsYF+8=
Subject key identifier: FC:42:23:90:30:5C:57:61:32:16:5C:B1:5F:61:8D:06:B9:86:4E:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 64966A835C666BD86B2CAB79DC902A098F02704E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31924.roa
Signing time: Mon 06 Apr 2026 07:18:25 +0000
ROA not before: Mon 06 Apr 2026 07:13:25 +0000
ROA not after: Mon 05 Apr 2027 07:18:25 +0000
asID: 31924
IP address blocks: 84.75.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:96:6a:83:5c:66:6b:d8:6b:2c:ab:79:dc:90:2a:09:8f:02:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 07:13:25 2026 GMT
Not After : Apr 5 07:18:25 2027 GMT
Subject: CN=FC422390305C576132165CB15F618D06B9864EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:95:95:ff:b2:bc:6b:fd:41:40:9e:0d:81:
47:eb:49:a6:df:ba:e2:d8:3e:da:9e:52:a7:75:e7:
e8:1b:4c:7d:52:81:25:f7:4b:62:ab:2a:72:37:50:
2f:63:a4:9f:2c:b4:d3:92:b6:36:f5:a2:bd:76:18:
d4:ac:41:0b:04:94:39:f8:c6:b1:c5:52:9a:e2:e0:
c9:8b:3c:d1:92:e6:f5:8c:19:49:cb:ad:a6:2b:d7:
19:3a:5f:8d:20:81:68:61:06:8a:48:ab:21:9d:50:
88:1c:2c:09:84:ad:9f:5e:cc:3b:8b:24:b4:ab:97:
bb:33:3e:7f:b1:4b:2e:2d:a8:3f:58:3c:9c:7c:d6:
c9:d8:89:e8:ed:5c:62:dc:ec:d9:05:88:ea:54:55:
6c:97:3e:28:eb:10:60:f1:77:50:eb:2f:bb:3b:a6:
36:33:2f:6b:7f:7d:50:aa:f6:0e:33:1a:68:64:b5:
16:46:6e:e8:59:4e:5e:b9:eb:25:8d:e1:ab:ae:3e:
a9:74:69:fe:ce:3c:04:58:7d:63:c5:2a:b8:7a:42:
ee:80:0c:47:a9:5b:34:21:38:69:75:f5:13:04:5b:
53:4a:c7:dd:e9:9a:49:bb:99:f5:7b:a3:94:34:2c:
8a:72:11:6e:ee:fb:f9:81:d0:9e:6a:49:4f:33:bb:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:23:90:30:5C:57:61:32:16:5C:B1:5F:61:8D:06:B9:86:4E:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7f:35:66:42:d0:cd:3a:96:84:48:84:c7:6f:7e:63:99:d7:
a9:cb:b8:7d:de:fe:4d:df:f8:dd:c6:aa:55:cc:03:f9:bd:ff:
56:09:da:24:5b:62:4f:01:a9:c7:ab:71:c9:be:9e:c9:f3:06:
54:50:7d:d9:43:29:9c:c0:e3:57:59:2f:0d:9d:38:00:a6:7c:
1e:7d:40:61:e7:d7:87:47:0b:d1:76:11:44:1d:1f:07:bf:35:
68:f0:4a:1b:e0:30:8e:45:8f:b6:7f:ed:17:d3:84:76:97:ef:
ab:c1:8f:8e:1a:d0:1f:a4:5c:ea:85:01:05:c3:dc:e4:65:a5:
ce:1f:7d:19:e2:fa:f9:34:35:59:32:64:56:f0:56:b7:2a:4f:
11:7d:ed:98:17:e8:dc:6f:30:43:b6:53:12:d8:cd:86:33:e7:
70:94:d6:86:4b:85:55:b6:92:2e:8e:69:9e:11:f8:d4:a1:b6:
44:1a:82:c5:28:2e:aa:07:0d:eb:bb:7f:b1:58:7f:21:f0:96:
97:15:31:6a:1c:78:35:3d:02:87:6b:fc:41:51:fe:3d:fa:7f:
63:ec:53:72:38:3d:19:9e:62:1b:82:92:85:52:86:2c:e2:9a:
4b:a7:db:d7:87:3c:68:13:88:0d:c6:a8:f9:e2:16:04:ec:29:
82:d5:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:06 2026 by rpki-client