Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: obCy8JEKKR2UjBfK2qikKmgVhDOW0I3N2LV+ju4To2E=
Subject key identifier: 23:4B:75:B0:C1:95:C1:4A:3A:80:53:71:45:68:36:5D:D8:F0:13:9C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 35A08AFA65D67617FF587B597248C548809B2545
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31898.roa
Signing time: Fri 12 Jun 2026 00:47:33 +0000
ROA not before: Fri 12 Jun 2026 00:42:33 +0000
ROA not after: Fri 11 Jun 2027 00:47:33 +0000
asID: 31898
IP address blocks: 91.124.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a0:8a:fa:65:d6:76:17:ff:58:7b:59:72:48:c5:48:80:9b:25:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 12 00:42:33 2026 GMT
Not After : Jun 11 00:47:33 2027 GMT
Subject: CN=234B75B0C195C14A3A8053714568365DD8F0139C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:2f:a8:32:f4:6e:da:cd:58:8f:98:4c:fb:
37:42:4a:7c:a4:32:28:f8:3e:7d:80:55:72:c6:ed:
71:03:2e:bf:e5:e2:3a:74:c0:c1:18:f6:4e:69:b3:
7a:b4:56:21:e8:42:c0:96:8a:29:2a:ce:8c:32:da:
1e:44:03:43:68:5c:c7:e7:3d:85:fc:00:92:8b:b7:
2a:e6:01:bc:59:db:89:74:81:ff:dd:75:cd:62:15:
ba:3e:1e:b7:7c:99:25:c4:b9:fa:94:09:8c:43:4e:
5b:3d:80:7b:af:d2:92:bb:ae:c8:c1:bd:b8:af:4d:
36:d0:c2:49:cc:fb:38:38:aa:cc:1b:9d:40:6e:ef:
10:d9:44:34:b9:d3:9f:fb:a0:76:7b:1b:25:bf:5f:
af:a0:61:04:1c:e3:a7:38:c0:31:87:4a:40:c0:37:
e8:fe:56:c6:48:ce:a5:55:b7:70:e1:d6:18:24:e4:
7a:86:e7:8b:a8:24:ca:b4:be:bc:0c:5b:cd:e8:5d:
4b:6a:38:97:43:4c:b5:7b:b6:1b:ad:26:b3:bc:03:
e6:3a:0a:87:9e:d0:a4:8d:8d:8c:0b:0a:a7:c2:5a:
05:ed:dd:7f:f4:1b:ad:4c:f4:fa:4f:73:7a:5a:8b:
51:74:f5:9f:e0:f5:43:9e:a2:e8:fd:76:72:0e:b5:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:75:B0:C1:95:C1:4A:3A:80:53:71:45:68:36:5D:D8:F0:13:9C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.1.0/24
Signature Algorithm: sha256WithRSAEncryption
33:08:63:94:da:45:d8:25:8b:9b:97:8a:eb:b2:1c:7b:eb:e2:
63:8d:eb:57:20:4b:de:f6:e8:e0:f4:91:09:c9:06:3a:a5:fc:
19:24:55:5d:88:68:ca:72:98:aa:ca:90:83:7c:98:03:d3:2a:
cd:de:3a:9a:1a:f3:92:26:0c:f4:76:13:1f:98:ed:b9:15:77:
38:76:3c:c1:aa:5c:04:57:8e:0a:53:d7:71:fc:2a:38:fa:80:
64:54:a7:6e:f0:bf:a8:67:63:e6:3f:a5:10:21:75:68:57:40:
f6:f4:88:8a:b4:67:c3:f8:d6:32:53:1e:53:e6:b4:0e:6f:6a:
b0:db:0c:01:86:1f:dc:cc:81:f0:aa:14:fb:5a:66:6e:a0:ce:
35:ec:f1:67:39:46:95:87:7e:6e:a4:13:f8:46:0e:b7:9b:a4:
f1:eb:fb:f8:d7:43:85:e2:77:3b:e5:2c:95:53:b8:c4:9b:a3:
a0:bf:ea:1f:84:65:5e:ff:47:3d:51:da:2d:68:0e:16:b4:b3:
41:76:1c:27:5c:37:fd:de:a3:70:ce:33:84:f5:fb:1b:ba:e1:
3f:01:24:33:de:75:71:f3:7f:e9:76:1a:7f:0d:a1:11:c2:c7:
86:02:41:5e:c4:22:9b:dc:4c:24:c0:1a:22:59:c3:95:bd:a3:
78:82:dd:6c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUNaCK+mXWdhf/WHtZckjFSICbJUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA2MTIwMDQyMzNaFw0yNzA2MTEwMDQ3MzNaMDMxMTAvBgNV
BAMTKDIzNEI3NUIwQzE5NUMxNEEzQTgwNTM3MTQ1NjgzNjVERDhGMDEzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUdS+oMvRu2s1Yj5hM+zdCSnyk
Mij4Pn2AVXLG7XEDLr/l4jp0wMEY9k5ps3q0ViHoQsCWiikqzowy2h5EA0NoXMfn
PYX8AJKLtyrmAbxZ24l0gf/ddc1iFbo+Hrd8mSXEufqUCYxDTls9gHuv0pK7rsjB
vbivTTbQwknM+zg4qswbnUBu7xDZRDS505/7oHZ7GyW/X6+gYQQc46c4wDGHSkDA
N+j+VsZIzqVVt3Dh1hgk5HqG54uoJMq0vrwMW83oXUtqOJdDTLV7thutJrO8A+Y6
Coee0KSNjYwLCqfCWgXt3X/0G61M9PpPc3pai1F09Z/g9UOeouj9dnIOtaV1AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUI0t1sMGVwUo6gFNxRWg2XdjwE5wwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzE4OTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABbfAEw
DQYJKoZIhvcNAQELBQADggEBADMIY5TaRdgli5uXiuuyHHvr4mON61cgS9726OD0
kQnJBjql/BkkVV2IaMpymKrKkIN8mAPTKs3eOpoa85ImDPR2Ex+Y7bkVdzh2PMGq
XARXjgpT13H8Kjj6gGRUp27wv6hnY+Y/pRAhdWhXQPb0iIq0Z8P41jJTHlPmtA5v
arDbDAGGH9zMgfCqFPtaZm6gzjXs8Wc5RpWHfm6kE/hGDrebpPHr+/jXQ4Xidzvl
LJVTuMSbo6C/6h+EZV7/Rz1R2i1oDha0s0F2HCdcN/3eo3DOM4T1+xu64T8BJDPe
dXHzf+l2Gn8NoRHCx4YCQV7EIpvcTCTAGiJZw5W9o3iC3Ww=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:48 2026 by rpki-client