Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: gLb9RQrl9pOSNk2tu/y9lKFWS8wtigFWJwN8qtP+9F4=
Subject key identifier: 4F:0B:90:03:41:9F:55:34:FB:51:92:93:2E:6C:C8:9F:CE:B9:97:91
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6C0F941A84CC7BEEE72F37F0AB0B6EDAD39EA3EE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS31898.roa
Signing time: Sun 14 Sep 2025 13:11:24 +0000
ROA not before: Sun 14 Sep 2025 13:06:24 +0000
ROA not after: Sun 13 Sep 2026 13:11:24 +0000
asID: 31898
IP address blocks: 2a0f:85c1:3f0::/48 maxlen: 48
2a0f:85c1:c18::/48 maxlen: 48
2a0f:85c1:cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0f:94:1a:84:cc:7b:ee:e7:2f:37:f0:ab:0b:6e:da:d3:9e:a3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 14 13:06:24 2025 GMT
Not After : Sep 13 13:11:24 2026 GMT
Subject: CN=4F0B9003419F5534FB5192932E6CC89FCEB99791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:39:a2:9e:48:9f:b0:2b:9c:ea:b2:55:b3:
a7:65:c0:02:29:2f:e5:9b:e3:c5:9e:d4:02:ec:a3:
59:f7:2c:31:cc:68:9f:67:bd:66:e3:14:4c:8b:b5:
76:33:bd:5b:e2:98:20:95:61:39:fe:31:9a:9c:1f:
d9:1e:09:e9:8d:bf:94:67:21:cf:75:3c:19:f5:d7:
0e:ab:da:b1:25:d2:9f:f4:44:6a:d0:1f:af:22:0e:
bf:9c:14:df:d2:d9:73:d6:35:fd:54:4c:02:8e:01:
b0:de:94:c5:4d:9d:97:fd:91:8f:9f:4e:3c:8f:96:
81:bb:83:78:15:fe:8f:84:1a:8c:ad:23:bd:3c:67:
fb:a1:bd:92:17:10:bc:00:5c:49:1f:16:c9:ca:f3:
f1:bd:26:e7:2b:75:6f:e3:14:a0:ba:8c:35:be:44:
29:69:1a:0f:46:3f:eb:c1:f9:87:c6:6d:f5:30:90:
ae:27:ec:fd:fb:46:d5:3d:2f:64:fc:fc:38:ae:3d:
a8:7c:bf:38:08:00:2b:9e:50:b1:15:ff:db:dd:6c:
a8:c9:aa:0d:85:53:e5:8b:6b:39:bd:89:53:f8:af:
46:4c:1f:b7:31:85:9c:0b:4d:84:e6:84:b7:21:b5:
3e:c9:ac:bf:2e:23:59:55:2c:f5:e0:99:c8:37:ab:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:90:03:41:9F:55:34:FB:51:92:93:2E:6C:C8:9F:CE:B9:97:91
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f0::/48
2a0f:85c1:c18::/48
2a0f:85c1:cc0::/48
Signature Algorithm: sha256WithRSAEncryption
60:21:b3:f5:3e:23:53:08:e7:5e:0e:29:41:dd:0d:9a:05:92:
84:2a:e5:1a:1e:8b:a0:b5:3b:eb:2c:e1:9a:d6:47:50:49:ab:
8d:a6:c7:37:4f:b0:48:f3:48:c0:83:39:fd:c5:71:22:b1:8f:
8f:6e:b4:2a:91:13:94:90:f8:91:59:79:e9:63:c7:56:33:66:
94:92:f5:14:71:64:95:c8:b3:9d:e3:a4:28:2c:b6:df:e3:b2:
83:98:f3:e8:88:ed:64:ac:07:1b:41:20:c6:47:14:8c:9d:5b:
ba:8c:17:c9:e3:8c:d2:0a:c1:cb:4f:ef:42:aa:7c:4b:f9:77:
20:f0:7d:17:45:10:b6:bd:95:4a:68:e5:26:50:ee:04:fb:45:
90:b9:32:c7:4c:5b:d8:19:08:b2:ec:6e:f4:f3:f1:71:85:31:
b4:5c:21:71:65:a3:1c:de:ec:eb:97:8b:6e:5c:03:d1:8e:d2:
7a:e3:a3:df:26:87:a5:78:31:d7:9b:a8:94:0d:f0:a9:31:83:
71:2a:30:cf:9f:bf:f6:3b:0e:07:24:c3:51:39:79:d7:80:0d:
32:42:78:4b:cb:18:1a:57:a1:90:b1:85:4b:09:b4:51:18:90:
67:1b:65:6a:63:7d:3a:2e:85:8b:2f:10:5d:0d:9b:41:e7:bb:
f8:25:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:33 2025 by rpki-client