Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: iNH0k5qibxFGsj/pVbutlH663Sr5r0XKcpUufw8FVzc=
Subject key identifier: F9:D9:A3:30:2D:4C:DB:97:19:08:17:95:AA:50:46:0A:E3:EF:DE:D4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2B26FF5E7D56E9D4DF31DC104C4C4A8DF9A2A495
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
Signing time: Mon 26 Jan 2026 13:55:35 +0000
ROA not before: Mon 26 Jan 2026 13:50:35 +0000
ROA not after: Mon 25 Jan 2027 13:55:35 +0000
asID: 31715
IP address blocks: 185.137.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Feb 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:26:ff:5e:7d:56:e9:d4:df:31:dc:10:4c:4c:4a:8d:f9:a2:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 26 13:50:35 2026 GMT
Not After : Jan 25 13:55:35 2027 GMT
Subject: CN=F9D9A3302D4CDB9719081795AA50460AE3EFDED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:eb:9f:df:9e:2a:d9:11:0f:c8:ee:7f:96:
c4:a5:68:05:7b:5e:1c:d8:74:51:23:83:d3:c8:ef:
8b:f8:e2:14:f1:0d:7b:6d:31:18:bd:b0:cb:ca:74:
22:48:79:af:d3:a6:8f:84:e9:c5:79:c1:a9:01:03:
db:10:1d:c7:da:05:5c:85:58:82:7f:b8:4a:c4:58:
b8:96:19:c4:bc:74:65:af:9f:7d:75:d3:44:03:3b:
37:fe:f4:3b:b5:79:c5:c7:22:09:98:99:33:c1:0f:
1f:91:64:4b:43:d3:90:91:3b:b7:78:c7:43:02:8b:
31:24:b1:fb:69:ba:5c:69:b7:35:36:fe:2c:46:fb:
71:2a:15:a6:1b:5c:d9:f9:85:30:44:c7:f3:c0:c9:
84:b6:77:f1:7f:7e:a1:56:c9:85:62:14:4f:b7:0f:
97:0e:f5:04:da:99:e2:5d:a2:3b:ce:06:9d:51:4b:
85:bd:8f:41:91:b1:2d:32:c6:d9:6c:f7:63:01:51:
10:d1:99:82:c4:0a:08:1c:66:2c:6f:fa:0c:3d:84:
6e:62:56:db:76:5e:04:b9:29:a2:d2:b1:9b:8e:ee:
0f:e4:56:34:e7:01:ba:02:93:ca:9e:36:42:78:10:
09:83:88:b4:dd:68:de:4e:66:ee:e2:bb:42:4d:6f:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:A3:30:2D:4C:DB:97:19:08:17:95:AA:50:46:0A:E3:EF:DE:D4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.14.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fe:57:36:5d:56:28:3d:01:60:ab:91:c9:53:28:bc:69:f6:
fe:f6:71:76:7f:c7:04:c9:1b:b0:47:94:61:97:1f:4f:da:b2:
76:be:d2:6f:0e:37:a5:c5:62:73:7d:47:bf:0e:54:9f:bf:39:
a6:9c:d3:c9:21:4e:7d:f9:19:f0:d6:87:1e:70:f8:9d:5e:0a:
bc:b2:cb:a4:ed:6d:58:ce:90:17:65:d5:c2:8a:da:80:6b:c2:
2b:68:74:dd:cb:d9:d6:9e:50:18:b5:d2:05:45:a5:e4:57:32:
24:b5:7d:1e:c1:86:43:90:5f:c6:f6:b2:ec:f9:e9:3e:6e:84:
91:9e:6d:67:bd:cd:92:08:33:27:97:3c:4b:c3:fe:8c:d2:01:
b0:0d:e6:28:c5:5b:2f:25:f4:d6:78:4d:40:7a:68:a3:cd:e7:
39:a6:46:9f:8c:7a:17:12:c3:85:4a:58:f7:a1:6d:c1:4b:12:
68:40:78:d8:7f:18:46:4f:33:b9:17:1b:d2:f9:9b:47:b0:2a:
9c:58:6e:5a:16:34:df:20:d2:4e:b8:18:db:0b:82:ef:d2:90:
90:97:ee:64:5e:48:d2:54:f9:d6:27:ff:72:6f:cc:c8:16:da:
ef:91:45:3c:1c:6f:06:88:64:ca:0a:d5:0d:3b:52:2f:37:57:
47:c1:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:49:29 2026 by rpki-client