Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: PiVParRRAy2y4vbKCCIfkBZecDV5LllwJr06cUIIqaQ=
Subject key identifier: 67:A0:67:79:B1:2B:F3:8C:62:5C:7F:D5:3D:F4:9E:9F:7D:E9:B4:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5E98B895AFD4088210096E274B3375345278620C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
Signing time: Mon 29 Jun 2026 10:48:47 +0000
ROA not before: Mon 29 Jun 2026 10:43:47 +0000
ROA not after: Mon 28 Jun 2027 10:48:47 +0000
asID: 31898
IP address blocks: 82.26.110.0/24 maxlen: 24
82.27.123.0/24 maxlen: 24
82.29.42.0/24 maxlen: 24
82.29.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:98:b8:95:af:d4:08:82:10:09:6e:27:4b:33:75:34:52:78:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 10:43:47 2026 GMT
Not After : Jun 28 10:48:47 2027 GMT
Subject: CN=67A06779B12BF38C625C7FD53DF49E9F7DE9B424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:09:d8:79:10:20:26:77:e1:c7:32:f3:91:
a8:67:e1:e8:cf:2a:90:90:4e:e7:44:db:b7:51:e2:
2d:27:58:d5:b1:f4:10:2e:ad:a4:a7:2d:82:5b:c0:
2a:99:16:15:f6:1e:fb:a9:1a:c2:87:d5:0c:94:1e:
b2:b5:0a:6f:55:1a:bc:c6:25:22:c4:d5:e9:39:a9:
f2:6c:0f:43:8e:80:7e:da:a8:56:e4:e5:9b:71:dc:
13:cc:34:a9:c5:8b:93:6d:5d:61:1c:a5:1d:ef:a2:
db:21:73:28:07:20:39:b9:44:32:27:28:f6:01:8a:
a2:25:2a:50:c2:24:b6:6f:59:0c:e5:a7:ec:18:d1:
15:0d:ce:71:73:0f:d2:06:93:bb:27:ca:5e:58:8f:
43:e5:68:5e:b3:bc:64:07:26:02:35:a2:3e:db:04:
0e:41:c7:cd:24:5d:bc:13:a3:85:0c:90:d5:b5:ec:
d8:51:0a:39:50:50:35:2e:34:ed:ce:3f:c5:bd:27:
fe:50:01:b1:42:54:85:17:27:70:ea:df:ee:18:14:
db:c9:33:f9:18:fa:79:d9:a0:f8:8c:aa:ca:f1:71:
f0:34:f9:a0:ef:9b:50:70:c3:7e:6c:b9:54:15:b2:
2a:88:0f:35:0e:10:4d:92:12:22:a0:e7:53:48:71:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:67:79:B1:2B:F3:8C:62:5C:7F:D5:3D:F4:9E:9F:7D:E9:B4:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.110.0/24
82.27.123.0/24
82.29.42.0/24
82.29.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fa:a3:f5:ad:92:45:64:41:08:91:a8:ba:5b:e0:24:d2:6b:
55:ad:d7:a8:42:24:1c:ba:4f:ac:f5:09:54:ce:f8:4e:e3:b2:
f6:83:15:c8:d6:82:9c:a9:8c:d4:28:d9:4d:88:45:dc:23:e2:
32:61:0a:77:a0:b3:dd:00:37:8f:13:2a:6b:c8:21:2b:b3:dc:
90:a4:eb:ad:99:d1:23:f5:8b:db:9a:75:c2:ab:c6:ca:68:5c:
ac:bd:a9:c4:2e:9e:ef:68:86:32:54:2b:b6:4f:aa:1a:e3:f8:
c8:0a:96:02:19:90:6a:45:93:73:95:2b:35:03:6c:da:1f:48:
bf:c2:61:e6:d6:b9:d4:5a:ec:21:f4:be:ea:d9:4c:ff:cc:59:
18:0c:6b:a4:c1:4b:67:9d:6f:81:e6:1b:aa:e0:b0:16:7b:00:
35:8d:2f:dc:25:27:c4:2c:a8:50:b5:e0:ad:3a:35:9b:6a:62:
6b:bd:d8:cb:bc:3d:61:6f:4d:c0:13:3c:a0:04:7c:79:85:48:
52:70:8e:5a:bf:66:7a:ba:b2:7f:0c:65:22:42:2e:1b:92:f7:
cf:22:4e:83:93:21:92:0f:af:5f:92:c7:4f:42:21:27:f7:99:
61:fe:7a:b1:45:2a:9f:7d:2a:d7:44:17:b8:c9:d3:89:ca:d8:
fd:35:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:45 2026 by rpki-client