Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: bByq5fFiaW9Z3B8njux0Dngj7OYGSi9rzT3IK2FA99Q=
Subject key identifier: D4:5B:B0:ED:A6:81:7F:96:32:C9:F2:93:B5:87:75:1D:83:45:8A:24
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5849D5A3C8B258F4654D06833E88ED35891757EF
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS31898.roa
Signing time: Sun 28 Jun 2026 09:32:35 +0000
ROA not before: Sun 28 Jun 2026 09:27:35 +0000
ROA not after: Sun 27 Jun 2027 09:32:35 +0000
asID: 31898
IP address blocks: 2a14:7581:c0::/44 maxlen: 44
2a14:7581:9811::/48 maxlen: 48
2a14:7583:e400::/40 maxlen: 48
2a14:7583:efff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:49:d5:a3:c8:b2:58:f4:65:4d:06:83:3e:88:ed:35:89:17:57:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 28 09:27:35 2026 GMT
Not After : Jun 27 09:32:35 2027 GMT
Subject: CN=D45BB0EDA6817F9632C9F293B587751D83458A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:f5:20:bf:0e:f8:12:11:a5:dd:47:db:6a:
60:cf:8b:03:3c:ce:10:d5:4a:f4:b6:0e:46:5b:1d:
8d:42:71:ec:ad:e0:3b:81:a7:57:69:db:8c:76:3b:
a5:f4:37:f1:b5:71:0c:e5:3c:29:64:8a:ab:9d:37:
c3:d7:05:0f:e9:77:de:94:69:83:a8:c8:2e:13:15:
dd:c1:48:69:a6:09:38:3f:48:45:14:e0:8e:2a:38:
18:03:74:08:b5:71:eb:8f:de:df:99:62:ae:bd:7d:
0a:65:a8:7f:84:c4:9c:42:ce:ae:63:96:de:94:39:
42:be:ec:c9:64:ff:f8:e2:38:64:99:ec:6a:2a:e1:
e9:99:24:99:f9:b8:ec:6d:8d:3a:53:88:94:69:65:
12:aa:a3:a9:9b:da:e4:49:7b:77:e6:a1:ae:7f:f3:
df:0c:9b:cf:7b:7e:e5:7d:4c:d7:eb:69:24:e7:33:
b1:a6:42:66:7e:fd:bc:5d:a1:76:56:ad:87:08:77:
18:b5:89:3a:e4:f1:69:da:a1:88:4c:90:60:62:40:
ff:7d:e1:73:a4:20:59:4c:64:8f:92:7f:78:d5:9e:
1a:c6:f3:81:8a:9d:c1:2d:12:10:c2:7e:c8:0e:ef:
29:9b:4c:4b:cf:95:4a:7c:a8:ac:9c:82:dc:cd:1b:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:B0:ED:A6:81:7F:96:32:C9:F2:93:B5:87:75:1D:83:45:8A:24
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:c0::/44
2a14:7581:9811::/48
2a14:7583:e400::/40
2a14:7583:efff::/48
Signature Algorithm: sha256WithRSAEncryption
46:ed:f5:72:ab:19:b0:9c:50:b9:07:ea:5c:95:7e:14:55:cb:
ec:8d:58:04:2d:31:e0:fd:85:60:d5:8b:aa:40:d1:ef:32:f6:
00:2e:96:4c:29:4e:7b:b6:15:fe:c7:1a:84:e4:ae:72:de:69:
1a:ae:da:a0:0f:57:89:5b:1e:40:23:b1:bb:64:90:b2:00:00:
d4:7e:c2:3a:22:b8:0c:b8:76:39:d7:7a:71:6d:23:bf:08:41:
a7:95:59:59:ee:46:2d:6c:8e:a5:bf:eb:a4:4f:25:f0:5d:a6:
aa:0a:da:44:d3:39:07:e5:f4:49:49:fe:57:91:c6:ad:7a:94:
e7:50:63:e8:e7:3f:34:d8:cb:ef:13:4e:94:e0:5f:cf:f7:5e:
8c:df:e2:14:a5:d9:b3:8d:e0:69:38:2a:ce:57:47:1b:e7:40:
e8:3a:16:86:2b:b4:8a:54:51:dc:1c:7e:23:1e:b7:15:b1:2a:
2d:81:88:78:bf:74:4d:41:ac:17:e3:58:d4:99:fd:4a:89:4f:
1e:4e:91:93:ee:7b:05:39:81:51:26:49:99:3a:96:0f:59:f4:
9a:fc:fd:0b:38:54:f1:a8:14:a3:09:11:48:c5:56:e6:c4:62:
c5:75:b8:a6:61:e5:8e:83:33:c7:6f:ed:12:6f:2e:3e:ee:f0:
8c:56:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:43 2026 by rpki-client