Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: ku4i3Y2whUPuo4Mj8ZD/iDwH7pDd28R610Qx57vx8Uw=
Subject key identifier: F0:72:F6:E8:40:C2:9D:FC:EC:DD:3A:4B:5A:F1:1A:6F:D6:E1:CF:36
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7C76A18C88F9E718F44BF3E75BC15647BE6BE36E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS31715.roa
Signing time: Tue 02 Jun 2026 08:40:59 +0000
ROA not before: Tue 02 Jun 2026 08:35:59 +0000
ROA not after: Tue 01 Jun 2027 08:40:59 +0000
asID: 31715
IP address blocks: 78.105.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:76:a1:8c:88:f9:e7:18:f4:4b:f3:e7:5b:c1:56:47:be:6b:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 2 08:35:59 2026 GMT
Not After : Jun 1 08:40:59 2027 GMT
Subject: CN=F072F6E840C29DFCECDD3A4B5AF11A6FD6E1CF36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:66:44:82:55:67:55:8e:ce:a6:d2:b2:2a:
b8:7b:67:6d:f3:76:8a:26:67:4b:fd:d0:db:f7:74:
84:26:46:fe:18:85:73:50:d4:8d:a5:56:c4:77:83:
b3:bc:07:b4:83:72:ae:cf:9c:b1:e4:53:54:38:55:
40:64:48:e1:93:14:d9:8d:65:0d:40:8f:3d:3e:63:
44:80:7b:17:dd:ef:aa:06:36:21:84:55:f2:65:67:
05:35:45:48:b9:3f:b1:17:2a:83:19:50:61:07:a3:
78:58:08:96:1e:58:5f:c9:bb:72:d1:9f:49:79:fd:
ee:a5:a8:52:ec:da:77:ea:02:7d:da:0f:76:8e:47:
a0:43:5f:ae:c9:a8:cc:f5:86:d9:64:7f:4e:02:80:
4b:46:21:7d:68:94:f3:4c:48:81:ad:a3:4e:37:b2:
81:24:72:d1:b0:de:7f:c0:5c:74:5b:ae:13:f1:00:
e1:66:37:7d:03:19:8d:64:d1:3b:5b:7d:72:11:27:
77:08:00:62:69:67:0b:f6:d6:0a:b1:12:ac:85:1f:
5c:ea:fd:0d:a0:17:f6:ab:65:d8:d3:f2:e1:9f:18:
3e:85:ce:b2:02:ef:47:1d:e9:80:87:0b:4b:d6:c0:
20:e0:86:d9:9c:5d:e8:1a:6d:5f:81:72:34:22:11:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:F6:E8:40:C2:9D:FC:EC:DD:3A:4B:5A:F1:1A:6F:D6:E1:CF:36
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:da:73:02:a1:b9:d8:29:c4:ca:1c:c9:e8:d1:0d:6f:af:6d:
05:06:4b:3a:f7:25:98:c6:80:41:92:a7:90:f6:29:b0:d3:32:
28:12:7e:e6:52:b9:81:8e:b9:4c:5f:ee:58:b7:9d:4c:1c:35:
51:d3:b2:30:09:5c:21:b8:31:aa:aa:1f:2c:0f:d3:0c:bc:00:
8f:00:84:fa:4b:b3:0e:11:d7:03:bb:2b:57:cd:9c:33:00:28:
19:12:15:73:47:c6:0a:d6:d6:1f:a0:d3:de:2b:cc:68:4f:b6:
d9:37:b0:22:1f:4f:d8:2f:3a:e8:1c:f8:0c:a3:8e:ba:e7:8d:
b2:55:d8:95:2c:e4:ad:f6:cb:f0:6d:02:32:25:45:17:10:64:
2a:4b:1d:71:48:83:b8:f5:fc:c3:0d:4b:d0:a7:74:58:49:85:
88:27:70:f2:b8:0e:89:17:1b:6f:1c:2d:22:c2:49:29:2a:a4:
15:df:a6:d5:fc:aa:7f:8b:6b:28:7c:b6:46:25:c4:09:d0:bf:
95:2a:dc:62:6c:99:8b:31:25:29:90:8a:13:16:d8:a7:3c:09:
3b:42:7b:42:da:81:37:92:cf:4b:45:c1:d4:b1:e2:e0:a4:aa:
03:43:f5:49:03:3c:0c:43:de:70:bc:49:62:55:ea:5b:e6:5b:
1a:a3:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:17 2026 by rpki-client