Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS31924.roa
File: AS31924.roa (raw, json)
Hash identifier: 72BGqlxowB+pc/AwSn3HRMjJZgPoKDCuPUXdcNnfCkU=
Subject key identifier: C9:69:D4:D5:F6:25:DF:EE:AF:67:B3:0F:46:72:DE:E6:87:2F:F5:F0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26597FC7B1015F1E46B4EF56F1BF88F05C2F00B3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS31924.roa
Signing time: Fri 29 May 2026 02:23:38 +0000
ROA not before: Fri 29 May 2026 02:18:38 +0000
ROA not after: Fri 28 May 2027 02:23:38 +0000
asID: 31924
IP address blocks: 188.220.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:59:7f:c7:b1:01:5f:1e:46:b4:ef:56:f1:bf:88:f0:5c:2f:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 29 02:18:38 2026 GMT
Not After : May 28 02:23:38 2027 GMT
Subject: CN=C969D4D5F625DFEEAF67B30F4672DEE6872FF5F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:f6:18:16:3a:ac:03:fd:09:ad:b1:6d:f6:
e9:8d:8a:11:6b:f4:7e:61:58:10:5d:cb:d0:8d:9b:
1c:b5:c2:55:b1:d7:2a:43:b5:4f:fa:1f:d7:74:e9:
38:c4:34:3b:ca:ba:7d:bc:26:72:e0:56:4e:ac:d4:
71:c9:1e:2a:cf:a2:65:97:91:ea:42:6f:32:0b:d5:
aa:56:8f:f6:b2:03:34:1a:47:bd:e3:78:fb:53:e7:
ca:6c:99:d6:17:d7:07:66:09:4d:c9:11:4f:1c:0a:
cb:20:54:f9:1f:b7:33:72:63:8b:32:f5:51:99:ba:
40:c2:ce:86:a1:af:e4:9e:0f:93:20:47:69:b9:8b:
fd:c2:b3:9e:c3:c8:de:8c:5a:77:55:47:a5:9b:1a:
f3:f6:fe:48:a9:7f:29:c7:9f:da:a2:80:42:26:20:
d4:9a:e8:83:74:6a:39:69:a3:e3:47:0d:55:c6:22:
59:db:35:ce:27:de:15:c8:d5:57:58:3c:ae:35:1c:
80:33:7c:af:1c:91:3a:aa:71:b9:9f:07:4b:73:1c:
2e:dd:e8:03:64:3a:df:07:f2:e6:14:39:3d:42:62:
53:40:78:fd:68:e5:f9:a7:6a:22:75:c7:46:80:f4:
6a:2c:c0:3f:e6:e2:79:f9:66:11:df:ee:71:f0:14:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:69:D4:D5:F6:25:DF:EE:AF:67:B3:0F:46:72:DE:E6:87:2F:F5:F0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS31924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.229.0/24
Signature Algorithm: sha256WithRSAEncryption
29:56:b4:e3:08:1e:d8:98:8c:f4:a0:26:99:73:d8:37:23:e5:
a2:22:d7:a3:77:64:f7:2f:2c:b6:c5:82:04:29:b9:fc:4a:dc:
2f:45:88:d8:83:fc:8b:54:e0:a9:14:44:3e:c2:ad:be:0f:66:
ec:d6:77:a1:53:e7:4e:1d:9d:07:20:6c:32:eb:a4:c8:1d:6b:
03:5f:8d:68:e5:32:0d:e0:69:9a:96:19:10:93:b3:a8:59:4e:
5f:9b:8e:6e:b8:b7:f0:43:6b:22:a0:f3:c1:f6:c3:cc:ab:1d:
d8:7e:c2:0a:d4:a5:58:1d:b8:ea:70:33:13:c3:77:cc:4d:52:
2b:ca:3b:9e:59:a7:a6:f2:2e:f2:4c:76:66:34:97:a4:5b:4f:
80:10:ee:d2:80:fa:17:5d:6b:0e:68:7e:2c:b8:f2:19:43:df:
83:45:93:37:93:64:88:a6:b0:33:a7:74:ac:78:8b:fd:db:0d:
3c:ad:af:7c:cf:fd:60:64:11:a4:6d:73:47:39:14:65:a1:06:
1f:17:58:43:eb:a3:ff:fb:75:ad:a1:fa:62:9c:0e:00:ac:91:
8d:e6:6c:be:16:e3:a4:0f:4c:dd:24:46:60:6d:9f:f8:e3:f2:
ba:48:f0:7a:cb:e4:f3:e2:ce:e6:a6:2e:9d:a0:fa:ec:0f:b5:
1b:f4:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:12 2026 by rpki-client