Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: tIHC9X1Dkhz7nEGGoDRyz2nj+esujbNjHHs2WgNiIwU=
Subject key identifier: B9:EC:F2:BF:64:9A:1D:C4:43:67:B5:13:DD:D3:45:BB:3F:CC:64:01
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: D8D10F9A6DC8FE77DECE08FF2ACB4624134E4E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS31715.roa
Signing time: Mon 05 Oct 2026 10:49:35 +0000
ROA not before: Mon 05 Oct 2026 10:44:35 +0000
ROA not after: Mon 04 Oct 2027 10:49:35 +0000
asID: 31715
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:d1:0f:9a:6d:c8:fe:77:de:ce:08:ff:2a:cb:46:24:13:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 5 10:44:35 2026 GMT
Not After : Oct 4 10:49:35 2027 GMT
Subject: CN=B9ECF2BF649A1DC44367B513DDD345BB3FCC6401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:68:17:69:cb:75:c2:4d:83:4a:40:58:1d:
2d:b7:fc:2b:0c:67:7c:c4:7c:94:d6:b3:ef:4c:fa:
56:ac:40:21:fa:d2:54:54:0f:73:2b:44:55:5f:d2:
dc:9b:1d:f4:e8:ae:5f:e0:00:0f:e7:ef:6a:94:85:
d5:51:95:19:83:ef:5e:e3:be:f5:93:b9:29:1a:5f:
64:96:25:3d:f0:2e:97:4b:69:70:c0:40:2e:7d:11:
b1:37:32:58:c2:52:43:0b:58:e2:6a:cb:78:ce:2a:
3c:af:42:c2:70:14:4a:41:8b:77:2c:45:14:00:6a:
ae:66:e0:04:3b:63:7e:64:b7:1f:dc:6d:6a:1d:8a:
c8:07:1c:01:2e:e6:12:ca:ae:8f:00:05:c2:19:99:
6d:9e:15:08:68:94:c8:0c:0f:f7:e8:38:9a:80:c8:
9d:3c:f2:d1:b0:6f:77:ee:97:de:a9:dd:f5:6e:42:
ba:89:38:5e:83:64:00:12:d6:b7:d5:81:99:dd:86:
33:1b:1f:18:fe:a0:e7:05:0a:ee:4d:10:ca:37:da:
b2:0b:2b:39:b7:a8:f9:0b:8d:32:69:f3:1f:16:56:
b7:c0:76:99:d4:7f:89:e3:c7:d4:60:54:61:ca:db:
62:07:0c:54:33:a7:0c:47:48:89:65:1d:78:d9:dd:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:F2:BF:64:9A:1D:C4:43:67:B5:13:DD:D3:45:BB:3F:CC:64:01
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0f:ad:d8:79:0d:7a:fe:24:44:12:4b:12:16:d4:f8:67:36:
60:d6:26:63:71:6f:eb:61:33:b1:14:4d:62:3e:3f:c9:6d:41:
1a:b6:a5:7e:26:f1:7d:99:48:80:73:69:ac:a0:2f:03:36:e3:
29:a2:dd:92:01:43:9d:32:6e:25:52:d3:de:79:89:b1:96:fd:
d6:40:0f:83:3d:98:42:fd:40:2c:09:d4:b7:3f:9f:84:ca:3b:
5d:5f:dd:87:e3:b7:49:a0:eb:fb:ae:1c:1b:42:3b:50:a3:9d:
22:20:22:db:e6:4c:6d:b2:c1:09:ca:7e:a5:25:28:5b:db:ba:
5c:de:d2:67:4e:87:38:d0:76:77:03:18:fa:f7:51:eb:a2:b9:
05:30:d3:f5:6b:12:47:88:09:19:f6:03:a5:83:6e:71:38:c1:
3e:ff:6d:3b:2b:ef:df:4c:c5:03:75:8d:1c:79:32:34:27:a2:
5b:6e:3f:70:55:4f:6a:5d:18:97:fc:1d:b1:35:a2:7e:62:de:
0c:b0:5c:89:7b:07:46:74:e3:86:3c:9d:bc:97:47:08:51:28:
80:8b:01:26:aa:e7:6b:d4:77:20:e1:1b:2b:63:d6:be:04:6a:
be:2b:43:a4:6b:77:b5:c4:85:d0:18:ba:23:2a:93:1b:f1:9d:
50:21:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:29:33 2026 by rpki-client