Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: XotXDOfsTwGJWZZwoUbha2spNrSXipBhFu3Dd64Wudg=
Subject key identifier: 32:7A:C3:05:D6:2C:C7:FC:AE:1B:23:BB:DA:51:D7:75:57:FA:56:C0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 20228DB1EDFE8C87C662C32D188A7D9E38B108EE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS31715.roa
Signing time: Mon 03 Nov 2025 09:53:50 +0000
ROA not before: Mon 03 Nov 2025 09:48:50 +0000
ROA not after: Mon 02 Nov 2026 09:53:50 +0000
asID: 31715
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:22:8d:b1:ed:fe:8c:87:c6:62:c3:2d:18:8a:7d:9e:38:b1:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 3 09:48:50 2025 GMT
Not After : Nov 2 09:53:50 2026 GMT
Subject: CN=327AC305D62CC7FCAE1B23BBDA51D77557FA56C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:12:1b:7f:ad:d6:9c:2d:41:d7:f5:b0:ea:
0b:cb:c5:8c:8b:ab:ea:54:d9:65:20:0e:59:b8:94:
b7:4d:33:59:6b:6b:b5:83:69:5a:a4:cb:2e:13:91:
9e:2d:7d:2a:58:b1:9a:fc:a4:13:0a:6e:c3:85:d0:
6b:4f:fc:e8:34:8f:9e:79:d2:ed:b9:99:cf:73:a3:
17:15:1b:4f:f9:0f:f4:b6:ce:15:73:e7:35:c0:28:
53:01:ea:d9:26:10:de:ad:76:30:1e:07:c6:6b:f8:
42:23:1c:3e:ec:b5:57:84:bb:0c:f4:04:d3:16:10:
d2:6a:3d:16:ce:87:16:03:fc:95:2c:eb:aa:61:80:
42:de:87:0d:32:3f:4a:ed:88:cf:05:8e:79:d1:aa:
16:2d:9a:3a:0f:ad:76:d3:df:0c:92:f8:44:bb:ac:
ed:09:36:e8:7c:b6:d5:44:b2:18:46:c3:fb:00:96:
59:f9:8a:a6:af:02:7f:89:40:f6:a8:93:ae:18:ad:
5d:84:42:f7:01:9f:93:75:17:a3:6a:ad:14:53:67:
2c:8f:5f:37:17:92:5e:18:eb:58:f1:58:66:d4:3f:
44:3e:d6:8d:d8:f0:a7:d9:20:19:30:88:b8:bc:41:
d6:f5:b1:1c:09:d9:e1:3d:bc:e4:d7:bc:4b:95:e6:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:C3:05:D6:2C:C7:FC:AE:1B:23:BB:DA:51:D7:75:57:FA:56:C0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:61:8f:02:1c:f9:a8:b4:97:42:98:e2:96:46:bc:63:9a:3e:
6c:97:44:10:59:65:a1:23:39:bd:95:0f:06:f2:92:fd:26:89:
7c:00:64:60:13:85:9c:17:55:3c:07:70:f9:82:12:65:af:a2:
79:4b:5b:d7:7d:1f:31:b0:84:c8:0b:49:48:dc:28:ca:3d:b1:
32:51:0f:f3:4d:45:0b:5c:25:a3:2b:b7:ad:23:3d:11:7d:e5:
38:ac:e2:eb:26:75:8f:c7:e5:8e:06:de:2a:20:76:fc:f0:8b:
ef:e0:4d:ef:e6:50:1a:da:18:2c:ea:68:ff:fa:56:e5:e7:ac:
a7:52:01:7d:fb:c1:9d:29:2a:67:c1:d4:9a:c8:03:94:b2:9d:
bf:07:1d:69:08:02:f6:70:83:81:1c:10:69:17:3b:bb:6a:d4:
12:8e:c0:d4:94:5e:29:61:db:c0:70:0b:56:e4:cc:e9:62:57:
70:d7:28:d5:92:25:9a:29:52:39:52:9a:6a:86:36:69:f9:42:
c3:ef:0f:61:fe:4c:90:51:81:34:eb:7d:e8:43:41:9b:a0:4b:
b1:3b:ce:a9:2b:83:b0:14:d8:09:39:e5:8b:62:27:42:14:31:
7c:79:37:64:8b:0f:ca:8d:ff:8b:98:6f:e4:6e:3e:83:29:6a:
28:bc:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:26:42 2025 by rpki-client