Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: hYctLgBA5jeV+2qMW/tKnayh6had2Bj9dvg94Tel0wk=
Subject key identifier: C9:CD:8D:5E:A4:8C:F3:4C:50:CA:59:CC:77:2B:AF:E6:A4:69:15:3A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 47044F2F35C98B7D9AD5E959F26E20763D14C681
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS31715.roa
Signing time: Sun 05 Jul 2026 00:04:50 +0000
ROA not before: Sat 04 Jul 2026 23:59:50 +0000
ROA not after: Sun 04 Jul 2027 00:04:50 +0000
asID: 31715
IP address blocks: 143.20.83.0/24 maxlen: 24
143.20.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:04:4f:2f:35:c9:8b:7d:9a:d5:e9:59:f2:6e:20:76:3d:14:c6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 4 23:59:50 2026 GMT
Not After : Jul 4 00:04:50 2027 GMT
Subject: CN=C9CD8D5EA48CF34C50CA59CC772BAFE6A469153A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:0c:bb:ef:b3:ba:0b:03:28:6a:f8:72:47:
17:3d:07:06:22:f1:9e:7b:dd:0f:28:d7:69:93:4d:
a1:49:8c:5a:1a:6e:bf:8e:d5:9e:38:dd:8b:56:42:
4f:3e:76:4b:13:37:0f:b3:bc:93:31:4c:9e:59:f9:
d1:32:2c:d2:e6:2b:ca:b6:2b:cf:db:fb:3e:ec:54:
dd:f4:b5:dc:38:d8:38:72:df:7b:f2:d9:af:9b:20:
0a:96:9c:b5:12:9f:bf:e1:88:98:f1:cf:59:69:29:
8c:13:d2:e6:e1:b3:20:68:06:72:6a:cd:fd:73:40:
88:5d:5f:88:b7:9e:15:d6:cf:93:78:31:f4:bd:8f:
e0:c5:f1:cd:5d:6b:d0:7e:c3:62:e3:6b:df:a4:d4:
87:58:7f:14:1b:cf:c0:0e:14:a7:a1:b3:19:04:67:
cd:97:4f:0f:3a:0e:6a:5b:8f:7a:38:73:97:ed:58:
e6:6c:84:74:75:ca:55:f1:b9:16:a7:62:02:eb:83:
b6:28:24:e6:21:1b:48:89:36:06:8a:53:39:fe:25:
8c:c2:23:39:72:51:5a:98:4c:cd:b7:bf:9b:13:19:
8f:da:f8:62:c3:02:36:5d:81:36:32:6a:de:68:e0:
cc:55:31:19:b1:41:9b:c4:4c:2d:67:00:5a:63:b8:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:8D:5E:A4:8C:F3:4C:50:CA:59:CC:77:2B:AF:E6:A4:69:15:3A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.83.0/24
143.20.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:55:66:3b:f6:57:5a:47:0f:16:e5:40:76:f0:9e:66:12:ac:
26:d7:f9:22:28:17:7d:ca:7a:21:bd:cf:51:5f:69:b7:de:b8:
ef:e1:3e:79:0c:31:75:d8:94:ed:59:2b:0c:42:02:b7:f7:cb:
e7:e6:2b:0b:1c:da:f3:9b:00:b3:21:4c:40:4f:c7:65:8b:3b:
6a:8b:56:f8:83:53:19:7c:f4:fa:ad:67:57:e3:1d:07:e1:ec:
e0:1f:9c:19:4b:f3:c2:7d:f1:8b:e3:da:f0:3d:54:9a:6e:d1:
81:c5:54:09:de:b5:08:79:d7:63:db:4a:2b:7c:06:86:75:30:
97:c8:24:56:5d:1f:51:f8:8e:84:98:6c:a6:27:f6:6d:e8:00:
3b:2f:4a:20:0c:45:8e:33:5e:57:8a:74:a2:9d:91:de:81:fd:
9f:b5:92:ee:da:16:7f:7e:2d:8e:68:f0:01:57:7f:4d:eb:c9:
c6:f0:79:d6:b7:94:a1:d5:34:e8:01:57:52:e4:64:dc:b7:f7:
66:0c:88:06:d7:c5:d6:65:81:29:83:3f:c0:8f:96:ff:33:32:
da:43:80:e0:67:fb:56:01:81:b2:b6:1c:45:37:62:0c:56:33:
18:d3:9d:20:a5:75:3c:d9:a6:c0:33:a3:c1:88:8e:ee:63:51:
5b:71:fd:d1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIURwRPLzXJi32a1elZ8m4gdj0UxoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA3MDQyMzU5NTBaFw0yNzA3MDQwMDA0NTBaMDMxMTAvBgNV
BAMTKEM5Q0Q4RDVFQTQ4Q0YzNEM1MENBNTlDQzc3MkJBRkU2QTQ2OTE1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVgy777O6CwMoavhyRxc9BwYi
8Z573Q8o12mTTaFJjFoabr+O1Z443YtWQk8+dksTNw+zvJMxTJ5Z+dEyLNLmK8q2
K8/b+z7sVN30tdw42Dhy33vy2a+bIAqWnLUSn7/hiJjxz1lpKYwT0ubhsyBoBnJq
zf1zQIhdX4i3nhXWz5N4MfS9j+DF8c1da9B+w2Lja9+k1IdYfxQbz8AOFKehsxkE
Z82XTw86Dmpbj3o4c5ftWOZshHR1ylXxuRanYgLrg7YoJOYhG0iJNgaKUzn+JYzC
IzlyUVqYTM23v5sTGY/a+GLDAjZdgTYyat5o4MxVMRmxQZvETC1nAFpjuNyXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUyc2NXqSM80xQylnMdyuv5qRpFTowHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzE3MTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACPFFMD
BACPFF4wDQYJKoZIhvcNAQELBQADggEBAJpVZjv2V1pHDxblQHbwnmYSrCbX+SIo
F33KeiG9z1FfabfeuO/hPnkMMXXYlO1ZKwxCArf3y+fmKwsc2vObALMhTEBPx2WL
O2qLVviDUxl89PqtZ1fjHQfh7OAfnBlL88J98Yvj2vA9VJpu0YHFVAnetQh512Pb
Sit8BoZ1MJfIJFZdH1H4joSYbKYn9m3oADsvSiAMRY4zXleKdKKdkd6B/Z+1ku7a
Fn9+LY5o8AFXf03rycbweda3lKHVNOgBV1LkZNy392YMiAbXxdZlgSmDP8CPlv8z
MtpDgOBn+1YBgbK2HEU3YgxWMxjTnSCldTzZpsAzo8GIju5jUVtx/dE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:00:25 2026 by rpki-client