Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: a+dlvg7GWO6pBSHl8U7fjQbmU3MpQ95DCu9v/z8xceU=
Subject key identifier: A4:0F:50:3A:D2:D1:DC:AB:13:03:87:40:10:39:90:5B:DD:D2:67:C4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 164BB03E5D53284EF874D4DCBC101EA554614D2F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31898.roa
Signing time: Thu 22 Oct 2026 02:04:41 +0000
ROA not before: Thu 22 Oct 2026 01:59:41 +0000
ROA not after: Thu 21 Oct 2027 02:04:41 +0000
asID: 31898
IP address blocks: 91.124.21.0/24 maxlen: 24
178.93.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 15:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4b:b0:3e:5d:53:28:4e:f8:74:d4:dc:bc:10:1e:a5:54:61:4d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 22 01:59:41 2026 GMT
Not After : Oct 21 02:04:41 2027 GMT
Subject: CN=A40F503AD2D1DCAB130387401039905BDDD267C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:27:00:50:37:b7:68:11:ad:1d:d1:69:1e:
53:de:44:a9:5f:e2:ac:bf:95:0d:75:5e:9a:c2:74:
83:7e:d1:81:26:cb:5b:70:39:2c:25:4c:09:c7:57:
45:38:0c:f2:65:28:0e:e3:b2:51:fd:f9:45:8b:b0:
89:db:2a:30:fb:9b:d3:73:2e:b3:84:41:55:31:41:
95:5a:05:18:3e:0a:32:eb:d5:d0:c9:c6:0f:c4:6e:
a9:15:aa:6f:e5:fd:60:97:46:66:a2:27:4f:dd:fe:
7e:7f:10:6e:cf:9b:66:ed:77:7e:43:34:97:70:47:
df:b3:fd:7c:05:72:2e:c8:0b:fe:77:1e:c3:9e:40:
c8:af:5b:7a:61:bc:54:8d:da:a1:11:5d:76:d7:38:
a7:20:f8:ad:5e:36:bd:e2:30:a1:f1:0c:76:0b:01:
cd:53:2b:4a:16:cc:51:b6:d5:9a:80:7f:68:f4:df:
da:42:04:40:8f:cb:df:5b:54:44:a6:5c:5e:88:a3:
1c:cb:d9:78:00:02:f4:b9:8c:1c:9e:9a:6c:6c:18:
8c:86:80:98:66:a9:b4:94:03:86:9e:f5:ac:41:4b:
c8:16:4d:e6:e8:a0:a3:3a:00:04:b1:ad:37:bb:08:
17:dd:c1:e4:68:5b:6a:b4:1a:8f:2c:0f:30:6e:cc:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:50:3A:D2:D1:DC:AB:13:03:87:40:10:39:90:5B:DD:D2:67:C4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.21.0/24
178.93.108.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a6:8b:9d:45:ac:31:70:31:b7:17:9e:cb:5c:50:70:b1:d0:
83:92:f9:eb:cf:8f:6c:79:d8:41:68:ff:39:f2:a8:45:2e:6c:
51:7d:90:a5:84:62:88:b3:2a:63:11:36:a1:fa:7c:fb:50:23:
25:61:2b:29:76:da:f8:e2:99:2d:8b:ed:1c:b0:91:26:61:bb:
1c:c5:7b:1e:6a:76:08:a5:e2:e0:eb:25:b0:7a:04:ed:b2:09:
97:dd:30:82:89:9a:5e:cc:de:90:ab:0e:3c:7c:7c:a3:b5:0e:
f2:4e:c2:40:36:9e:96:ab:21:eb:88:c0:2f:b5:a4:fa:a7:8f:
f9:65:15:d5:62:e9:cd:f5:3d:50:06:d2:21:9c:18:70:67:83:
f7:20:d3:fd:76:85:3b:a1:4d:89:9d:19:f4:07:99:1c:8a:8d:
33:6e:a2:3a:51:c1:d6:77:52:4e:67:d1:83:8f:e4:7a:70:4c:
ab:d9:87:5d:26:1d:19:25:9e:f9:c6:7d:41:26:21:d1:97:c1:
5f:a3:f6:2b:3c:ad:cc:47:0f:7d:5c:a3:47:35:84:06:17:6d:
76:25:53:8b:c1:f2:ac:14:cb:d8:99:51:2a:21:1a:20:58:91:
13:1b:fe:85:94:c0:e3:be:e6:17:3b:5b:47:0a:c1:f8:af:1b:
5f:c9:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:44:33 2026 by rpki-client