Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: PzldV7wL8YNcsOvAPOVusfHELdiq4Maddzj2GC9vROQ=
Subject key identifier: 56:4C:75:20:88:31:F7:38:D3:12:02:F0:B7:F6:B1:65:AC:A2:8E:90
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7442F5A9C9FE4F1E6107EC9877C876900EE5D58D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215287.roa
Signing time: Sat 18 Jul 2026 00:00:43 +0000
ROA not before: Fri 17 Jul 2026 23:55:43 +0000
ROA not after: Sat 17 Jul 2027 00:00:43 +0000
asID: 215287
IP address blocks: 96.62.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:42:f5:a9:c9:fe:4f:1e:61:07:ec:98:77:c8:76:90:0e:e5:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 23:55:43 2026 GMT
Not After : Jul 17 00:00:43 2027 GMT
Subject: CN=564C75208831F738D31202F0B7F6B165ACA28E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:d5:c2:d4:89:d0:0d:9e:80:c8:c5:ee:e8:
4a:3b:94:39:d9:e1:1c:65:55:4f:62:a7:d0:22:68:
57:f1:84:37:df:33:c0:c9:bb:49:a5:17:b4:b1:79:
1e:79:20:91:73:fd:1e:75:c6:c2:50:84:89:f1:a7:
fa:ac:1d:d2:67:58:1b:4b:97:73:47:c4:7c:e6:ee:
81:f9:ce:11:13:cb:82:ac:d6:d0:3f:f6:6a:7f:0e:
5a:c9:0d:c3:62:3f:3d:e8:86:9f:07:ed:31:e8:e8:
da:3b:a8:98:48:71:ff:a1:15:c5:22:40:ba:91:8a:
3b:18:b8:c4:36:c9:9d:b5:78:ab:53:a6:5d:2f:f3:
79:2e:1b:e5:b6:88:0f:73:7b:67:31:10:53:19:53:
89:9d:43:c9:b6:1a:5c:c8:9d:99:3f:e2:cb:9f:dc:
e6:1e:4f:2a:ea:be:f2:e9:fe:78:aa:af:0c:a3:a5:
63:a5:40:1e:84:5e:3c:4a:64:90:fd:bd:ff:fd:9e:
bf:cf:b0:bb:4c:5e:1e:e0:3a:5b:ad:ac:3c:8d:cd:
4b:78:2c:d2:5f:0f:96:79:c3:72:f8:c4:3e:c5:a4:
ee:16:30:e6:6f:b6:77:a8:f7:d2:49:b2:0f:16:5a:
b1:fb:86:11:ee:a6:28:59:ce:c1:97:35:97:d6:eb:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:75:20:88:31:F7:38:D3:12:02:F0:B7:F6:B1:65:AC:A2:8E:90
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c3:b8:36:99:be:24:2c:e3:96:a0:c8:6a:9c:9a:b9:bb:07:
2b:a7:b7:bc:65:34:45:6b:12:15:07:39:13:7b:34:bf:e4:09:
6b:31:d4:a2:36:50:b0:a0:37:11:a7:0e:76:ca:fa:e6:fd:45:
53:46:56:eb:dd:56:c6:cd:a1:9c:3a:80:03:c9:2f:df:18:4a:
63:12:71:84:bb:9f:71:e1:c4:86:ed:00:0e:67:07:84:c6:6f:
29:56:99:da:f7:e9:1c:ef:5a:11:0e:3c:1a:36:da:47:6a:5b:
8d:45:17:c0:b3:a6:98:41:66:93:cd:b4:75:9d:a9:4e:d5:35:
2f:b1:8a:6c:16:c2:3f:fe:93:a0:e5:85:ab:dc:bb:5c:81:94:
36:d8:77:5d:39:b5:ae:17:63:0b:45:d1:37:bb:3d:75:6f:28:
0a:f1:53:e3:4f:76:d4:73:23:2f:9b:9a:98:0f:db:d9:08:6c:
4f:a8:91:09:be:46:b2:da:9b:c9:ce:d8:17:4e:8b:d1:b5:9f:
05:d0:f5:7a:a5:c6:03:1f:5f:eb:b0:85:8b:53:11:59:18:a3:
20:fc:be:11:b9:40:17:07:19:61:fe:1f:91:a0:09:dc:49:37:
2f:4d:6e:3d:e4:ac:73:e2:b2:46:ae:cb:52:66:53:a0:72:4c:
ac:3e:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:35:41 2026 by rpki-client