Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
File: AS215727.roa (raw, json)
Hash identifier: il0YhtuuPkULJP6+fX49uZC0aKK6Row6hNGN7xDmh9s=
Subject key identifier: 19:A0:21:B0:AA:23:FB:ED:DC:B1:F8:99:3D:CB:73:F2:AC:87:6E:4A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 02D114BA36080383EAC2F4F50EC3F17B54BD83C2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
Signing time: Wed 15 Jul 2026 15:55:08 +0000
ROA not before: Wed 15 Jul 2026 15:50:08 +0000
ROA not after: Wed 14 Jul 2027 15:55:08 +0000
asID: 215727
IP address blocks: 162.141.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d1:14:ba:36:08:03:83:ea:c2:f4:f5:0e:c3:f1:7b:54:bd:83:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 15 15:50:08 2026 GMT
Not After : Jul 14 15:55:08 2027 GMT
Subject: CN=19A021B0AA23FBEDDCB1F8993DCB73F2AC876E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:ca:50:66:68:47:66:08:d3:11:87:81:7c:
a3:53:dd:07:9c:f3:33:50:4a:46:39:a6:7c:1c:4f:
d2:92:e8:a3:2b:98:3a:74:8a:cc:61:84:bd:74:e9:
e9:05:5d:39:63:35:37:93:ee:34:02:f1:6b:1a:87:
2c:bb:c8:b3:ad:75:ee:97:9c:9f:76:6c:e1:ba:9d:
a7:86:e2:31:0f:ea:77:47:e6:0a:20:52:fb:6c:e9:
34:e7:d9:c0:dc:c5:dc:d5:87:5a:a6:2c:ba:c4:c7:
f5:ef:1f:cf:8c:bd:b2:13:7c:c3:07:b7:4e:5d:ff:
88:be:45:54:19:43:40:3d:47:99:d8:6e:ea:9a:37:
7a:5f:13:48:a1:b7:7d:4a:b4:68:fa:f7:a1:20:51:
3f:cd:91:f5:8c:7c:d1:03:f9:ca:3f:e1:0f:27:0a:
62:0d:b4:20:2f:1b:59:21:98:65:14:ab:cc:d6:ea:
bd:ed:2d:ad:58:9d:38:5e:11:49:11:ab:dc:37:dc:
c3:d7:23:9c:69:d2:cd:df:d8:19:87:f7:0c:bd:d4:
ac:1f:64:41:2c:2f:5c:c7:c6:49:24:81:02:d2:d0:
f6:ee:05:06:65:f2:9e:66:43:ca:f7:66:d3:ea:cc:
37:8a:0e:72:00:8a:67:74:d9:45:1b:95:ce:0d:c8:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:21:B0:AA:23:FB:ED:DC:B1:F8:99:3D:CB:73:F2:AC:87:6E:4A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.115.0/24
Signature Algorithm: sha256WithRSAEncryption
54:09:08:70:8b:8f:df:1e:b9:5d:a2:41:6c:bf:79:75:8a:ad:
1e:55:46:30:dc:fa:f3:a3:7e:a6:91:4e:c4:ae:e2:d7:93:3c:
90:71:ea:41:ac:83:72:ea:2c:48:5f:15:7d:64:b7:cf:12:2b:
9a:0f:2a:76:7f:aa:15:10:4d:c1:5c:bd:cb:65:b1:23:67:70:
66:4f:4f:52:aa:9d:c2:bd:ae:a4:49:33:72:91:34:a4:48:da:
6a:0b:03:e6:86:30:3a:6f:d3:42:45:6c:9f:85:b5:6a:4a:b7:
78:a3:1e:25:0b:68:e9:87:a2:b0:1a:6a:e8:23:6b:81:4d:7b:
ae:f8:ac:2f:e2:9a:20:ef:e6:8f:91:4c:42:11:fe:93:51:60:
bb:a4:bc:88:1b:e6:89:ff:9c:3f:63:38:84:38:b8:65:25:e0:
17:69:13:bf:9d:7a:9e:59:98:32:91:48:7e:a2:f8:80:ab:43:
aa:8a:d7:2f:87:b7:29:0d:34:2c:8e:fb:9f:d0:f8:8e:45:2b:
e1:be:79:cd:b0:43:ea:9b:c4:c3:4a:96:cf:4f:84:7c:c5:7f:
12:ad:3e:8f:ea:79:2c:07:cf:cf:61:2d:07:90:61:a7:bd:1c:
80:ed:06:a8:01:df:12:00:24:19:26:ac:15:11:8d:be:68:7d:
f8:ae:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:35 2026 by rpki-client