Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: f7ZoM5kdGAvtscCVZs4UFo3EhDOWRyl+W8p47k/YMSM=
Subject key identifier: E7:D3:A3:C3:C5:98:2F:27:20:AC:5D:6F:7F:55:F8:F7:45:1E:72:A8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 743545E5CB297E20EB3BA692FA9EE202452D5F87
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
Signing time: Tue 29 Sep 2026 11:23:11 +0000
ROA not before: Tue 29 Sep 2026 11:18:11 +0000
ROA not after: Tue 28 Sep 2027 11:23:11 +0000
asID: 215224
IP address blocks: 82.24.122.0/24 maxlen: 24
82.39.175.0/24 maxlen: 24
82.40.25.0/24 maxlen: 24
84.75.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:35:45:e5:cb:29:7e:20:eb:3b:a6:92:fa:9e:e2:02:45:2d:5f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 29 11:18:11 2026 GMT
Not After : Sep 28 11:23:11 2027 GMT
Subject: CN=E7D3A3C3C5982F2720AC5D6F7F55F8F7451E72A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:5f:fb:f4:9a:e7:20:14:ad:a2:15:e8:7d:
ab:0b:e1:65:11:5d:1d:7e:7f:4d:8e:25:23:87:3c:
e0:6d:66:b9:4e:65:3d:04:2b:c9:56:c6:6d:be:c0:
72:3c:33:50:53:e3:df:a0:7b:73:dd:97:21:9e:07:
80:8c:65:75:fd:b5:2c:fb:a4:3e:b1:ed:bc:32:10:
4b:8f:0d:b2:f4:28:fd:91:45:b0:d9:1a:18:86:ea:
34:37:33:4d:77:dc:d3:a5:bb:4a:53:80:46:45:50:
96:a2:49:ff:ec:63:06:ab:f4:15:e3:fe:56:48:ba:
88:83:3f:1a:32:b4:67:a0:6d:46:e2:cb:ec:03:93:
f4:0a:3e:3b:2f:4c:96:f9:b8:48:e0:df:3e:2a:1c:
23:d4:b0:36:2a:ca:42:27:9e:f5:8c:4a:5e:65:fc:
6b:8b:b0:30:3d:27:79:50:90:f3:fd:2b:b2:fb:bc:
d0:35:bd:89:36:09:8a:f5:11:29:99:52:08:e4:4f:
5d:b8:47:1f:1b:e7:72:59:97:31:80:bd:51:6d:e8:
1f:b1:3c:d7:2a:32:57:0a:1f:71:22:8c:16:c9:62:
31:24:ab:fb:38:92:8f:d5:87:d8:30:a2:ad:f0:8a:
df:c6:03:69:5b:84:53:82:69:2f:f0:44:5d:52:8b:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:A3:C3:C5:98:2F:27:20:AC:5D:6F:7F:55:F8:F7:45:1E:72:A8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.122.0/24
82.39.175.0/24
82.40.25.0/24
84.75.207.0/24
Signature Algorithm: sha256WithRSAEncryption
81:15:69:81:8c:9f:52:44:c2:27:bb:6c:9f:d6:ec:9f:ed:30:
07:9a:6b:2c:a8:f4:9b:07:cf:0c:f8:43:f5:c6:20:41:98:2c:
17:dd:af:eb:41:75:23:75:32:59:53:f7:04:69:69:45:38:2b:
c9:97:6d:7c:db:2d:1e:ae:ca:74:78:f5:f2:7d:88:aa:61:d7:
7a:e1:1b:d7:fb:8e:e8:32:3f:9e:8c:ee:cb:96:64:c3:1a:b2:
49:95:3a:f1:05:23:83:63:51:87:cb:61:9e:8e:99:6b:b9:96:
2a:cd:f5:9a:3d:45:b6:a3:58:5c:13:00:4a:85:58:76:3b:4f:
0b:4f:61:01:c9:43:a2:60:44:07:fb:be:53:ff:27:7d:f6:aa:
f6:2f:28:33:66:41:28:e4:93:e1:94:ad:0e:8a:cd:34:ab:98:
50:dc:30:34:86:97:bd:16:2e:63:62:5c:8d:ae:34:d6:18:ed:
44:82:6a:67:72:08:b1:3d:ff:88:f1:f8:8d:1d:7d:ee:79:30:
ab:2b:0f:0a:dd:46:e7:44:42:c9:f0:db:e3:0b:cb:f6:b9:9a:
ed:e8:b8:e8:61:d2:e9:7f:e0:b1:37:97:06:5b:80:33:f8:ea:
f1:d8:f8:50:6b:11:88:19:78:ec:5e:6a:fe:3a:2a:a5:c9:8d:
2c:0a:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:48:12 2026 by rpki-client