Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
File: AS215370.roa (raw, json)
Hash identifier: tGDfdFls4OdYruZT+V0omZMMvG/YXDEGysiufjkY7IA=
Subject key identifier: 26:7A:2A:B7:7C:3E:6E:E8:9C:2E:80:60:84:5A:F0:73:95:2B:78:97
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2F7181FD875B686B42618D54BDE2A0CD1D7C3ACD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
Signing time: Fri 25 Sep 2026 13:25:46 +0000
ROA not before: Fri 25 Sep 2026 13:20:46 +0000
ROA not after: Fri 24 Sep 2027 13:25:46 +0000
asID: 215370
IP address blocks: 82.39.186.0/24 maxlen: 24
82.47.140.0/24 maxlen: 24
2a13:9500:68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:81:fd:87:5b:68:6b:42:61:8d:54:bd:e2:a0:cd:1d:7c:3a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 13:20:46 2026 GMT
Not After : Sep 24 13:25:46 2027 GMT
Subject: CN=267A2AB77C3E6EE89C2E8060845AF073952B7897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:b3:95:ba:59:a7:b2:67:2f:69:1a:76:e4:
e7:37:4b:f4:b9:4e:f8:0d:6d:74:11:87:fc:7f:89:
ac:dc:8e:b4:46:d3:8d:d9:70:69:2e:dc:b6:d6:1c:
3a:76:ca:c9:1a:85:de:10:82:40:93:c2:3b:b7:28:
f6:7b:ff:b5:a1:9a:8d:f0:6a:e1:f4:7f:2c:55:e4:
94:8b:71:9b:ef:ba:92:0a:92:23:61:34:26:61:4d:
4b:68:e2:fb:d6:84:c4:27:ec:d8:14:9e:b9:ef:eb:
54:ab:51:cb:44:4e:a2:20:4c:79:0b:17:35:a1:a3:
49:8d:97:84:46:0f:53:3e:d6:34:84:fc:41:2a:e0:
3d:5b:c8:aa:4b:48:9c:64:18:7c:e9:29:33:9a:a9:
09:d7:4e:5c:8b:3b:f8:17:d4:e4:02:0e:1a:9a:8a:
52:f7:18:29:f0:02:de:a7:83:a1:85:ac:22:ee:5f:
62:40:16:43:2a:d4:b6:0e:7b:77:9c:08:c1:18:39:
6d:75:2d:40:55:5c:0d:2c:fc:e7:14:d9:e6:6d:5e:
da:85:fa:5a:fa:aa:8e:b3:12:74:d2:b7:d7:b6:86:
58:9b:6e:d7:5c:24:63:ad:7c:b3:08:de:99:2b:f8:
6c:df:c2:c8:e4:35:a8:1c:99:80:02:ce:f0:ff:90:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:2A:B7:7C:3E:6E:E8:9C:2E:80:60:84:5A:F0:73:95:2B:78:97
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.186.0/24
82.47.140.0/24
IPv6:
2a13:9500:68::/48
Signature Algorithm: sha256WithRSAEncryption
04:20:0e:5f:88:9f:f9:3c:ba:dd:c3:0f:40:97:d0:d8:83:54:
77:87:2e:a9:f6:07:25:61:37:7a:4d:d5:fa:f1:78:59:3b:1e:
17:6d:cc:49:5b:96:2a:d8:d8:4e:a6:4f:04:e0:5d:05:71:7a:
19:55:22:f5:68:9c:9d:a4:40:eb:b2:af:c6:5a:bc:98:23:6c:
3f:5c:48:09:17:b1:2f:11:ac:5b:df:03:5f:a7:0e:cb:7d:4d:
30:b0:0c:d0:32:13:de:5b:a5:00:96:9b:eb:6c:78:e1:d5:16:
1f:52:da:4d:9f:90:91:b8:74:e8:0e:fd:f0:a1:ef:d4:7d:f4:
3b:b7:c1:b2:0f:3d:a1:59:0b:df:49:43:95:da:91:5c:92:d0:
31:f2:27:0c:9f:23:92:0b:4f:ca:c5:22:7a:14:b4:c8:83:a4:
26:26:40:f3:e2:5f:0a:cc:01:84:cb:14:64:1a:1b:fc:23:b1:
98:57:23:c3:e7:43:16:2b:55:66:4b:9e:58:ab:4a:38:34:2a:
19:53:9d:a4:93:3f:9e:06:e6:34:98:41:08:72:ac:1d:1d:90:
da:29:7b:e6:ab:42:ab:a3:df:e9:2f:ed:82:74:2f:c4:7f:99:
a9:11:7b:c2:d4:cd:38:7d:29:40:29:0b:29:d8:5f:3c:42:f4:
b5:cc:da:3e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUL3GB/YdbaGtCYY1UveKgzR18Os0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjUxMzIwNDZaFw0yNzA5MjQxMzI1NDZaMDMxMTAvBgNV
BAMTKDI2N0EyQUI3N0MzRTZFRTg5QzJFODA2MDg0NUFGMDczOTUyQjc4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR57OVulmnsmcvaRp25Oc3S/S5
TvgNbXQRh/x/iazcjrRG043ZcGku3LbWHDp2yskahd4QgkCTwju3KPZ7/7Whmo3w
auH0fyxV5JSLcZvvupIKkiNhNCZhTUto4vvWhMQn7NgUnrnv61SrUctETqIgTHkL
FzWho0mNl4RGD1M+1jSE/EEq4D1byKpLSJxkGHzpKTOaqQnXTlyLO/gX1OQCDhqa
ilL3GCnwAt6ng6GFrCLuX2JAFkMq1LYOe3ecCMEYOW11LUBVXA0s/OcU2eZtXtqF
+lr6qo6zEnTSt9e2hlibbtdcJGOtfLMI3pkr+GzfwsjkNagcmYACzvD/kKQ/AgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUJnoqt3w+buicLoBghFrwc5UreJcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1MzcwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAUie6
AwQAUi+MMA8EAgACMAkDBwAqE5UAAGgwDQYJKoZIhvcNAQELBQADggEBAAQgDl+I
n/k8ut3DD0CX0NiDVHeHLqn2ByVhN3pN1frxeFk7HhdtzElblirY2E6mTwTgXQVx
ehlVIvVonJ2kQOuyr8ZavJgjbD9cSAkXsS8RrFvfA1+nDst9TTCwDNAyE95bpQCW
m+tseOHVFh9S2k2fkJG4dOgO/fCh79R99Du3wbIPPaFZC99JQ5XakVyS0DHyJwyf
I5ILT8rFInoUtMiDpCYmQPPiXwrMAYTLFGQaG/wjsZhXI8PnQxYrVWZLnlirSjg0
KhlTnaSTP54G5jSYQQhyrB0dkNope+arQquj3+kv7YJ0L8R/makRe8LUzTh9KUAp
CynYXzxC9LXM2j4=
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:39:12 2026 by rpki-client