Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: I+UvJ2hfx6OiN8lhsR4reW7Mq91ppLCT3GQb9hNpVXw=
Subject key identifier: A7:86:BF:1C:44:0A:C5:B5:6B:D9:F5:BF:10:14:99:D6:30:D6:49:41
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 761AB860C8CF4A481BCB3D3261FFC7C266070EF1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
Signing time: Thu 08 Oct 2026 00:05:40 +0000
ROA not before: Thu 08 Oct 2026 00:00:40 +0000
ROA not after: Thu 07 Oct 2027 00:05:40 +0000
asID: 215607
IP address blocks: 84.75.76.0/24 maxlen: 24
178.83.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1a:b8:60:c8:cf:4a:48:1b:cb:3d:32:61:ff:c7:c2:66:07:0e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 8 00:00:40 2026 GMT
Not After : Oct 7 00:05:40 2027 GMT
Subject: CN=A786BF1C440AC5B56BD9F5BF101499D630D64941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:92:fe:81:16:89:99:00:3e:0e:d8:3f:10:
50:28:46:a7:30:9f:ca:f1:4f:3f:6b:cd:d7:46:a7:
ae:81:b6:07:f9:53:00:12:ea:15:bb:04:4c:0a:8d:
90:45:9c:b3:c6:93:c0:4c:81:a2:d7:15:2e:22:ca:
7e:a2:78:1a:7d:15:93:89:a2:e5:54:a4:01:6c:4a:
c8:8c:3b:84:ce:fb:2d:16:1d:70:ad:f1:a6:27:83:
fb:b3:65:68:06:48:81:1f:84:c9:e5:96:61:87:69:
44:2e:09:9f:3e:2a:bb:23:9b:08:7b:4c:d1:2e:93:
68:49:6a:ab:d3:c8:fa:c4:87:69:f8:d6:04:25:3b:
4b:d8:46:98:a0:59:d3:6a:c4:76:d9:d2:bb:9d:72:
62:e2:c5:34:99:52:c1:39:56:b9:d0:37:a7:93:ef:
ce:a6:6e:ef:16:95:90:30:63:11:94:ef:81:2f:25:
3d:18:7e:ae:8a:1d:88:3f:6c:40:39:fe:25:dd:4b:
11:e2:69:ee:07:25:ff:8e:a7:cb:c3:42:58:84:ef:
e0:6e:24:d2:a6:2b:cb:83:c6:46:69:de:77:6d:5f:
4d:ec:28:c1:a5:8b:a3:1d:58:b9:34:9b:4e:68:a0:
c9:4c:e9:3f:da:76:53:6e:c3:df:40:2b:63:04:07:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:86:BF:1C:44:0A:C5:B5:6B:D9:F5:BF:10:14:99:D6:30:D6:49:41
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.76.0/24
178.83.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:08:c6:4a:91:69:0d:be:0a:7e:38:22:15:d7:4c:73:15:03:
7d:74:0b:94:75:c8:26:7c:83:5b:ed:ea:d5:87:01:7d:db:42:
c7:bc:cf:64:d3:00:2b:a9:35:2d:0b:94:8d:44:2e:21:e1:37:
a5:16:63:fd:9e:39:29:96:d0:b5:61:17:1c:ab:7b:72:7b:56:
b5:d7:72:f9:36:6b:29:f1:91:54:fc:d7:8d:23:0a:2c:8d:b9:
53:d9:24:8f:16:5e:5b:ad:3a:03:ff:b1:4c:1c:27:f3:f7:b6:
9d:2d:63:2e:43:81:a4:7f:50:a4:3e:d4:75:15:e0:e3:e5:b5:
46:12:71:e0:1b:46:ed:81:8a:45:96:b6:b8:a1:b4:cf:6c:16:
d1:72:0c:d9:af:f9:33:e9:43:41:4f:46:0a:7a:e1:cf:4a:10:
b7:e2:63:04:8a:26:62:c8:d3:a8:08:0f:66:c0:4e:39:27:66:
62:79:a4:8e:d9:98:07:23:50:8f:b8:5b:41:33:58:97:f1:b7:
d7:5a:26:b3:a7:e7:40:2d:fa:6c:14:e6:e5:ec:5a:36:1c:fb:
d2:2c:79:ee:35:92:ff:54:af:cb:9d:9a:a6:4d:05:90:ed:c3:
a0:3d:59:ab:91:89:99:01:f3:8b:4c:44:d1:32:f5:a8:2b:84:
8b:cf:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:15:59 2026 by rpki-client