Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48215.roa
File: AS48215.roa (raw, json)
Hash identifier: tq2GbRD9Z4Isq1OU0a05QEGGH4Xm7qCEmrIuxrGbYTQ=
Subject key identifier: 2F:2E:F3:7C:FE:FD:60:88:B3:3F:1D:96:CC:E8:88:EA:DC:D6:6B:98
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 42F0D67497A8D2B1C5DA5AB27F18227070BA4EDD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48215.roa
Signing time: Tue 01 Jul 2025 17:56:08 +0000
ROA not before: Tue 01 Jul 2025 17:51:08 +0000
ROA not after: Tue 30 Jun 2026 17:56:08 +0000
asID: 48215
IP address blocks: 2a13:9500:a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f0:d6:74:97:a8:d2:b1:c5:da:5a:b2:7f:18:22:70:70:ba:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 17:51:08 2025 GMT
Not After : Jun 30 17:56:08 2026 GMT
Subject: CN=2F2EF37CFEFD6088B33F1D96CCE888EADCD66B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:fb:3e:51:14:22:d6:6d:4b:e1:b6:67:63:
fd:f2:d0:3f:ed:53:61:64:d5:b3:b5:96:99:f5:88:
9e:91:01:75:9e:aa:2e:41:c6:f6:48:2b:1a:4c:f8:
f3:51:f5:a7:6d:ee:97:ca:4c:2a:75:fe:d3:41:8a:
04:9c:37:d8:c6:44:46:61:93:0c:ad:eb:ba:dd:94:
03:15:f4:bc:4a:80:71:a4:89:22:be:e2:3d:53:94:
6c:a1:7d:30:61:8c:52:25:cc:e4:e2:8a:be:a3:83:
72:57:79:96:ea:04:59:26:2f:dc:1d:ab:0a:20:7b:
88:f9:ee:f1:1a:7e:fc:d3:5e:86:76:f5:6a:6d:7a:
ff:f7:ba:5e:fa:c1:23:2f:99:84:5c:68:79:8a:3b:
d8:0a:6e:08:45:2c:71:b7:a8:df:f6:a2:09:aa:f8:
df:ba:64:7a:e1:03:63:1c:ab:79:fd:a7:a7:bd:03:
0a:04:43:3f:46:fd:95:26:23:8c:c8:1c:b2:fd:d4:
8c:69:ab:57:a3:a1:88:21:47:7b:f3:8f:62:92:37:
fb:dc:91:7d:ae:6c:90:62:fb:68:79:3b:0e:41:f0:
2e:24:61:2e:a5:57:7c:da:29:a9:27:73:c5:c2:01:
bf:23:d2:cc:15:84:71:da:34:29:4e:98:c9:79:6b:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:F3:7C:FE:FD:60:88:B3:3F:1D:96:CC:E8:88:EA:DC:D6:6B:98
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a1::/48
Signature Algorithm: sha256WithRSAEncryption
70:77:3b:8f:b9:12:c2:80:23:dc:39:4b:cf:bd:34:0f:ba:41:
5b:29:80:65:70:c6:73:47:ea:2b:b0:c9:cc:ae:70:3a:99:86:
5c:74:4d:e6:43:58:7d:ae:b2:72:4f:f4:7b:76:40:5c:fc:7a:
a5:b7:cb:ed:d0:fb:40:ed:5d:e2:be:d8:94:9f:8b:2d:47:9a:
0c:cb:1f:55:a8:d6:aa:6b:ac:ca:74:0e:d2:8c:ce:ee:9e:d2:
f4:ae:1f:37:4c:2f:69:5c:df:72:05:c4:de:a4:70:d4:43:ba:
88:84:44:28:e9:9f:f2:0f:80:ce:a7:5f:44:22:f3:6f:17:c8:
f4:19:52:03:6d:68:37:fd:25:7a:c0:16:84:4b:bf:68:51:99:
40:d7:cd:92:d8:3d:f5:33:9a:71:5c:ab:21:f6:7a:a9:6e:fb:
09:23:10:eb:75:dd:47:d9:86:de:a5:db:e2:ee:5f:55:05:0c:
89:f5:d3:11:93:ff:7c:8c:44:60:47:fc:5b:46:de:2f:54:98:
65:e8:2b:c2:0d:d9:81:09:43:28:1b:1f:02:4d:f8:b4:17:2d:
c0:7d:17:c9:15:43:3b:87:fd:4a:cf:6d:38:7e:0b:a7:8f:53:
4a:1e:0a:87:42:68:5d:cc:fd:9d:e4:50:e7:68:15:da:6b:26:
36:6c:dc:41
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUQvDWdJeo0rHF2lqyfxgicHC6Tt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA3MDExNzUxMDhaFw0yNjA2MzAxNzU2MDhaMDMxMTAvBgNV
BAMTKDJGMkVGMzdDRkVGRDYwODhCMzNGMUQ5NkNDRTg4OEVBRENENjZCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopfs+URQi1m1L4bZnY/3y0D/t
U2Fk1bO1lpn1iJ6RAXWeqi5BxvZIKxpM+PNR9adt7pfKTCp1/tNBigScN9jGREZh
kwyt67rdlAMV9LxKgHGkiSK+4j1TlGyhfTBhjFIlzOTiir6jg3JXeZbqBFkmL9wd
qwoge4j57vEafvzTXoZ29Wptev/3ul76wSMvmYRcaHmKO9gKbghFLHG3qN/2ogmq
+N+6ZHrhA2Mcq3n9p6e9AwoEQz9G/ZUmI4zIHLL91Ixpq1ejoYghR3vzj2KSN/vc
kX2ubJBi+2h5Ow5B8C4kYS6lV3zaKaknc8XCAb8j0swVhHHaNClOmMl5a/0hAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQULy7zfP79YIizPx2WzOiI6tzWa5gwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDgyMTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA
AKEwDQYJKoZIhvcNAQELBQADggEBAHB3O4+5EsKAI9w5S8+9NA+6QVspgGVwxnNH
6iuwycyucDqZhlx0TeZDWH2usnJP9Ht2QFz8eqW3y+3Q+0DtXeK+2JSfiy1HmgzL
H1Wo1qprrMp0DtKMzu6e0vSuHzdML2lc33IFxN6kcNRDuoiERCjpn/IPgM6nX0Qi
828XyPQZUgNtaDf9JXrAFoRLv2hRmUDXzZLYPfUzmnFcqyH2eqlu+wkjEOt13UfZ
ht6l2+LuX1UFDIn10xGT/3yMRGBH/FtG3i9UmGXoK8IN2YEJQygbHwJN+LQXLcB9
F8kVQzuH/UrPbTh+C6ePU0oeCodCaF3M/Z3kUOdoFdprJjZs3EE=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:50 2025 by rpki-client