Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: Wa0ANte45d0gB2Kk2zc36UdusAvAVt19G5SG0jml56s=
Subject key identifier: 21:C9:10:F1:64:2B:28:81:73:92:B8:C4:83:32:5E:3E:9E:D8:8D:60
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4242B0F920415404A9C5963B62A952F7C77F2ACA
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215607.roa
Signing time: Sun 25 Oct 2026 16:09:12 +0000
ROA not before: Sun 25 Oct 2026 16:04:12 +0000
ROA not after: Sun 24 Oct 2027 16:09:12 +0000
asID: 215607
IP address blocks: 90.96.91.0/24 maxlen: 24
90.96.108.0/24 maxlen: 24
90.96.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:42:b0:f9:20:41:54:04:a9:c5:96:3b:62:a9:52:f7:c7:7f:2a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 25 16:04:12 2026 GMT
Not After : Oct 24 16:09:12 2027 GMT
Subject: CN=21C910F1642B28817392B8C483325E3E9ED88D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:10:1e:d3:9c:ac:96:e8:20:18:12:b3:6b:
7c:d6:cb:f2:26:1c:14:59:1d:bd:27:a5:07:9b:25:
22:a8:2d:5d:bd:e6:03:08:03:04:bf:9d:77:e6:31:
64:4f:ad:a9:f9:34:45:81:d8:ba:61:ba:55:d2:cc:
61:36:cd:a2:24:39:00:17:3e:58:3b:28:6b:50:e3:
aa:6c:5c:62:d0:3b:67:55:72:c7:29:8d:06:65:46:
79:47:a9:fe:8a:28:4c:1d:36:eb:f0:11:06:1d:31:
28:a5:cf:5a:00:93:03:b6:fa:eb:2d:6e:06:ba:85:
70:7a:8a:97:c5:02:bd:4b:4f:e8:fd:6f:3c:e7:75:
57:5e:fe:30:7c:3a:b7:74:73:60:ce:4c:0c:f7:a1:
17:e3:9a:11:1f:19:b9:26:4f:0e:39:a0:33:28:76:
83:6a:09:a3:1b:14:e1:f1:7f:88:8c:f5:1f:ce:84:
4f:4e:da:27:5e:f0:e6:b3:33:80:50:2d:0d:af:56:
e6:5e:99:99:86:4c:11:c3:14:67:68:fe:03:15:bb:
46:d2:b3:6f:42:f7:7d:ee:cb:d0:56:a1:e5:da:cf:
e0:8d:23:82:a8:55:6f:c4:70:52:04:35:a7:25:e6:
29:95:3c:1b:7a:97:3e:c2:a8:59:c5:77:c5:34:3f:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:10:F1:64:2B:28:81:73:92:B8:C4:83:32:5E:3E:9E:D8:8D:60
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.91.0/24
90.96.108.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:ee:5f:01:b4:8e:40:db:33:4d:ba:a7:e4:d9:3b:ee:6c:76:
ee:40:de:c6:29:9d:6e:2b:e3:9b:9a:ff:d8:31:e3:e4:99:80:
44:9a:eb:a6:62:e2:ad:e1:e8:a0:c1:3c:fe:b7:c7:54:e8:ec:
e0:a1:e5:4e:e7:f0:00:73:0b:84:ff:af:a1:ff:71:bf:77:c3:
4b:71:18:15:05:bd:88:ba:14:42:9f:d2:22:98:a3:58:11:5f:
56:c6:33:ea:76:dd:5e:98:82:94:a5:f6:e8:61:04:80:df:b5:
8f:75:69:1d:9d:ae:c9:59:91:6a:27:43:b3:3e:d1:b5:a2:a2:
bf:fc:69:dd:74:98:e0:7d:2a:c3:4b:d1:87:b2:14:d5:c5:fc:
f5:11:36:d4:b6:63:14:5f:a0:8e:79:f1:dd:cc:29:75:88:6e:
cb:6e:2b:00:00:25:83:ba:82:ec:0d:09:b6:08:35:02:ea:79:
47:17:54:d9:13:e1:90:d9:b4:cf:0a:e9:fe:35:65:c4:53:36:
b0:d7:0b:de:8b:dc:f8:2c:5e:af:21:4f:e6:5b:17:88:98:4a:
e1:ce:95:75:b5:a4:3c:ad:89:7b:d8:ae:40:b6:ff:5a:2e:c5:
e7:0e:3c:74:5c:97:82:ff:d3:8a:16:bc:b5:62:de:77:9c:12:
c7:6f:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:19:08 2026 by rpki-client