Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215142.roa
File: AS215142.roa (raw, json)
Hash identifier: ycBS+teMH42tVloI4EGRc7ZdSFezPW8Ngm3YCHYp0ic=
Subject key identifier: 63:4E:BD:F8:C9:09:8C:DC:A3:FD:0B:F2:D1:25:02:2D:69:02:E0:AC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7685D48923CE63F477E8FD0EED75543A1BC69F9A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215142.roa
Signing time: Thu 04 Sep 2025 17:27:11 +0000
ROA not before: Thu 04 Sep 2025 17:22:11 +0000
ROA not after: Thu 03 Sep 2026 17:27:11 +0000
asID: 215142
IP address blocks: 155.117.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:85:d4:89:23:ce:63:f4:77:e8:fd:0e:ed:75:54:3a:1b:c6:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 4 17:22:11 2025 GMT
Not After : Sep 3 17:27:11 2026 GMT
Subject: CN=634EBDF8C9098CDCA3FD0BF2D125022D6902E0AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:1c:b4:66:ab:42:b1:47:75:7d:88:85:2b:
8d:f6:c3:fd:e9:ac:f0:af:38:9b:22:97:3e:b3:f3:
16:87:da:25:4c:1d:ae:a8:27:6a:b6:8e:1c:97:cd:
59:a2:42:b6:bb:70:66:ff:37:2c:5e:38:af:cd:a1:
04:65:f7:f4:a3:74:4c:85:97:e2:1d:9a:1f:79:d1:
07:1d:a9:3a:25:f1:10:4d:57:e9:ab:ad:a8:20:dc:
1b:88:1f:2b:0c:0a:82:86:7d:c0:d3:9e:0a:bc:fe:
87:fc:70:7e:a2:e9:10:0e:f6:af:c2:44:4f:82:bf:
2e:a4:8a:39:3e:50:75:01:2f:a9:04:d9:89:ae:42:
9e:c5:47:7e:ae:09:bc:e2:6d:97:ed:bb:80:ea:b2:
d9:98:94:49:66:90:8f:bc:36:ce:1f:c9:6c:ae:d3:
f9:d5:3f:0f:69:9e:81:42:99:e9:ea:f8:31:9e:72:
42:bb:14:87:42:c6:7d:60:e0:ff:52:a7:72:53:94:
b9:d9:1a:a8:70:f6:7f:03:f1:36:97:6d:4a:62:c5:
a8:37:7b:3d:fe:13:79:81:67:63:6c:54:14:ff:7c:
c8:66:c4:72:9b:74:29:79:70:89:50:3d:a0:2e:b0:
07:a3:54:a5:70:39:d7:46:67:63:78:c3:41:61:f5:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:BD:F8:C9:09:8C:DC:A3:FD:0B:F2:D1:25:02:2D:69:02:E0:AC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a7:3b:9a:54:c9:2e:1d:60:1f:7f:70:d1:a6:de:11:c9:c3:
c2:7c:fd:90:b1:85:f9:38:8f:5c:cf:84:d2:90:5f:7b:b5:34:
7e:67:6c:b8:bc:20:12:11:8e:33:a0:eb:14:0c:da:49:ef:49:
94:bc:be:f7:14:99:b0:75:be:83:71:66:cc:28:b8:5b:ad:51:
3d:03:60:c0:52:6b:8f:a5:62:08:91:58:b4:35:9e:dc:61:99:
0a:3e:92:1a:fb:ad:aa:01:c2:6d:06:57:66:1f:f0:a3:39:09:
ef:a5:9a:82:15:7b:2e:5a:f2:fd:a2:00:b2:66:ee:a7:5d:c4:
92:cb:4b:e8:36:d3:f9:a0:45:91:1e:72:be:57:46:6f:f8:23:
c4:6f:ee:8a:f2:25:fc:12:34:30:ba:4d:28:77:18:9e:7a:6f:
be:95:57:63:c5:40:3a:75:73:6e:cf:34:f2:e6:da:8e:b4:76:
22:b4:b1:0c:f6:1c:0e:d8:16:1b:10:1d:fd:7d:49:0c:cf:9c:
ee:52:cc:c5:6b:cd:a9:4f:c1:84:3f:99:73:2c:38:84:7b:f9:
86:fb:14:c0:53:1e:8d:78:f6:16:6d:81:8e:39:47:e1:e3:02:
bc:f8:af:6a:d1:b8:1b:99:a7:6d:a6:44:91:b0:be:9b:40:65:
9f:4a:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:49:15 2025 by rpki-client