Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215152.roa
File: AS215152.roa (raw, json)
Hash identifier: XP4EZi4DfMYbOmn0jIFsNB9llO7UClRzM8FOGdOLDVA=
Subject key identifier: EA:C3:84:B3:DE:AF:CB:0E:F5:D5:D1:71:03:62:FE:76:D8:A0:3B:46
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 57502A594CDEFEA07348943740C27A29E3A96D51
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215152.roa
Signing time: Thu 30 Jul 2026 07:02:47 +0000
ROA not before: Thu 30 Jul 2026 06:57:47 +0000
ROA not after: Thu 29 Jul 2027 07:02:47 +0000
asID: 215152
IP address blocks: 150.241.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:50:2a:59:4c:de:fe:a0:73:48:94:37:40:c2:7a:29:e3:a9:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 30 06:57:47 2026 GMT
Not After : Jul 29 07:02:47 2027 GMT
Subject: CN=EAC384B3DEAFCB0EF5D5D1710362FE76D8A03B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:bc:dd:79:c4:80:1f:32:60:4d:74:b1:51:
7a:5b:5c:73:89:7f:ac:87:e9:2b:28:aa:f3:6a:d4:
c0:6f:91:17:7e:a8:86:05:04:f8:c9:f1:99:e2:1b:
91:55:98:2d:27:8d:53:04:97:bd:64:65:7b:82:b2:
41:21:16:81:fc:07:dc:63:c0:01:e9:24:9f:b0:eb:
a5:26:b4:09:c2:4d:09:5b:84:16:a4:ba:32:c2:9d:
0b:8d:13:7b:0f:ba:b1:0e:0d:7a:f8:18:47:56:63:
2f:21:db:56:9b:56:69:14:cb:f2:ea:a3:e3:a3:28:
33:b5:e1:0c:0e:7d:0c:4b:bd:8a:c4:2c:1e:64:4c:
87:62:35:99:fb:1c:d9:81:f0:0f:51:3b:3c:23:f4:
13:a3:a4:f3:cc:c9:82:ce:54:1d:fb:b6:a4:b3:89:
5d:9b:e7:29:f6:3c:ae:be:7e:31:04:19:5e:e3:d7:
a2:15:d2:a8:e2:a1:9c:73:12:9a:c5:f6:5e:7c:4e:
ec:86:28:67:26:e6:c7:f8:fc:97:42:3f:ce:3f:ed:
65:d0:38:62:c4:b2:38:93:e6:4e:d8:73:1b:87:45:
28:71:8e:d2:e7:6c:2e:eb:7c:9c:39:36:3e:42:98:
0f:a6:b5:e4:d9:3e:e3:bd:86:3d:15:59:4f:4f:96:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C3:84:B3:DE:AF:CB:0E:F5:D5:D1:71:03:62:FE:76:D8:A0:3B:46
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.254.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ac:54:19:4d:30:80:41:a5:84:65:d3:5b:ae:57:ad:34:95:
44:4f:5a:d7:d2:79:c4:86:7a:d3:51:35:5e:e6:79:ee:f0:33:
7c:4d:d8:fe:b3:55:9d:0d:a7:cb:08:86:4b:18:84:0c:d8:22:
e4:d8:7b:25:1b:6e:7c:23:2e:4d:00:7c:3d:6d:34:1b:c1:4c:
41:bb:db:b4:2b:92:4b:63:50:e7:0d:dc:c7:d3:b1:1f:80:07:
89:0f:c5:65:08:a9:4d:34:f7:27:41:dd:76:80:90:da:2e:58:
de:02:7c:bb:be:e4:0f:4b:9d:68:af:54:b0:8b:49:0b:4e:61:
43:b4:f9:70:20:e6:2d:96:73:01:0a:07:f8:6a:f2:91:37:89:
76:01:a5:90:44:a5:9f:88:59:21:ec:62:77:ae:dc:8b:42:d3:
a2:0c:d8:a1:21:16:a8:3a:d8:56:21:f6:85:1c:6f:5a:32:d8:
61:ce:49:c1:22:7a:80:5d:2a:ec:a0:a0:a8:cb:a0:9d:ea:18:
6d:8a:80:9f:4c:5c:37:1f:76:49:35:95:5f:f6:16:48:79:44:
ba:73:80:d4:c5:df:ff:a3:53:96:e0:d9:63:57:ed:4a:55:ee:
d2:62:73:7e:77:7e:8f:73:23:21:82:41:ad:81:c9:b6:5c:12:
f0:53:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 14:03:28 2026 by rpki-client