Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215238.roa
File: AS215238.roa (raw, json)
Hash identifier: zBXBD9Mj33MosQWerRNH/q421F6+wc5K7J+k8aC7I9s=
Subject key identifier: 73:DF:16:4C:33:02:43:FC:02:B3:CA:E3:C8:CD:0B:0F:50:C5:AC:53
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 150F8B60D908AF34808AECD9AC9C0055830F660B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215238.roa
Signing time: Sat 01 Aug 2026 00:11:52 +0000
ROA not before: Sat 01 Aug 2026 00:06:52 +0000
ROA not after: Sat 31 Jul 2027 00:11:52 +0000
asID: 215238
IP address blocks: 167.148.181.0/24 maxlen: 24
167.148.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0f:8b:60:d9:08:af:34:80:8a:ec:d9:ac:9c:00:55:83:0f:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 1 00:06:52 2026 GMT
Not After : Jul 31 00:11:52 2027 GMT
Subject: CN=73DF164C330243FC02B3CAE3C8CD0B0F50C5AC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:54:60:a1:59:ff:44:70:ee:3a:31:82:2a:
4e:76:e7:67:72:b5:f5:a1:7a:f4:39:cd:f1:8d:d2:
97:ba:55:8a:df:d4:fc:34:28:1b:0d:d4:5b:8b:13:
d8:0e:fa:00:ac:09:e4:b3:6c:aa:59:af:1b:2d:41:
3d:51:7c:7a:19:0e:98:08:72:7c:7b:23:a7:3a:8d:
5a:3d:25:ea:0f:d0:72:59:e3:5d:28:17:2a:12:89:
53:3c:b7:21:b3:0e:68:23:e8:6b:56:25:ac:70:25:
ad:17:71:86:fb:19:cb:2e:a1:8b:88:97:4a:61:35:
71:db:ad:92:6e:5f:48:9d:7c:df:ff:70:a2:37:df:
bf:60:bb:2f:e9:27:00:29:03:81:6a:0d:64:23:e4:
03:74:e1:c0:5c:f9:21:84:34:87:5d:01:0f:78:9e:
43:3e:ad:93:10:ab:16:38:f4:59:ce:00:24:38:3a:
c6:fb:f8:3d:6f:04:a6:36:38:46:e4:8e:7c:b3:d0:
68:82:88:e4:79:19:dd:bd:6d:dd:96:96:58:b3:ea:
a4:ee:91:90:94:95:49:d1:f4:b0:6b:89:59:f8:2b:
b4:da:2f:77:6f:69:2d:5e:91:2d:15:9a:2b:a4:c1:
dc:1f:a9:2a:d8:49:67:91:bb:bf:a2:7d:a7:53:bf:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:16:4C:33:02:43:FC:02:B3:CA:E3:C8:CD:0B:0F:50:C5:AC:53
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.181.0/24
167.148.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:4b:c6:0b:b3:07:b6:df:f7:d7:28:8a:ce:ed:4f:dc:9a:
28:1c:3a:c0:5f:57:65:1b:ec:2f:58:ad:68:76:f5:63:45:d5:
b1:ac:16:97:55:24:5c:98:f7:d0:f3:f9:df:f7:a7:ac:b7:0e:
f4:da:1f:6d:74:ea:cf:58:c6:e8:d9:94:30:62:33:86:78:4f:
e7:74:1b:fb:b1:b7:3d:85:80:b8:a1:51:b9:f6:34:d2:0f:05:
56:01:7d:55:b4:4c:d1:e6:87:5f:60:ab:a2:5f:84:30:f5:85:
ff:19:8e:05:54:38:e0:57:14:12:16:84:73:d9:9c:83:db:c9:
d3:f2:bd:f0:7c:8a:d8:16:9f:ba:e1:a2:cc:5d:89:50:ae:fd:
d6:d5:7a:4a:76:32:49:ed:f6:a1:d4:ee:4f:92:4b:43:8c:63:
97:86:e3:9d:9a:4c:b5:b4:33:32:29:18:7c:d2:61:c4:d6:2d:
7c:3b:6e:ee:7e:81:f9:15:e3:41:c8:dd:3e:49:59:4f:24:6d:
f5:34:27:35:ca:56:a7:ae:06:9d:58:5b:ca:c2:79:5b:19:e6:
39:be:3b:0e:23:76:95:bd:b5:3b:80:c2:07:45:a9:13:e7:79:
16:99:21:a4:c0:f4:77:7a:06:a3:45:49:f6:fc:b3:ae:b9:4e:
d5:59:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:39:42 2026 by rpki-client