Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215269.roa
File: AS215269.roa (raw, json)
Hash identifier: 2biIRquTrZ9WuLeYJSHNoRlfhBPCr+ZhnEYMHuvz5jg=
Subject key identifier: 5D:C2:44:F7:07:1B:A8:81:62:D3:A2:D7:F9:83:EF:6E:38:12:B2:BC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4850C60B400C4EB4C955A1E3F87BB078DE572162
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215269.roa
Signing time: Sat 23 Aug 2025 14:25:54 +0000
ROA not before: Sat 23 Aug 2025 14:20:54 +0000
ROA not after: Sat 22 Aug 2026 14:25:54 +0000
asID: 215269
IP address blocks: 155.117.76.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:50:c6:0b:40:0c:4e:b4:c9:55:a1:e3:f8:7b:b0:78:de:57:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 23 14:20:54 2025 GMT
Not After : Aug 22 14:25:54 2026 GMT
Subject: CN=5DC244F7071BA88162D3A2D7F983EF6E3812B2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:5e:16:af:ea:3d:63:63:38:ee:85:09:aa:
aa:57:a9:37:91:8d:74:13:d0:3b:47:c5:4b:1c:84:
47:85:2c:e9:40:c8:bb:ea:bb:16:bf:6c:04:38:20:
f1:55:ee:48:be:86:24:c4:3f:93:99:0e:f5:f1:43:
1a:da:1f:f3:1e:d9:1b:0d:fd:11:41:35:7f:90:a9:
64:cf:d1:28:0b:49:86:0b:55:ca:5a:99:1a:33:cd:
7a:8c:28:80:ff:d1:cc:02:4f:74:b0:15:79:8f:86:
6e:42:70:f9:2f:da:60:5b:c8:fc:c2:57:62:44:8e:
22:a6:d5:ca:02:43:bf:1e:3a:7f:7b:23:ed:31:52:
84:2a:68:0b:40:4a:85:8e:0d:e7:cd:2e:df:f4:b5:
43:37:5b:af:72:f1:0a:47:0e:ec:46:46:b1:2f:31:
77:12:82:9c:8e:1e:d3:bf:a4:b6:b9:e5:83:ef:c7:
4f:35:c9:14:5d:d6:0d:d1:5d:8c:34:e0:ce:c2:73:
31:29:5d:ea:f3:95:65:c1:d0:df:0b:f5:50:27:95:
b3:57:c6:14:bb:af:8a:b5:a7:55:28:23:0a:22:6b:
65:24:2b:60:c7:1e:b7:c1:ba:08:01:05:9b:e1:00:
c8:76:2a:b0:a1:0e:68:83:89:31:1f:4b:ed:4a:6f:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:44:F7:07:1B:A8:81:62:D3:A2:D7:F9:83:EF:6E:38:12:B2:BC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215269.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.76.0/24
155.117.81.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8f:cd:66:99:de:3e:38:65:08:8c:e5:36:67:7e:47:5b:0b:
e8:f2:46:1b:a0:7a:e7:cf:30:ba:be:b0:cf:d9:b2:a6:33:39:
42:70:c9:08:b4:29:9c:5e:7f:d0:1c:d6:8a:65:cf:90:5a:37:
7c:26:df:60:69:b5:02:ab:21:35:6d:48:1e:09:26:ce:c7:bc:
17:4c:a5:16:12:33:b2:43:76:1e:e7:a2:2a:ca:f1:bd:7c:34:
d4:5c:ad:ae:09:02:e5:3e:a0:3e:4a:00:35:6c:16:ff:35:39:
d2:68:c9:62:e0:23:f2:fd:f7:9a:20:da:8c:b8:4a:14:52:36:
a2:ba:fa:fd:61:5e:36:9a:2a:ce:1b:7c:83:2c:3a:7f:b9:14:
66:fc:57:ea:d2:e2:ed:90:97:4e:32:e3:f7:a1:ba:cf:13:b3:
e1:a8:a5:76:6c:c0:f3:7f:5a:ce:dd:63:e3:fc:3f:68:ed:35:
19:87:51:40:a0:b3:32:32:12:93:9c:89:6e:c7:11:4c:60:31:
18:1f:eb:86:4e:f8:b5:c1:92:a8:a2:84:53:8e:9e:fa:7c:e6:
01:0d:4f:36:2b:01:52:52:9c:3e:5a:f1:e5:d9:4b:c1:2c:1c:
13:cf:e0:ef:79:71:1e:9c:ae:8f:a6:4b:21:ea:d1:ee:36:00:
da:52:4a:6a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUSFDGC0AMTrTJVaHj+HuweN5XIWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA4MjMxNDIwNTRaFw0yNjA4MjIxNDI1NTRaMDMxMTAvBgNV
BAMTKDVEQzI0NEY3MDcxQkE4ODE2MkQzQTJEN0Y5ODNFRjZFMzgxMkIyQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoF4Wr+o9Y2M47oUJqqpXqTeR
jXQT0DtHxUschEeFLOlAyLvquxa/bAQ4IPFV7ki+hiTEP5OZDvXxQxraH/Me2RsN
/RFBNX+QqWTP0SgLSYYLVcpamRozzXqMKID/0cwCT3SwFXmPhm5CcPkv2mBbyPzC
V2JEjiKm1coCQ78eOn97I+0xUoQqaAtASoWODefNLt/0tUM3W69y8QpHDuxGRrEv
MXcSgpyOHtO/pLa55YPvx081yRRd1g3RXYw04M7CczEpXerzlWXB0N8L9VAnlbNX
xhS7r4q1p1UoIwoia2UkK2DHHrfBuggBBZvhAMh2KrChDmiDiTEfS+1Kb7BrAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUXcJE9wcbqIFi06LX+YPvbjgSsrwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1MjY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAm3VM
AwQAm3VRMA0GCSqGSIb3DQEBCwUAA4IBAQBxj81mmd4+OGUIjOU2Z35HWwvo8kYb
oHrnzzC6vrDP2bKmMzlCcMkItCmcXn/QHNaKZc+QWjd8Jt9gabUCqyE1bUgeCSbO
x7wXTKUWEjOyQ3Ye56IqyvG9fDTUXK2uCQLlPqA+SgA1bBb/NTnSaMli4CPy/fea
INqMuEoUUjaiuvr9YV42mirOG3yDLDp/uRRm/Ffq0uLtkJdOMuP3obrPE7PhqKV2
bMDzf1rO3WPj/D9o7TUZh1FAoLMyMhKTnIluxxFMYDEYH+uGTvi1wZKoooRTjp76
fOYBDU82KwFSUpw+WvHl2UvBLBwTz+DveXEenK6Ppksh6tHuNgDaUkpq
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:46:58 2025 by rpki-client