Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215323.roa
File: AS215323.roa (raw, json)
Hash identifier: mevjOpnuonO5hNwtqxncOop8f8TXbcW/OyOOGhvm57c=
Subject key identifier: BE:32:78:4C:FC:2E:C4:2C:86:74:C1:D8:21:D6:88:1C:EC:5F:20:74
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1FFE283627AF58122E8A768F2D5C975D7935C7E6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215323.roa
Signing time: Tue 26 May 2026 09:28:58 +0000
ROA not before: Tue 26 May 2026 09:23:58 +0000
ROA not after: Tue 25 May 2027 09:28:58 +0000
asID: 215323
IP address blocks: 143.14.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fe:28:36:27:af:58:12:2e:8a:76:8f:2d:5c:97:5d:79:35:c7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 26 09:23:58 2026 GMT
Not After : May 25 09:28:58 2027 GMT
Subject: CN=BE32784CFC2EC42C8674C1D821D6881CEC5F2074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:8c:53:a6:ea:e9:50:fd:a5:b5:4c:05:4a:
58:04:6d:91:75:ef:cc:22:93:75:76:49:f5:86:0f:
c6:da:7c:bd:ac:60:cc:b6:fe:ae:27:50:80:84:4e:
ec:08:05:7f:11:18:09:13:0b:c8:82:1e:0d:79:a2:
71:fa:a6:48:8e:e0:b7:ac:76:f3:d9:72:0b:88:ad:
b5:a4:53:52:a5:0b:fe:23:e3:b0:70:eb:a3:aa:ba:
80:cc:27:69:1d:87:ad:de:d7:97:cf:50:58:94:6a:
b2:c4:4c:4a:57:16:64:3a:21:89:17:42:86:7c:e9:
4e:b2:16:c1:30:64:31:8f:5a:fc:42:00:c5:0a:65:
38:e0:a2:f5:6e:8f:9f:42:5e:6f:73:3e:ee:34:bb:
1d:df:90:32:13:51:c9:95:44:d1:31:55:26:fc:9c:
6b:26:5d:c4:a5:74:33:9d:02:a7:71:a2:ea:16:17:
22:25:e2:eb:f7:a3:0b:fa:81:2d:4d:8e:13:a6:c2:
0f:bb:dc:d6:24:8c:70:9d:37:37:51:48:5e:79:63:
4d:c9:14:fc:a1:ef:68:56:9d:55:70:b4:e7:ab:58:
c8:ff:e6:cf:81:b3:7f:a3:29:5c:e6:58:43:b7:90:
49:a0:22:5d:e3:62:6d:c1:35:a2:ec:24:6a:a8:09:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:78:4C:FC:2E:C4:2C:86:74:C1:D8:21:D6:88:1C:EC:5F:20:74
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:24:e8:92:06:9e:a2:9f:f9:54:47:41:38:f3:82:bf:1d:e4:
c2:3a:6b:a8:94:27:44:e0:1e:b4:2e:41:f3:af:85:ef:dc:c9:
67:24:ac:51:d3:c0:e3:88:da:7f:cb:21:88:58:f6:b8:51:30:
3f:f1:8a:55:d2:01:53:e7:46:d4:16:98:3b:a2:d3:e5:95:2a:
c2:f5:55:4e:57:95:0e:ca:42:2f:60:42:b6:a8:54:3b:12:01:
d6:b5:78:46:15:ec:9c:99:23:7c:c3:c2:15:9d:2f:50:4d:ea:
5d:8e:e0:d1:d4:c9:72:1b:12:d1:d8:1f:c5:b0:04:ed:5d:6e:
5c:cb:4d:10:49:ba:26:6a:3b:d9:b8:0c:18:72:32:df:1d:ea:
8c:0b:90:9d:c0:22:ab:b6:f3:fd:21:33:28:35:a2:42:10:5b:
c2:0d:33:24:e3:43:72:47:28:0a:21:e3:76:b7:42:9f:c7:6b:
0d:6a:61:f5:c5:9c:34:d9:d8:5a:ca:e1:02:23:c4:07:ec:b0:
d8:26:e4:c6:50:22:fc:6b:a9:b9:17:44:23:a7:23:27:9e:aa:
7a:6c:26:09:12:ee:c7:54:1d:ef:65:67:6f:3b:5f:04:36:9e:
02:f2:cd:d5:c8:ec:38:de:d8:8d:a4:d9:fa:99:12:d0:a5:22:
f9:5a:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:28 2026 by rpki-client