Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: tAvO0fGPxQeh7p9sLvZpzdXYid2+jtdIwV48AdTpuDc=
Subject key identifier: E7:0B:DA:FF:99:14:5E:2D:DA:B7:38:22:75:F3:94:09:11:9F:86:BC
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 5D7D1EACA169211EBBAB20448276D8B035D56583
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS215728.roa
Signing time: Sun 11 Oct 2026 13:06:38 +0000
ROA not before: Sun 11 Oct 2026 13:01:38 +0000
ROA not after: Sun 10 Oct 2027 13:06:38 +0000
asID: 215728
IP address blocks: 5.199.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7d:1e:ac:a1:69:21:1e:bb:ab:20:44:82:76:d8:b0:35:d5:65:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 11 13:01:38 2026 GMT
Not After : Oct 10 13:06:38 2027 GMT
Subject: CN=E70BDAFF99145E2DDAB7382275F39409119F86BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:c9:fe:6e:a7:56:8f:c2:a4:37:6c:8b:17:
bc:20:aa:d1:4e:c8:a0:bf:4d:2f:cf:68:90:af:59:
64:f9:a8:32:a6:53:64:d5:bd:56:48:78:45:f6:18:
71:a3:3c:75:46:f5:e6:ef:35:0b:4c:07:ef:7f:48:
b1:79:3b:c5:d4:87:3b:e6:1b:b9:d5:51:d5:af:d3:
29:b1:f6:f8:7e:16:5f:fb:07:65:7e:59:d6:5e:e4:
da:01:fb:a7:f6:8f:36:ce:04:e5:4a:68:d0:4f:fc:
1c:f0:59:89:1b:c6:63:95:67:18:c4:70:21:cc:6b:
4d:a7:5a:d1:8d:6a:8b:2b:d9:c5:20:70:b6:8b:b7:
74:64:c0:f1:d9:b8:07:69:0d:bb:dc:26:1f:18:cb:
2e:4b:2f:18:97:96:89:2c:ed:f5:0c:42:0a:41:8f:
b5:89:59:26:91:fa:77:42:3f:d1:a7:ae:a8:c4:40:
25:d2:64:04:34:28:f6:c9:63:2c:ca:15:38:98:93:
01:6a:2a:6b:7b:8e:2b:d6:54:67:bc:ec:e6:af:bc:
58:6b:18:8a:02:c9:0e:cd:d3:61:15:64:b3:24:9c:
c3:bb:e1:ee:db:69:21:00:be:d8:3e:b1:5e:76:82:
4e:d4:e4:3a:24:23:10:f5:19:66:1d:17:6f:ab:ad:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0B:DA:FF:99:14:5E:2D:DA:B7:38:22:75:F3:94:09:11:9F:86:BC
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:17:13:4c:a8:4c:01:93:44:ba:50:b0:d3:05:6b:bc:ca:70:
54:80:55:82:86:f7:5a:d1:52:2d:15:ca:20:c5:ec:dd:a6:4b:
11:01:35:ee:e0:f9:cc:23:3d:de:06:ff:55:d1:03:b2:4f:ab:
c0:41:42:e7:7f:9e:62:b2:4e:2d:ea:7b:17:37:2f:96:ef:eb:
de:32:14:76:a3:36:ea:85:ae:b8:26:30:28:e1:c6:61:57:ef:
55:30:0e:db:de:78:d7:6a:83:2c:9e:d1:b4:0e:b7:65:c8:9c:
da:5b:f4:70:a1:e5:60:88:f3:e1:2d:fe:07:76:6f:ce:ea:0d:
cc:6c:e8:f7:38:2b:fc:4c:46:bb:1b:3d:8d:61:4b:5b:da:b0:
72:a9:e7:31:51:54:8a:70:1b:c3:a0:b8:79:8c:5e:ee:fc:fb:
f0:4d:19:93:59:f9:59:f6:c5:7e:40:7a:3a:92:72:1e:da:b5:
7a:91:9d:a7:dd:11:3c:9d:c7:40:b4:ee:6d:c2:0b:4a:16:15:
a2:01:3c:cb:eb:7a:60:77:dc:8a:8e:ff:d2:31:a5:2a:82:26:
53:1b:ea:75:85:7c:4c:28:b7:f4:59:18:95:ec:a3:93:7b:bb:
67:81:2c:08:68:48:32:0a:3a:b5:50:6d:d5:27:5a:7d:f3:73:
1e:41:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:23:41 2026 by rpki-client