Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS215152.roa
File: AS215152.roa (raw, json)
Hash identifier: zAvgnFJn5WRp+WF/gUJ1EotPQp2OuzAdn75JjlF/uno=
Subject key identifier: 89:A6:31:7A:C5:70:23:DC:57:88:99:A8:8C:2F:D3:F6:38:F5:EE:6C
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6F69D668F5847F739685FE30344C0DEE26D49FED
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS215152.roa
Signing time: Sat 20 Jun 2026 15:58:21 +0000
ROA not before: Sat 20 Jun 2026 15:53:21 +0000
ROA not after: Sat 19 Jun 2027 15:58:21 +0000
asID: 215152
IP address blocks: 82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:69:d6:68:f5:84:7f:73:96:85:fe:30:34:4c:0d:ee:26:d4:9f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jun 20 15:53:21 2026 GMT
Not After : Jun 19 15:58:21 2027 GMT
Subject: CN=89A6317AC57023DC578899A88C2FD3F638F5EE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:5b:22:a7:50:f7:5c:19:5b:41:f0:b2:d8:
84:dc:cf:f5:bb:ae:93:74:cb:87:55:9f:d8:69:9d:
3b:83:c4:0c:40:3b:71:93:b3:70:8b:e3:1f:ca:e6:
6f:28:43:7f:ac:0d:ed:a7:b2:2e:1a:71:c3:82:51:
5f:f9:4c:51:fd:70:ca:e6:c0:da:8c:09:ba:51:6c:
6d:84:50:0c:2e:b9:15:fd:e2:7f:e2:b6:15:15:11:
d9:66:4f:45:01:56:d2:a6:33:c1:b6:78:05:20:0d:
a3:81:74:b0:bb:f1:50:e6:ba:1b:da:d8:07:7c:c8:
db:03:25:81:65:b8:e5:1d:b2:62:b8:b4:1c:bd:c2:
93:e2:eb:f7:1b:2e:6c:cd:c9:24:13:f9:1d:46:70:
d3:65:26:f1:cb:69:22:43:3d:0b:4a:11:7e:3f:67:
b9:42:ad:0e:e1:c0:48:f4:5c:32:2f:14:10:68:78:
a1:84:ef:21:2b:8f:84:5b:db:1b:9f:69:00:2e:35:
7a:47:e4:0b:91:30:d1:6f:5b:6a:03:e6:67:c6:e5:
d0:02:eb:fc:90:4a:89:22:98:80:36:05:43:bf:e6:
ac:2d:8e:48:51:ea:01:c9:51:e5:a4:54:cb:e8:90:
44:39:63:46:6b:2f:13:1a:7a:d4:87:01:93:71:a2:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:31:7A:C5:70:23:DC:57:88:99:A8:8C:2F:D3:F6:38:F5:EE:6C
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS215152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:50:e2:87:d8:89:73:8f:68:84:f1:52:18:fb:3d:56:6b:db:
43:ca:56:34:20:14:dc:3f:ea:32:c8:7f:3d:34:53:47:cd:a4:
d2:2a:ab:dd:24:81:78:e2:6a:48:18:52:30:f3:78:56:3d:cf:
ec:07:74:44:d2:44:82:0e:e9:dd:43:fd:a0:f8:29:80:8f:97:
c2:ce:65:5f:57:23:9f:0d:09:c0:d0:d9:ab:01:a4:8c:e8:5f:
b1:24:b3:0c:43:ea:00:be:c1:35:49:63:9c:d3:be:61:2d:d7:
1f:99:21:c6:f6:78:8d:67:64:e8:92:54:48:b6:59:fd:a5:dc:
81:e4:a2:de:3b:9f:72:d5:99:b6:ec:0d:e9:cd:c2:24:4e:1e:
1a:db:2a:14:67:af:1d:ea:50:ca:39:0c:20:68:e9:c8:da:2e:
b1:27:58:29:17:5f:be:cf:64:b7:ae:d3:3c:60:ca:eb:8f:2b:
87:9f:d2:d5:90:f2:fb:41:cc:91:d8:af:f3:11:a2:98:a1:2c:
7a:71:0f:a0:0e:1b:aa:53:48:ff:6d:10:bf:c6:a6:26:0c:29:
d7:86:0b:88:f4:02:8f:e9:ea:17:05:17:10:32:36:eb:b3:42:
f3:ac:5c:8e:fa:5b:7e:e7:49:2a:69:56:ef:bd:45:14:16:e4:
44:08:b9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:07:19 2026 by rpki-client