Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215638.roa
File: AS215638.roa (raw, json)
Hash identifier: r22q4l6YIu4Rx3hfLxuhy0LBROE87ehwSAUudugNhdg=
Subject key identifier: 34:74:F0:30:D6:9F:F9:CE:7B:8B:28:39:63:56:D2:02:9A:FB:1B:0F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 704A046D20F2A1C6BABF07DD8B9B195CDBBE09DA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215638.roa
Signing time: Tue 06 Oct 2026 00:49:35 +0000
ROA not before: Tue 06 Oct 2026 00:44:35 +0000
ROA not after: Tue 05 Oct 2027 00:49:35 +0000
asID: 215638
IP address blocks: 2a0b:3300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4a:04:6d:20:f2:a1:c6:ba:bf:07:dd:8b:9b:19:5c:db:be:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 6 00:44:35 2026 GMT
Not After : Oct 5 00:49:35 2027 GMT
Subject: CN=3474F030D69FF9CE7B8B28396356D2029AFB1B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:80:c6:58:b9:bf:48:2d:61:2a:5f:15:3f:
f6:9e:2d:36:20:ff:bf:61:2f:3e:13:3f:0c:8f:7d:
cf:0e:92:39:18:fd:f4:f1:25:51:fc:11:cb:e6:6f:
5e:10:dc:4d:fc:41:17:0a:12:79:f1:b3:ed:51:35:
69:bd:9a:f1:28:80:54:fb:00:6c:a3:9f:09:1a:7a:
34:cf:8a:b6:f0:0c:62:82:a9:a3:96:0f:ed:37:2e:
1e:75:bc:27:e4:43:de:06:09:fc:b4:f3:36:12:14:
53:e2:35:11:f7:c3:02:2e:65:f2:f2:c5:45:59:6a:
ae:d8:8b:20:fc:dd:97:ea:90:54:70:43:18:45:83:
fa:03:e0:0d:10:6a:8d:5f:94:8f:e8:a8:e3:fd:92:
3c:39:7e:35:13:02:c2:33:fb:54:6f:3a:96:fc:df:
3d:a6:d8:10:46:8e:42:9e:d2:57:4e:13:6e:e3:56:
18:9b:0d:39:89:29:99:af:33:af:8d:98:3d:03:5c:
12:ad:9a:db:3b:f2:ea:55:0a:57:9b:2c:d8:37:72:
7f:88:82:1c:c8:ba:12:85:77:7a:78:c8:fb:a5:66:
87:91:96:00:31:b3:31:51:0d:41:8b:2b:bc:a2:56:
92:e5:bf:b1:ce:16:50:27:f2:e1:45:a7:89:fe:ef:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:F0:30:D6:9F:F9:CE:7B:8B:28:39:63:56:D2:02:9A:FB:1B:0F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3300::/29
Signature Algorithm: sha256WithRSAEncryption
a8:7a:4d:56:97:b6:0f:52:f9:88:70:f3:a8:e2:8d:df:3d:e5:
e8:99:6f:0d:7a:06:fb:d2:e2:70:b9:87:9e:d6:69:34:43:d6:
79:24:e2:88:dc:57:9f:ca:e0:3c:fa:76:cf:97:18:79:54:09:
b7:85:0a:af:10:38:cc:a6:35:42:4e:a5:25:16:16:a1:82:14:
c5:f5:04:3b:56:12:76:02:c0:1c:cc:ec:7e:d9:4d:26:71:82:
a6:4d:bf:62:5d:25:c2:9e:88:13:b9:c0:f5:93:29:0b:8d:7e:
9c:8e:f2:da:01:59:06:77:2e:4d:95:7a:36:63:16:99:d5:3c:
21:4f:91:d9:93:92:04:09:80:5f:f1:53:0d:90:8e:c3:da:af:
d2:b4:4c:0a:2f:50:49:bf:77:99:63:7c:f3:93:37:82:0c:c9:
26:1e:54:15:c9:5c:0b:63:8b:a6:70:28:ba:21:89:fc:fa:d6:
25:0a:35:b1:42:2e:e2:13:69:74:52:cf:83:29:f1:3c:61:38:
b6:8b:85:dd:3b:36:c4:44:6b:81:30:17:a9:20:16:0a:24:d3:
35:3b:2d:8d:39:5b:95:44:1e:76:35:ff:74:a7:a6:68:ae:e4:
cd:96:17:41:24:0d:ef:cc:9c:09:45:c9:53:b9:06:4d:68:fa:
02:cd:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 11:29:30 2026 by rpki-client