Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215828.roa
File: AS215828.roa (raw, json)
Hash identifier: Pq+jKR5YCzTjgMryR1bT/TlS5zY/7kDdZ36o/vUnpnI=
Subject key identifier: A5:9C:12:BF:6F:33:D0:0F:42:DB:BE:BD:BE:CB:65:5A:60:27:77:B5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 27644A1F8C1B0740A96A4FC778CCFA2326CDDAA9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215828.roa
Signing time: Mon 06 Jul 2026 17:54:56 +0000
ROA not before: Mon 06 Jul 2026 17:49:56 +0000
ROA not after: Mon 05 Jul 2027 17:54:56 +0000
asID: 215828
IP address blocks: 213.109.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:64:4a:1f:8c:1b:07:40:a9:6a:4f:c7:78:cc:fa:23:26:cd:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 6 17:49:56 2026 GMT
Not After : Jul 5 17:54:56 2027 GMT
Subject: CN=A59C12BF6F33D00F42DBBEBDBECB655A602777B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:8c:7b:ec:01:1a:55:48:f2:ba:d7:26:69:
cf:5b:fc:7e:04:a5:e9:73:72:a4:3b:fd:61:88:32:
2d:df:28:2e:f7:85:d8:92:ab:82:f1:05:13:74:7f:
72:33:33:21:3b:66:2a:e6:5e:0c:fa:c3:75:35:0a:
ee:ff:26:ed:9e:93:6b:3b:23:a8:58:3f:6e:32:1d:
1f:a2:e3:33:ec:33:9f:bf:74:00:3f:2a:da:6d:e7:
18:42:ba:5a:98:6c:d0:71:07:bc:cd:e9:d9:62:61:
b8:28:51:72:e6:ef:e9:9d:8c:ba:b6:7d:81:b3:4d:
b9:b0:ae:4d:d4:89:f4:50:c1:e3:3e:ed:42:5b:5a:
71:7e:a9:5b:56:50:d7:9d:21:4e:96:68:7f:7a:94:
df:40:ee:2f:61:8b:4b:4b:8c:d7:57:c6:f9:c1:76:
0e:e7:44:81:4e:04:84:05:34:7b:23:d5:52:fe:69:
ca:25:5c:af:a2:ed:79:d7:b9:d1:45:31:90:6e:28:
ab:8f:8d:0b:1a:9c:25:de:44:4f:c7:f4:2a:f2:45:
ff:8f:6a:e1:14:32:78:fa:61:81:47:8e:b4:33:c9:
41:c1:ae:11:83:34:e8:bb:11:63:06:19:f6:90:0d:
72:9b:12:cf:7a:78:4a:9b:31:05:8d:1c:78:22:93:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:12:BF:6F:33:D0:0F:42:DB:BE:BD:BE:CB:65:5A:60:27:77:B5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.169.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bc:e0:e8:6f:09:f6:3a:a3:a0:a7:12:66:d0:ea:c9:b8:a3:
32:8f:2d:73:68:0e:33:db:0f:dc:71:77:20:5b:91:85:8b:73:
9d:e2:30:1f:05:07:33:0e:ac:c5:c1:9d:64:c7:58:0d:8a:8e:
3e:f8:ea:2b:ae:86:f7:51:11:5d:c0:ca:2f:24:a8:75:94:40:
84:a1:57:29:1b:a5:65:49:9d:ad:c6:d4:95:20:b3:68:89:7d:
93:a1:e3:42:d7:56:79:45:b3:64:71:ef:2b:ac:0e:16:59:bb:
53:86:07:a9:55:c6:bf:cd:41:d6:af:ab:20:ac:62:ff:c3:dc:
bf:18:f8:6d:23:e7:ed:98:b7:39:83:cc:bf:a7:62:d6:af:3c:
c9:a0:84:41:ae:2b:a7:d8:a2:dc:51:11:5a:16:04:bb:7f:7f:
17:0d:5c:5b:13:0f:77:d9:8f:c3:3e:d2:7d:79:8b:db:43:93:
7a:1b:ba:d4:1c:7a:a3:4d:29:19:7f:18:e7:7b:4d:07:47:c7:
70:63:77:90:4b:fc:78:49:bc:e5:3b:ef:fd:25:b2:b3:af:e3:
97:58:f5:2d:ec:2f:80:40:05:35:b5:80:c2:93:65:2b:88:67:
5f:3d:60:e9:d1:09:bf:e9:22:cd:f8:dc:92:79:ea:ae:35:e7:
72:cd:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:59 2026 by rpki-client