Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: JVY6FDBkzRwwjKCL3sPHtWk4inHC5rab/zKYk99S1g0=
Subject key identifier: E3:5A:45:3E:04:0A:A7:72:24:B6:37:20:A8:9A:8D:3D:77:2E:B6:D2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 43F33FC2BC111719A761036429116F23A26A70A2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215039.roa
Signing time: Sun 09 Aug 2026 10:49:21 +0000
ROA not before: Sun 09 Aug 2026 10:44:21 +0000
ROA not after: Sun 08 Aug 2027 10:49:21 +0000
asID: 215039
IP address blocks: 82.25.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f3:3f:c2:bc:11:17:19:a7:61:03:64:29:11:6f:23:a2:6a:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 9 10:44:21 2026 GMT
Not After : Aug 8 10:49:21 2027 GMT
Subject: CN=E35A453E040AA77224B63720A89A8D3D772EB6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:9d:c9:a1:ea:9e:2a:18:c7:90:c0:10:75:
0e:47:f9:9e:59:6b:f8:1a:8a:be:16:a6:39:16:03:
f7:58:17:77:e8:e0:7f:40:79:7c:04:a2:46:2a:71:
3f:3a:80:78:6a:67:44:5f:bc:fb:e3:0d:89:55:b0:
7d:9f:54:d4:dc:46:48:45:e9:c2:9f:bb:d9:bc:7d:
c8:d2:70:93:c0:85:86:ec:8e:16:51:0d:22:f0:f9:
43:0a:9d:41:df:5b:b9:7c:12:98:68:1e:e2:18:20:
8c:65:11:88:bf:f7:47:39:c0:dc:2c:2d:9d:75:ae:
fa:d6:f6:36:f5:3e:4f:dc:6e:30:43:05:d7:b5:1c:
1d:9e:8f:7b:fc:8e:80:31:8b:85:4f:b4:8b:32:e4:
ae:1f:1b:fa:1d:82:3c:15:7f:2c:66:66:ec:5c:e2:
36:00:6d:da:a5:57:e7:f9:ce:db:21:5a:d4:d7:41:
e9:7b:8a:f3:54:ec:01:f1:9c:f9:73:bd:7e:2b:e7:
08:9d:d8:88:87:d8:04:4b:7e:53:92:95:86:93:36:
44:ad:1e:e2:13:35:a1:8c:ca:3a:67:83:91:35:76:
e3:77:2d:fb:36:9f:ec:ce:e6:e2:6a:28:bc:48:ad:
88:81:a2:36:16:cc:de:0d:ea:78:6c:2e:d2:79:95:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5A:45:3E:04:0A:A7:72:24:B6:37:20:A8:9A:8D:3D:77:2E:B6:D2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c9:5a:82:ce:80:96:db:82:92:5e:60:19:38:34:21:74:ec:
af:3d:df:d5:fc:de:b7:eb:7c:c5:9c:4b:42:c9:df:91:cb:9f:
d5:f0:36:3e:4e:47:15:9d:a9:65:5b:07:4f:5f:c6:ce:2f:48:
5f:ae:4c:be:d4:5c:60:de:c4:6d:78:ab:3f:28:e0:b1:14:3e:
3a:d6:c1:8a:d2:f0:82:24:34:3b:0b:30:54:a4:65:d2:13:91:
2c:40:ae:2f:80:99:92:7a:e3:86:05:ab:e4:bf:44:4f:26:99:
f0:18:c1:e8:75:5d:b0:03:d8:0d:12:ec:12:1d:1d:2d:46:65:
10:1e:b4:1c:33:32:14:01:81:80:99:cf:ac:73:a7:79:c6:d4:
46:47:34:5d:87:e7:9b:94:1e:c4:4d:72:7f:a7:24:c1:33:74:
ff:e1:d3:20:08:75:7f:d7:d1:e0:5c:37:d3:09:2e:91:87:7f:
ba:d0:d3:ab:ba:b8:6e:7a:cf:9b:dc:f7:bf:e1:59:91:bf:d7:
b6:53:45:06:b9:69:ac:00:f9:a2:37:ee:9d:03:bf:27:e8:ed:
b0:67:2b:93:c1:1a:77:1a:16:a1:ca:05:37:1b:f7:96:77:ac:
34:8e:1c:81:f2:2b:06:27:c9:11:ff:87:95:0e:8e:c6:1e:39:
20:05:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:33:12 2026 by rpki-client