Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: 0ZowabHNfZTKa+YCouqZndBxKg/cpGEFYi69FDq/u6g=
Subject key identifier: 57:04:E5:E7:B7:0D:D2:3D:BD:A2:A1:D4:D1:5A:74:5A:D2:1E:28:7B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1FFCF302013E945EC950AD76C9DDC33572597E0F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
Signing time: Wed 04 Mar 2026 09:29:05 +0000
ROA not before: Wed 04 Mar 2026 09:24:05 +0000
ROA not after: Wed 03 Mar 2027 09:29:05 +0000
asID: 215114
IP address blocks: 2a13:9500:145::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fc:f3:02:01:3e:94:5e:c9:50:ad:76:c9:dd:c3:35:72:59:7e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 4 09:24:05 2026 GMT
Not After : Mar 3 09:29:05 2027 GMT
Subject: CN=5704E5E7B70DD23DBDA2A1D4D15A745AD21E287B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:f3:be:24:41:e1:23:df:ad:d1:6d:36:35:
ca:62:f0:55:81:1d:f7:c1:6e:e7:e6:4d:e6:ce:ff:
8d:de:b4:89:a3:a8:3e:23:20:a1:06:f7:65:32:62:
69:3d:b4:48:ce:61:20:f0:bd:7d:fa:f5:b3:2f:28:
89:76:51:1f:ef:95:18:6e:9d:79:c0:58:70:3b:f5:
64:4b:48:43:21:b5:58:a6:05:6c:3f:67:06:81:fb:
21:9a:21:4c:5e:b8:9d:ad:7c:c8:2e:6a:41:15:fd:
9c:25:4d:c1:6f:8d:dc:db:29:0c:a1:e1:b5:16:03:
8e:29:59:0d:3e:f3:e9:09:a1:c6:32:7f:15:22:3e:
4d:78:bd:c6:aa:5d:70:52:22:13:28:5b:9d:14:5c:
17:07:38:76:9b:80:e4:6c:5e:f0:42:c8:cd:e3:70:
9b:c1:9d:fc:7c:11:79:4a:85:89:9f:d1:0d:02:16:
e5:62:f5:d8:70:7d:62:8a:19:64:24:80:06:81:68:
96:e5:ca:6f:dd:bc:6e:0c:6e:2c:94:97:65:47:19:
a9:b1:a5:39:4d:7f:1f:37:ee:d8:83:98:cb:f5:61:
67:71:e7:ec:01:08:d9:7d:bd:f2:20:89:ae:20:61:
35:a7:85:38:38:6c:c6:53:0b:dc:b9:c0:2f:f2:34:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:E5:E7:B7:0D:D2:3D:BD:A2:A1:D4:D1:5A:74:5A:D2:1E:28:7B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:145::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d6:b6:f5:36:57:af:dd:71:d3:a0:7e:90:a4:e1:8a:3a:59:
22:a0:5c:da:b0:e7:94:3f:ff:14:69:71:36:5e:a8:24:aa:da:
56:8d:85:20:13:3d:08:47:f6:d5:25:db:66:e7:3b:e8:f4:7f:
10:35:36:a9:30:5f:1c:56:58:da:f6:da:91:79:7e:12:34:f6:
dd:b2:3d:5a:7e:38:2f:98:8a:1c:fb:c1:8a:d9:83:5c:15:dc:
07:3e:ba:27:e0:7a:66:33:61:f1:f7:0a:c6:9e:2e:ec:e4:8c:
7c:36:c2:90:65:0a:78:bb:ad:56:c9:41:e0:33:f6:94:3b:4a:
ed:aa:cf:d7:f3:ee:da:c9:58:20:1e:dc:f4:e5:ce:9d:f9:ea:
d6:2b:44:12:c2:7a:b8:a5:1d:87:f1:0b:53:2d:c7:e0:13:68:
12:7f:57:38:9e:c4:bd:3f:ba:cf:51:59:0a:98:d7:d1:ae:e4:
f7:94:71:76:eb:18:b7:d4:60:b1:0d:4d:29:96:8f:44:2a:9f:
55:7b:1b:7f:12:99:89:4a:3b:7c:78:2c:2c:2a:cc:35:65:70:
57:23:e9:00:87:d2:90:11:6f:30:3d:5f:8e:70:e4:b0:b4:3b:
1b:73:d4:6b:44:36:39:16:ac:4d:b7:07:9f:c4:b5:96:0d:5f:
4b:d7:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:42 2026 by rpki-client