Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: zIUAtqCqTZUl+eOFpdRhcDjtggrOcTviSF2cgN/MEdE=
Subject key identifier: 68:C1:35:20:18:7E:60:C6:A0:6E:60:72:BA:1A:0B:62:72:AD:A4:82
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D9EC35BAFCAA3F335B8330F40FD813F1C39630A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
Signing time: Sun 05 Jul 2026 18:40:37 +0000
ROA not before: Sun 05 Jul 2026 18:35:37 +0000
ROA not after: Sun 04 Jul 2027 18:40:37 +0000
asID: 215114
IP address blocks: 82.26.80.0/24 maxlen: 24
82.47.159.0/24 maxlen: 24
2a13:9500:145::/48 maxlen: 48
2a13:9500:17d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9e:c3:5b:af:ca:a3:f3:35:b8:33:0f:40:fd:81:3f:1c:39:63:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 5 18:35:37 2026 GMT
Not After : Jul 4 18:40:37 2027 GMT
Subject: CN=68C13520187E60C6A06E6072BA1A0B6272ADA482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:d9:4c:95:33:4f:86:b7:6a:21:03:68:74:
64:2e:2c:ad:12:34:13:9c:65:a7:be:7d:96:f3:07:
e2:74:48:f0:dc:80:ff:0b:11:98:e3:d0:1a:4e:d5:
fd:04:de:72:23:cd:5f:04:a8:79:4d:e6:1e:ad:ad:
12:5b:8e:bc:18:ec:18:c1:e6:45:fc:ad:33:9c:f4:
51:92:b8:0e:7f:26:d2:a6:e2:54:a3:06:af:f6:63:
b0:23:c2:3c:3a:0a:32:1f:04:8f:fc:19:96:64:05:
21:b5:08:51:85:36:e4:26:1c:08:93:51:d0:a3:85:
61:a1:be:36:a4:16:44:cd:70:1a:12:01:bd:73:c6:
2a:c5:89:54:ee:90:e7:84:47:7c:59:52:9d:cf:33:
fc:fb:a2:54:bd:b8:c2:93:7b:df:e6:26:df:df:f7:
04:ca:31:b7:74:e9:e3:25:57:8f:9a:8c:33:0a:d4:
fb:63:e6:9d:4c:61:64:45:1c:50:a6:3d:e3:df:ef:
5b:f0:b7:f1:17:89:e5:cd:67:4c:50:c1:e1:05:a4:
6a:7c:4e:04:df:20:80:24:d6:b5:37:fe:65:74:c2:
b1:bb:47:5b:5c:1f:fc:d5:ff:71:20:0d:c8:9f:5c:
c4:05:e4:fd:2e:25:44:f1:ba:98:b2:4e:75:dd:16:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:35:20:18:7E:60:C6:A0:6E:60:72:BA:1A:0B:62:72:AD:A4:82
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.80.0/24
82.47.159.0/24
IPv6:
2a13:9500:145::/48
2a13:9500:17d::/48
Signature Algorithm: sha256WithRSAEncryption
43:51:c3:a2:29:a9:20:4d:e6:e8:df:d8:0d:74:89:dd:3f:24:
1e:58:af:10:3f:b5:83:e2:0f:db:19:3a:4f:89:cc:6c:49:60:
ed:51:ec:b0:3a:c2:4c:a0:dc:41:88:bc:0e:46:3e:5c:cb:03:
ea:ac:f5:c3:4b:51:49:d9:b6:c7:45:11:5d:56:cd:b9:d7:f8:
81:39:58:5e:76:ac:43:ec:34:a4:23:c6:e1:d2:55:1f:a8:96:
59:d5:c7:d8:e6:e9:01:1e:38:7c:e3:9b:db:12:ef:d6:cc:3d:
07:d0:13:30:cb:08:f4:ce:31:c2:de:d4:51:63:bd:78:49:1e:
68:2e:00:fb:78:44:8d:eb:cf:7f:37:19:69:82:40:c6:c3:67:
c9:83:44:f3:34:d9:eb:bf:cf:a3:27:eb:d5:2e:c3:05:1e:ed:
21:0e:3a:26:c3:65:3b:4f:e4:3b:26:97:77:c4:11:9b:67:5a:
32:83:f3:bf:d3:c7:aa:ce:8c:b2:d6:09:2d:b0:52:b0:83:bb:
37:62:e5:cf:a5:25:04:b9:53:de:f9:34:3a:bb:5f:e6:56:bd:
c0:e8:a4:84:e7:dc:33:da:39:95:3a:6b:88:e4:e6:32:ba:b7:
67:e8:a8:69:4c:9f:d1:72:40:06:d8:1f:21:06:9c:e1:25:a2:
a9:68:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:39 2026 by rpki-client