Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215228.roa
File: AS215228.roa (raw, json)
Hash identifier: EMueY+qV3lEqzWpJ5/VS6jzOxM58+7oODsdis7yxb7Y=
Subject key identifier: 45:B7:ED:31:68:4D:97:C5:C0:E8:8F:D3:3F:C6:F3:CE:9F:BF:6A:79
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 63475B23709357B0FEB1C1E2909564149F61B3ED
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215228.roa
Signing time: Thu 30 Jul 2026 10:51:02 +0000
ROA not before: Thu 30 Jul 2026 10:46:02 +0000
ROA not after: Thu 29 Jul 2027 10:51:02 +0000
asID: 215228
IP address blocks: 2a13:9500:178::/48 maxlen: 48
2a13:9500:1ae::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:47:5b:23:70:93:57:b0:fe:b1:c1:e2:90:95:64:14:9f:61:b3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 30 10:46:02 2026 GMT
Not After : Jul 29 10:51:02 2027 GMT
Subject: CN=45B7ED31684D97C5C0E88FD33FC6F3CE9FBF6A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:aa:c7:2d:8b:0b:2c:dd:9b:e3:da:d7:79:
46:f3:a3:1c:61:ee:9c:b5:07:57:52:a9:39:c0:86:
cf:ca:13:b2:df:64:11:b3:a3:6b:4d:8c:a5:63:e1:
22:06:73:12:61:11:7c:94:d1:43:42:c4:93:28:b9:
c4:5e:41:09:c3:0c:45:76:f5:0a:40:22:71:af:f3:
97:f4:92:93:35:30:75:5b:6d:30:55:b1:cd:ea:49:
1f:a1:e3:77:c3:a4:73:f8:ee:d0:fb:82:cd:0e:42:
49:3b:31:82:a5:fc:93:e3:6b:66:bc:fd:51:35:f4:
7d:3d:3f:11:50:cd:4c:af:74:b8:27:53:1e:45:be:
b0:28:d6:22:d0:0a:2d:5c:5b:f9:9b:a1:b7:75:7b:
5a:20:a9:48:5a:a3:13:3d:ed:aa:c6:24:08:5b:6d:
97:92:ef:27:12:cb:79:e5:6b:af:3b:79:4c:61:e2:
18:d2:6e:b8:3b:c1:8e:f6:77:a9:d2:04:11:b0:ee:
05:57:c1:b9:a2:dd:de:f3:03:bc:a8:aa:36:2e:43:
f2:b8:f5:6b:32:93:9f:b8:77:43:96:41:b4:17:1f:
f4:8a:2f:c2:0a:bd:24:a1:e6:47:c3:e7:c5:20:3a:
a7:78:4f:95:a2:be:70:40:4b:30:d2:45:c8:b2:c0:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:ED:31:68:4D:97:C5:C0:E8:8F:D3:3F:C6:F3:CE:9F:BF:6A:79
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:178::/48
2a13:9500:1ae::/48
Signature Algorithm: sha256WithRSAEncryption
73:07:32:f4:03:05:b2:b4:8c:b4:f9:b3:8c:ac:ab:c8:8c:8b:
71:12:32:2b:04:e8:ef:d9:17:2f:c1:8d:71:a5:53:54:95:b9:
a7:2d:1c:4f:75:58:a8:33:ba:a6:13:d7:c2:96:fe:a9:bf:21:
d7:a9:d6:60:47:8a:dd:4f:82:6a:67:7c:9d:ab:79:0a:d9:63:
e5:e3:8f:c8:73:be:07:8b:fc:da:77:a4:89:59:4f:d5:fa:1f:
53:06:68:c8:68:4b:e8:f0:8a:c6:3c:c7:6b:d5:3a:d7:31:b6:
e0:26:d4:98:24:64:51:dc:03:a2:98:52:8b:d5:12:43:6c:79:
f6:c6:21:30:02:0d:19:30:10:c7:38:f3:4c:b2:9a:59:06:ee:
1a:34:a7:1e:90:33:f6:a4:76:d2:0a:97:43:a7:3e:43:24:40:
6f:e8:36:e5:e5:25:c9:33:0c:3c:88:01:cc:a7:d4:bb:52:32:
43:e6:0c:fa:55:81:ef:c7:50:27:24:eb:ce:2f:44:43:45:ff:
df:d2:c5:c0:c5:8f:80:71:79:19:90:3a:76:95:ad:89:33:7d:
74:cd:69:2c:bb:e9:0b:2e:81:a8:5c:ab:0f:c7:46:c0:4d:8d:
85:dc:35:b5:97:ea:56:5f:53:a2:e2:8b:f0:be:ba:81:b2:8f:
32:68:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:14 2026 by rpki-client