Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215238.roa
File: AS215238.roa (raw, json)
Hash identifier: luOs2cg2D7Cgl/fSHDJ1kW+cPQL+74w+K7l8k/mF5IE=
Subject key identifier: 2C:3C:DD:97:9B:73:69:56:9D:31:F7:9D:E2:BB:52:96:B1:6B:08:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 17A4BA34515C9A0EE41C9EB209A0468662CFCA43
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215238.roa
Signing time: Wed 13 May 2026 11:59:06 +0000
ROA not before: Wed 13 May 2026 11:54:06 +0000
ROA not after: Wed 12 May 2027 11:59:06 +0000
asID: 215238
IP address blocks: 2a13:9500:171::/48 maxlen: 48
2a13:9500:175::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a4:ba:34:51:5c:9a:0e:e4:1c:9e:b2:09:a0:46:86:62:cf:ca:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 13 11:54:06 2026 GMT
Not After : May 12 11:59:06 2027 GMT
Subject: CN=2C3CDD979B7369569D31F79DE2BB5296B16B0861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:62:e7:f5:54:b6:31:d3:07:32:2c:47:a4:
a8:8f:54:05:39:75:80:92:b1:0a:4f:89:55:76:07:
fb:5f:cc:6e:ea:e2:83:d0:6a:af:54:de:9f:63:c2:
64:35:01:53:a8:6f:f0:e4:73:f3:40:4c:45:11:b7:
5d:f9:70:86:9b:c1:45:7a:37:97:da:30:4e:e4:fc:
05:a2:f6:88:3f:2a:9c:92:64:05:65:33:0f:26:59:
cf:4c:f8:b7:a3:8f:15:b5:20:c6:2f:40:d3:88:71:
0a:7c:53:69:23:d4:f3:9f:25:ff:5b:c1:c2:c3:12:
bf:e4:5a:c2:0e:d5:8c:70:c7:7e:7f:81:53:a9:de:
04:e1:99:b5:4e:69:8b:7c:54:32:4f:6c:20:60:9f:
be:c8:c9:d3:67:df:4e:07:ce:db:ea:5c:16:a5:76:
1c:d1:02:8f:c2:f7:86:2b:1d:bd:50:f7:34:d1:5c:
e0:cb:e8:ac:b8:ff:b1:d2:4e:61:ef:07:e0:81:39:
50:9a:3f:af:94:43:78:2b:fe:f3:36:29:12:b8:3c:
9a:68:21:66:7c:d3:18:b0:2f:f0:54:ad:98:57:c3:
b9:1e:f9:cb:6f:d5:8c:e7:15:9c:7c:53:62:75:2f:
29:cb:38:57:8e:b0:c4:d1:9c:a4:c4:f9:47:85:0a:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:DD:97:9B:73:69:56:9D:31:F7:9D:E2:BB:52:96:B1:6B:08:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:171::/48
2a13:9500:175::/48
Signature Algorithm: sha256WithRSAEncryption
24:16:2d:15:95:b6:10:5e:29:63:e0:51:7d:1a:e2:68:c8:48:
6e:10:b2:88:76:02:c9:53:38:0c:70:21:15:d6:b7:d5:27:df:
27:e7:10:94:79:7d:5e:6d:c6:31:93:82:0f:03:f9:23:d5:61:
0e:58:43:7b:4f:20:8a:c2:91:9c:78:43:23:2c:48:2f:2e:79:
53:00:fe:aa:b3:70:4d:81:a1:28:21:e7:33:0a:b4:83:c2:72:
03:85:24:98:38:95:1b:20:5b:6d:b1:84:62:ec:9a:54:a6:fe:
29:e6:ad:89:78:3f:0a:ab:2e:af:4e:15:c0:44:cc:5c:b6:fd:
9c:21:e2:a3:83:86:36:9d:1a:e2:a1:f2:e8:40:34:8a:d9:15:
06:fe:e8:c0:f1:f4:db:71:3e:15:be:f8:b9:5d:f8:9b:77:1a:
00:02:2c:21:2b:1a:76:79:57:e3:4c:50:e1:57:38:11:b1:b1:
10:0a:1f:5a:cf:21:2f:e3:30:2a:93:1c:d0:94:2a:c3:74:6e:
60:40:20:e9:c9:fe:7b:bd:d5:ff:d5:ab:3e:d1:c1:1b:fc:8f:
73:1f:b4:ac:73:ac:28:63:e0:62:18:bc:78:b6:99:4b:cf:7d:
03:5f:be:69:74:97:cb:4f:a4:5d:5c:e8:9f:1e:61:4d:b8:40:
57:b1:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:30 2026 by rpki-client