Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215258.roa
File: AS215258.roa (raw, json)
Hash identifier: dUO7rRoEahWpoRzW9k8w7TmlE7TW93uKavwnO0Yunzs=
Subject key identifier: E6:E3:94:2B:21:50:1B:91:D6:69:E5:29:CA:E4:3D:99:A5:BD:09:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 59123D06FCB835E4B435A956FBEA8879C2DFE7EA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215258.roa
Signing time: Thu 18 Jun 2026 07:47:42 +0000
ROA not before: Thu 18 Jun 2026 07:42:42 +0000
ROA not after: Thu 17 Jun 2027 07:47:42 +0000
asID: 215258
IP address blocks: 2a13:9500:b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:12:3d:06:fc:b8:35:e4:b4:35:a9:56:fb:ea:88:79:c2:df:e7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 18 07:42:42 2026 GMT
Not After : Jun 17 07:47:42 2027 GMT
Subject: CN=E6E3942B21501B91D669E529CAE43D99A5BD099E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:cc:e8:e8:ba:8d:84:62:2b:88:c6:fb:69:
9b:e7:6a:d9:80:27:d7:10:47:4f:ba:ef:86:89:57:
ea:9e:fa:31:4d:17:f1:95:fa:4c:69:fc:96:fb:c3:
c8:f4:99:c3:17:79:d3:7d:e2:7b:f0:ad:96:07:84:
a8:77:9c:83:72:7d:34:cf:32:4b:e3:8d:83:36:fe:
24:64:80:1d:59:07:8c:a7:56:58:2a:0b:50:86:4a:
96:4e:1c:7a:da:57:c7:78:61:fd:a0:88:08:55:38:
b1:2b:d3:a0:95:e3:47:e4:40:90:93:9f:fb:10:ca:
00:3a:ae:0c:56:14:b6:13:d0:51:01:28:e8:cd:3c:
31:aa:52:87:b4:91:bd:91:54:b1:59:4f:a7:09:ab:
93:31:28:72:4f:17:cb:a3:15:3f:55:57:7f:b7:4e:
7d:24:16:5d:2e:3a:5b:a7:9a:7e:34:04:9c:06:83:
46:17:a1:05:e1:4e:a2:91:84:5b:b0:ae:cd:1c:ef:
bb:00:65:8c:c1:bb:bf:40:0b:89:48:0d:d1:af:b4:
97:5d:dd:de:09:3b:32:dd:64:23:18:c7:90:37:23:
ac:61:1f:45:30:2f:fa:db:7a:52:fd:9f:3c:b7:5a:
c8:a0:ea:03:6d:81:5b:9c:63:03:d3:9f:2a:3e:dd:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E3:94:2B:21:50:1B:91:D6:69:E5:29:CA:E4:3D:99:A5:BD:09:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b0::/48
Signature Algorithm: sha256WithRSAEncryption
92:72:66:b4:15:b2:2d:e7:44:cc:91:07:73:98:c1:d9:f2:37:
8b:e7:b9:74:dd:f5:8b:df:87:8c:21:c9:d5:81:12:77:5d:04:
bb:b6:ea:05:85:1d:e8:80:21:b0:63:d1:62:0c:17:bd:5c:62:
25:41:9c:55:27:42:ea:76:e5:cb:b7:64:36:cf:db:4b:00:2b:
a0:ca:da:8f:c9:4f:23:94:1f:4a:39:79:af:45:78:d2:7d:09:
de:2f:5b:a5:c3:d4:a0:63:c8:64:88:34:f6:b1:3b:a5:93:b0:
8b:e1:30:72:83:e4:73:15:37:a9:2a:16:f4:dd:73:35:97:b1:
fa:ca:14:86:76:54:dc:0a:60:c4:09:af:54:81:62:e7:79:23:
25:de:4d:32:03:28:fb:b9:e1:c3:8b:4c:06:cc:9f:4a:f8:04:
0a:2f:a7:03:6e:20:e4:ab:c2:59:89:4c:53:99:1f:08:d1:8e:
eb:60:4e:7d:c1:2c:12:84:5c:09:ec:30:24:8d:32:0f:1b:8b:
89:ee:e3:2d:d8:a9:45:b5:9f:a7:dc:be:95:5d:46:80:1f:e5:
d8:aa:00:62:27:77:51:e7:bb:02:df:2d:e6:ea:52:3f:09:e7:
ac:4d:db:05:6b:70:6a:f2:94:00:e0:13:4d:e3:17:b9:50:7f:
e4:74:35:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUWRI9Bvy4NeS0NalW++qIecLf5+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MTgwNzQyNDJaFw0yNzA2MTcwNzQ3NDJaMDMxMTAvBgNV
BAMTKEU2RTM5NDJCMjE1MDFCOTFENjY5RTUyOUNBRTQzRDk5QTVCRDA5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREMzo6LqNhGIriMb7aZvnatmA
J9cQR0+674aJV+qe+jFNF/GV+kxp/Jb7w8j0mcMXedN94nvwrZYHhKh3nINyfTTP
MkvjjYM2/iRkgB1ZB4ynVlgqC1CGSpZOHHraV8d4Yf2giAhVOLEr06CV40fkQJCT
n/sQygA6rgxWFLYT0FEBKOjNPDGqUoe0kb2RVLFZT6cJq5MxKHJPF8ujFT9VV3+3
Tn0kFl0uOlunmn40BJwGg0YXoQXhTqKRhFuwrs0c77sAZYzBu79AC4lIDdGvtJdd
3d4JOzLdZCMYx5A3I6xhH0UwL/rbelL9nzy3Wsig6gNtgVucYwPTnyo+3UjxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU5uOUKyFQG5HWaeUpyuQ9maW9CZ4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1MjU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AACwMA0GCSqGSIb3DQEBCwUAA4IBAQCScma0FbIt50TMkQdzmMHZ8jeL57l03fWL
34eMIcnVgRJ3XQS7tuoFhR3ogCGwY9FiDBe9XGIlQZxVJ0LqduXLt2Q2z9tLACug
ytqPyU8jlB9KOXmvRXjSfQneL1ulw9SgY8hkiDT2sTulk7CL4TByg+RzFTepKhb0
3XM1l7H6yhSGdlTcCmDECa9UgWLneSMl3k0yAyj7ueHDi0wGzJ9K+AQKL6cDbiDk
q8JZiUxTmR8I0Y7rYE59wSwShFwJ7DAkjTIPG4uJ7uMt2KlFtZ+n3L6VXUaAH+XY
qgBiJ3dR57sC3y3m6lI/CeesTdsFa3Bq8pQA4BNN4xe5UH/kdDWG
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:53 2026 by rpki-client