Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215638.roa
File: AS215638.roa (raw, json)
Hash identifier: dC3AkVJD9d7K9Hc6rAOBZk/+vvHmA7F1gB07z1simWc=
Subject key identifier: 06:6F:8A:82:A0:A5:92:FE:78:EB:6B:33:75:8D:53:53:30:6A:CC:B9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5EA483AB1424350821FC7249FBD1E981BB2E8AB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215638.roa
Signing time: Mon 25 Aug 2025 07:06:49 +0000
ROA not before: Mon 25 Aug 2025 07:01:49 +0000
ROA not after: Mon 24 Aug 2026 07:06:49 +0000
asID: 215638
IP address blocks: 82.27.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a4:83:ab:14:24:35:08:21:fc:72:49:fb:d1:e9:81:bb:2e:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 07:01:49 2025 GMT
Not After : Aug 24 07:06:49 2026 GMT
Subject: CN=066F8A82A0A592FE78EB6B33758D5353306ACCB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:e7:98:fc:e8:ed:7a:3c:74:c2:28:5d:15:
3b:37:ff:3c:92:4a:68:5d:01:4b:89:7d:11:84:00:
8f:1d:50:e3:c6:fe:2f:ae:39:0a:38:9e:1f:67:19:
f9:1a:1b:db:ac:49:59:da:1e:b1:0e:72:2c:2d:4e:
e6:0f:08:fb:51:84:5f:e7:c8:1c:a5:dc:d0:97:76:
a9:fa:18:2f:5e:2d:1b:3b:e8:8d:23:61:e6:56:63:
ef:21:53:f3:1c:2a:ee:44:c1:e7:af:e4:52:5d:44:
67:55:b6:26:23:4b:c4:8c:bd:08:cb:24:51:a3:34:
d6:60:d6:ef:17:dd:e8:61:61:fd:d7:1b:04:d2:5c:
f5:66:73:c6:da:46:b6:b5:b5:87:e1:a1:c3:c5:15:
72:3c:c0:d3:9a:37:df:68:86:92:13:d8:73:85:29:
55:bb:9f:7a:aa:bd:b9:6d:f0:3c:60:71:2d:95:26:
05:51:8d:13:2d:4a:b7:6d:f6:67:a3:c2:a7:8d:77:
8c:4f:94:5a:c8:4f:8b:68:3a:56:52:8a:d1:a5:f7:
80:e4:d8:df:f5:4c:37:f8:25:f4:ee:40:13:e7:d5:
ad:75:dc:03:56:ad:00:24:9c:ff:29:e1:dc:55:de:
be:dd:82:c9:08:d4:32:4e:55:74:0c:7c:ea:8c:3b:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6F:8A:82:A0:A5:92:FE:78:EB:6B:33:75:8D:53:53:30:6A:CC:B9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ef:ed:52:fd:0a:b4:dc:07:7a:0d:19:7f:af:6b:ad:68:9d:
ec:a1:5f:d6:e3:11:62:7c:d2:57:9c:03:1d:59:39:9e:8e:39:
55:05:53:2b:5f:d7:7b:fd:c9:e8:52:a4:e1:a8:f9:aa:ab:74:
03:6d:d8:62:44:64:61:85:f2:78:f7:88:bd:63:3c:fc:c0:1b:
04:e4:df:cf:86:f9:f6:ad:83:18:24:fb:e8:f0:8b:63:bf:3d:
dc:5a:22:a6:0a:65:87:32:2c:c4:e6:75:a0:cf:5a:cb:c3:9e:
0a:89:58:00:16:65:3b:f2:92:6f:89:e0:ee:97:87:66:ae:63:
8c:55:80:91:28:61:2e:31:3f:52:9c:2e:b4:3d:ea:56:dc:f1:
98:23:4a:5e:c2:3a:12:51:10:34:99:f6:82:1d:3f:cb:14:a8:
22:10:c9:03:1b:73:da:e3:a0:8d:f1:6c:6e:cc:61:66:a4:bd:
4c:62:6f:ee:17:d8:2a:5c:af:4c:4c:60:76:ce:d6:e0:51:1f:
d4:ab:12:45:9a:82:a4:dc:41:a3:39:44:a4:86:21:c3:cc:b9:
ae:50:42:20:7f:d7:95:16:3a:c5:70:78:ae:6d:12:93:48:92:
e8:78:92:7d:20:f4:08:fa:59:b1:d7:d2:de:06:86:37:3d:7d:
95:d6:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:46:07 2025 by rpki-client