Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215935.roa
File: AS215935.roa (raw, json)
Hash identifier: dteiF0/f7bfuJc9yxARMTiIudX6CD5PcQBbEygKhDYU=
Subject key identifier: C7:A4:6D:6F:DC:D5:88:D7:87:7C:6B:9B:FB:74:32:8A:D4:0B:99:89
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 64F41ED42EA760FB31C8AA1AB6F8918A65CF24C7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215935.roa
Signing time: Thu 18 Jun 2026 14:17:23 +0000
ROA not before: Thu 18 Jun 2026 14:12:23 +0000
ROA not after: Thu 17 Jun 2027 14:17:23 +0000
asID: 215935
IP address blocks: 178.83.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f4:1e:d4:2e:a7:60:fb:31:c8:aa:1a:b6:f8:91:8a:65:cf:24:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 18 14:12:23 2026 GMT
Not After : Jun 17 14:17:23 2027 GMT
Subject: CN=C7A46D6FDCD588D7877C6B9BFB74328AD40B9989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:d7:25:92:07:56:a5:84:13:ad:f7:9f:4f:
93:00:7c:bd:9b:c7:8f:ab:a7:07:5d:9d:5d:f6:af:
80:05:94:51:83:6d:e1:76:f5:17:83:85:37:a0:2a:
45:3d:8f:7e:0a:bf:91:61:9c:5a:4c:e5:38:51:94:
79:ba:76:41:d1:c4:49:08:f0:fe:6c:5c:ee:8d:27:
81:15:c9:b2:b0:83:83:34:8c:00:e6:27:bf:20:57:
cb:60:21:4d:c0:eb:41:58:66:2d:68:4e:ec:94:6f:
df:dd:af:19:bf:d9:d8:9a:36:f2:1a:6c:a9:e3:0e:
e2:a0:ff:79:c2:39:0a:8f:1b:67:d6:0d:5d:18:5e:
a8:54:d9:22:53:27:a6:62:a8:f7:3b:2f:ef:4d:77:
b7:e0:85:98:75:94:66:62:00:6e:16:b9:99:1e:24:
cf:2d:5b:2d:3c:47:ac:9e:b0:59:de:67:9d:5e:98:
11:e3:d7:a2:a0:23:17:70:80:41:cd:53:14:7f:8c:
99:1a:ba:ce:57:28:93:e3:00:5b:bf:3d:4d:57:01:
a5:c6:54:1f:95:91:2d:9d:7f:90:2e:28:37:d0:d3:
26:f5:fb:bc:51:40:4b:00:74:69:c5:66:8a:a9:38:
96:28:8e:61:06:06:e8:7d:d9:66:52:1b:9c:80:74:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:6D:6F:DC:D5:88:D7:87:7C:6B:9B:FB:74:32:8A:D4:0B:99:89
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.182.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b5:cc:52:93:93:c3:8c:2a:7f:e3:6a:ed:f8:d0:20:8d:e3:
db:ba:a1:51:57:d3:df:c1:d1:e0:63:72:81:07:df:bc:e9:ce:
93:da:12:d3:5b:17:56:46:8b:bd:36:8f:26:91:d8:53:7c:e4:
8e:31:91:a9:ec:47:64:a0:e3:4e:ea:a2:64:fd:1e:96:48:36:
f6:50:8b:1c:5b:34:db:af:16:6e:64:04:45:34:92:ae:03:12:
25:35:4a:ba:ae:aa:2e:2b:17:16:d7:2e:f1:8a:7f:34:b0:03:
20:17:62:69:be:98:61:c3:ac:25:e5:61:89:55:52:a8:bf:d3:
e5:e9:7e:d0:b8:6b:fa:60:fc:28:e9:49:1d:67:3b:84:53:d7:
ff:2e:27:b1:b0:86:ef:a6:26:2c:21:d7:40:51:95:47:f4:19:
eb:ee:11:e3:85:58:b0:1a:a0:84:0c:1d:1f:c7:5b:83:1a:80:
53:cd:c7:bb:ef:03:62:a7:f8:3c:6f:1b:44:61:a9:d2:48:d0:
c9:14:ea:7d:ad:91:43:f2:2b:85:fc:ff:16:a5:93:97:22:6a:
77:2a:2b:56:f0:4b:2b:26:29:68:e1:2a:e9:a4:6b:28:24:c9:
3b:4c:91:ee:47:b5:42:38:e1:30:53:5d:20:5f:01:42:39:db:
6c:1d:25:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZPQe1C6nYPsxyKoatviRimXPJMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MTgxNDEyMjNaFw0yNzA2MTcxNDE3MjNaMDMxMTAvBgNV
BAMTKEM3QTQ2RDZGRENENTg4RDc4NzdDNkI5QkZCNzQzMjhBRDQwQjk5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCodclkgdWpYQTrfefT5MAfL2b
x4+rpwddnV32r4AFlFGDbeF29ReDhTegKkU9j34Kv5FhnFpM5ThRlHm6dkHRxEkI
8P5sXO6NJ4EVybKwg4M0jADmJ78gV8tgIU3A60FYZi1oTuyUb9/drxm/2diaNvIa
bKnjDuKg/3nCOQqPG2fWDV0YXqhU2SJTJ6ZiqPc7L+9Nd7fghZh1lGZiAG4WuZke
JM8tWy08R6yesFneZ51emBHj16KgIxdwgEHNUxR/jJkaus5XKJPjAFu/PU1XAaXG
VB+VkS2df5AuKDfQ0yb1+7xRQEsAdGnFZoqpOJYojmEGBuh92WZSG5yAdHxvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUx6Rtb9zViNeHfGub+3QyitQLmYkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1OTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBslO2
MA0GCSqGSIb3DQEBCwUAA4IBAQBhtcxSk5PDjCp/42rt+NAgjePbuqFRV9PfwdHg
Y3KBB9+86c6T2hLTWxdWRou9No8mkdhTfOSOMZGp7EdkoONO6qJk/R6WSDb2UIsc
WzTbrxZuZARFNJKuAxIlNUq6rqouKxcW1y7xin80sAMgF2Jpvphhw6wl5WGJVVKo
v9Pl6X7QuGv6YPwo6UkdZzuEU9f/LiexsIbvpiYsIddAUZVH9Bnr7hHjhViwGqCE
DB0fx1uDGoBTzce77wNip/g8bxtEYanSSNDJFOp9rZFD8iuF/P8WpZOXImp3KitW
8EsrJilo4SrppGsoJMk7TJHuR7VCOOEwU10gXwFCOdtsHSUe
-----END CERTIFICATE-----
Generated at Fri Jun 19 02:17:44 2026 by rpki-client