Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48215.roa
File: AS48215.roa (raw, json)
Hash identifier: 8KHpude8BeLOYrqT8skm5TgKoPTdGmztgQpqOV+qdR4=
Subject key identifier: F7:86:87:3A:2C:9B:48:26:F6:C8:49:48:39:4A:F5:79:EA:92:BB:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2505E436E619A5C9A35394B237F411780C5CD04D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48215.roa
Signing time: Tue 02 Jun 2026 18:47:24 +0000
ROA not before: Tue 02 Jun 2026 18:42:24 +0000
ROA not after: Tue 01 Jun 2027 18:47:24 +0000
asID: 48215
IP address blocks: 2a13:9500:a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:05:e4:36:e6:19:a5:c9:a3:53:94:b2:37:f4:11:78:0c:5c:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 18:42:24 2026 GMT
Not After : Jun 1 18:47:24 2027 GMT
Subject: CN=F786873A2C9B4826F6C84948394AF579EA92BB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:e2:73:ef:2a:32:af:d7:56:42:88:8f:23:
c2:72:48:f9:3d:8f:cd:a6:ee:25:f1:20:a5:21:83:
4c:4b:8e:70:2f:df:ec:b8:00:b4:19:c6:c0:4e:5d:
16:e6:31:bc:c6:9f:3c:8f:e6:9f:45:bd:da:1f:7a:
09:67:0a:b6:59:9b:10:37:05:4d:c0:06:48:5e:4e:
15:47:82:cc:3a:f1:1b:45:14:33:f3:b3:59:61:49:
d3:29:e9:43:fe:5c:34:ab:c6:6c:5d:6f:63:69:52:
f6:3d:80:33:a8:35:e1:57:6d:dc:aa:30:53:de:d4:
3d:57:13:ce:a7:4c:ec:a6:2d:b1:60:d8:a7:a8:0b:
30:5c:40:a0:42:24:eb:d2:e4:88:26:41:ff:ef:3a:
78:33:da:58:5a:5c:9d:8d:17:d1:d7:0f:7b:04:93:
07:cb:d3:16:3b:23:1f:f7:78:b7:2c:5f:f5:a3:f0:
c8:3e:73:7a:d9:95:32:3d:1b:6a:65:92:da:b7:d5:
86:12:89:95:31:03:34:74:78:83:e2:f9:35:66:54:
63:97:02:09:c1:37:5a:8d:bf:cc:30:20:06:8b:d0:
4a:f3:23:23:5e:dd:79:d8:e4:65:46:bb:ea:3a:00:
6f:19:36:ad:21:2d:dc:76:a6:5c:d2:f6:1d:58:71:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:87:3A:2C:9B:48:26:F6:C8:49:48:39:4A:F5:79:EA:92:BB:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a1::/48
Signature Algorithm: sha256WithRSAEncryption
6b:be:cd:e4:9b:e2:e4:80:3d:56:fc:fa:9b:4d:84:35:e1:a2:
7c:4d:33:16:cc:08:bc:ed:85:68:b7:51:e7:92:07:64:52:f3:
70:bf:de:22:b2:a6:01:5d:a7:7a:1c:31:0f:68:ac:6d:08:50:
be:37:3c:df:00:ba:5c:7c:f3:88:cd:06:d7:ad:2a:7c:02:5b:
50:23:64:81:9e:b7:15:fe:84:46:be:4c:3a:2d:44:c6:44:9f:
69:32:57:fa:62:e5:29:64:a0:fa:3a:d7:5a:35:bc:17:a2:dd:
9f:30:fc:bb:51:40:ec:67:01:2d:9b:ca:88:99:62:8c:ba:53:
1f:82:79:c9:c8:21:9e:1d:63:ad:f8:cc:e3:27:42:46:67:98:
43:5f:50:2c:1e:bc:af:e6:d7:14:c4:78:e4:46:08:ea:b4:7f:
eb:10:c2:cf:ea:85:fb:04:e3:35:07:e1:17:9f:e4:99:8a:b0:
85:d0:37:f8:d3:af:ce:3f:7b:93:36:d5:4a:18:32:1e:25:1d:
50:98:18:62:cf:73:e3:af:b0:7a:3a:c3:76:27:24:01:10:9a:
b3:c2:cf:80:f8:c4:01:b0:a5:f5:20:28:72:89:af:de:63:94:
59:ee:c3:1b:64:c4:6e:98:10:52:dd:b2:50:72:d0:b4:76:b1:
31:18:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:11:32 2026 by rpki-client