Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64515.roa
File: AS64515.roa (raw, json)
Hash identifier: JODo25vNMc2HSQ6dM6AYadtkEufLr0jkjvpffPz/UYw=
Subject key identifier: 02:2B:38:E4:7F:32:6A:0A:23:9B:A1:77:39:66:AB:71:70:79:FE:47
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 10F69078331D00F298B73170AF13A3AD610F4C49
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64515.roa
Signing time: Fri 19 Jun 2026 07:58:20 +0000
ROA not before: Fri 19 Jun 2026 07:53:20 +0000
ROA not after: Fri 18 Jun 2027 07:58:20 +0000
asID: 64515
IP address blocks: 2a13:9500:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f6:90:78:33:1d:00:f2:98:b7:31:70:af:13:a3:ad:61:0f:4c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 19 07:53:20 2026 GMT
Not After : Jun 18 07:58:20 2027 GMT
Subject: CN=022B38E47F326A0A239BA1773966AB717079FE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:f5:45:f1:cb:37:7a:54:99:fa:c6:8f:fd:
e1:ea:1b:57:07:e4:ae:e3:b9:e7:17:a2:23:68:b9:
60:ad:85:a9:78:81:86:fa:47:7d:6b:27:01:b3:1e:
47:7f:86:3e:cc:76:dd:c6:5f:4f:38:ec:70:cf:9f:
7f:5b:21:6b:02:24:69:cd:db:dd:15:30:aa:ea:f9:
df:2a:17:0e:f4:b4:69:d9:4f:11:81:41:e2:5c:57:
81:dc:0b:94:d9:25:e8:c7:6f:51:05:13:28:3c:d6:
27:20:f2:71:5d:09:61:e0:01:4e:2a:ec:e2:67:38:
5b:91:e9:26:70:b9:a6:d0:20:ce:47:ba:93:63:39:
a6:04:27:4d:94:8b:2b:fc:2a:e9:63:10:48:a3:94:
57:cf:8e:b2:f7:71:e8:4c:9b:50:36:8b:8e:a2:d9:
78:bb:09:88:fd:38:7d:f3:cd:53:c0:dc:85:66:96:
e7:b1:59:0d:f4:d8:2e:d7:32:95:14:29:e2:11:26:
27:d1:eb:06:b2:d5:c5:09:a6:62:52:f3:a9:7f:cc:
37:a3:38:a3:74:1d:3c:7b:79:43:b4:fd:69:e8:64:
b1:13:af:42:cc:c0:a0:69:32:4a:15:67:2c:0f:e0:
b1:3b:69:c0:6b:c0:a8:c5:86:c3:39:86:ff:e9:9e:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:38:E4:7F:32:6A:0A:23:9B:A1:77:39:66:AB:71:70:79:FE:47
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:37::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e3:d8:44:dd:87:a9:59:33:11:53:49:95:fb:b8:51:9f:71:
28:04:e1:cb:34:07:ec:04:3a:4a:33:42:0e:33:2c:3c:88:51:
89:f7:04:56:bd:5e:07:c4:64:7d:6a:04:89:ac:a7:2c:61:09:
7e:ca:fd:45:c7:5b:fc:74:59:ba:a0:da:5f:c2:70:5a:69:49:
75:0e:77:01:c7:1a:2e:21:0d:3e:2a:4a:0a:08:9f:f4:41:24:
89:74:d1:3d:d0:55:cc:8f:97:60:7e:fd:c4:99:ba:58:5e:6f:
85:23:9f:b4:fb:d1:a3:0a:82:4c:0c:82:ed:19:56:a6:82:a6:
2b:ac:28:2d:f1:cb:c9:c3:17:af:1f:71:67:cb:00:59:48:2a:
d7:86:b3:8d:d8:52:76:44:a7:7f:80:fa:f6:e0:7e:26:9d:a7:
9b:2a:7a:39:f1:42:10:b7:b1:74:83:03:3d:d5:79:93:e6:b7:
ca:77:bb:6f:33:e4:8e:41:74:ec:5a:a0:35:7b:ea:36:2a:2b:
31:f3:6c:dc:c2:2b:28:b6:38:47:bd:d3:59:17:3a:9a:75:83:
c5:94:b7:bd:7d:61:33:f3:99:76:7a:fd:b0:5b:b3:f3:d3:c7:
b6:c1:48:47:61:87:32:6e:f5:19:ef:8f:6b:ed:27:5a:14:e0:
66:68:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 05:10:53 2026 by rpki-client