Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9515.roa
File: AS9515.roa (raw, json)
Hash identifier: Q7WkG8KqPSJ0qhRzl8kDUEFVjlhXp1xv6CBxyWiCSWg=
Subject key identifier: 41:48:9C:B6:B7:B6:D1:5D:80:67:5F:DF:E0:2E:6B:C4:85:E4:0F:C3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D9D8F96AB6F6E16CDC6E08DA1E0FD903C2C0C84
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9515.roa
Signing time: Mon 24 Aug 2026 14:24:45 +0000
ROA not before: Mon 24 Aug 2026 14:19:45 +0000
ROA not after: Mon 23 Aug 2027 14:24:45 +0000
asID: 9515
IP address blocks: 82.38.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9d:8f:96:ab:6f:6e:16:cd:c6:e0:8d:a1:e0:fd:90:3c:2c:0c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 24 14:19:45 2026 GMT
Not After : Aug 23 14:24:45 2027 GMT
Subject: CN=41489CB6B7B6D15D80675FDFE02E6BC485E40FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:79:4d:fd:42:2b:57:62:6a:cc:c3:97:e3:
ee:ff:2c:59:ac:37:d1:55:10:11:2b:b3:f0:d3:28:
7e:7a:59:54:f0:87:0c:ee:c6:f4:15:3a:e5:5c:36:
75:cb:2f:10:da:95:66:0d:b2:6d:fa:52:c7:13:8f:
38:b6:6f:0a:22:4f:22:77:3a:ea:71:d9:b4:fe:4e:
5b:83:0d:66:c7:28:89:9d:39:f3:f6:6a:b0:4a:c1:
09:60:94:2c:25:87:c8:d3:89:1a:16:8d:b1:c1:66:
7d:db:bb:f8:da:c3:6a:ca:6c:09:7a:d9:4d:af:f1:
60:ae:d8:85:0c:f4:f1:93:a9:1a:d2:16:e5:19:26:
28:f4:6b:b9:ba:1c:47:9b:bc:33:ab:aa:dc:5b:01:
9e:7d:48:85:c8:0a:85:a4:75:85:3b:eb:5d:71:08:
a1:3b:cb:ac:1e:15:c6:97:c6:38:85:cc:29:29:ae:
96:79:56:d7:9f:d9:a9:d3:59:e1:cf:1d:d9:86:2a:
c4:7d:ae:05:f8:67:ef:64:c3:01:53:0c:19:47:38:
65:d3:16:1e:77:6b:34:d8:01:20:f7:6c:c4:20:c8:
31:d9:2b:a6:fc:81:b0:a1:75:05:df:91:82:a5:b8:
8c:4b:e4:79:f5:86:fa:17:6e:0a:04:2f:ce:3f:4e:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:9C:B6:B7:B6:D1:5D:80:67:5F:DF:E0:2E:6B:C4:85:E4:0F:C3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.116.0/22
Signature Algorithm: sha256WithRSAEncryption
98:74:0f:b2:bf:d7:10:c5:1f:5f:52:e4:5d:07:f0:7b:ed:b1:
f1:c0:21:ba:8c:48:8f:da:12:6d:da:d7:7e:23:33:be:61:75:
50:7c:d0:a3:5f:1e:87:c7:1c:99:cf:d4:d2:30:39:8f:81:b9:
d5:ae:22:bc:2a:08:e9:89:ee:c8:b0:62:8b:96:30:fd:4f:12:
c6:95:38:64:db:10:84:14:0a:d0:fa:d5:58:61:85:ae:ba:dd:
dd:69:ad:84:74:86:46:6c:b6:20:5f:0d:34:6d:32:58:2b:42:
3f:9b:ef:09:c0:51:f5:7a:3f:12:d5:83:d0:6c:d6:38:f1:96:
b7:ef:9b:dc:5d:5e:8b:4e:c3:e7:4f:c4:08:ee:48:fc:d3:75:
3a:a9:c8:b2:d2:5b:24:ef:8c:36:3e:a8:b0:7f:0c:53:88:65:
a7:b3:70:b1:b4:63:4a:cb:69:dd:b1:73:b5:36:68:6c:b2:73:
2d:2c:04:28:ad:37:a0:2b:0f:03:94:9d:e0:bc:9f:2c:c5:64:
56:ac:a5:6c:b1:c3:ff:3e:c3:cb:9c:e8:89:4b:74:f7:ee:87:
05:68:9d:65:69:40:2a:2c:1f:85:06:e3:d5:2d:38:5c:f6:5e:
dc:b2:2e:f0:c6:a7:65:8e:cc:87:39:ff:26:3e:48:fe:3a:42:
bc:32:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:41 2026 by rpki-client