Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: IE0NX+G4xJCqqEVN2Bx2Img7VRypgjCgcdUgA6HdVZo=
Subject key identifier: DD:2C:43:BC:8B:44:37:B1:CB:EC:9F:F5:9D:77:34:38:16:E0:6C:6E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 23F7EF3BA0FA28CF03BF3B92BA39EB3E887D0334
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa
Signing time: Tue 03 Jun 2025 13:23:46 +0000
ROA not before: Tue 03 Jun 2025 13:18:46 +0000
ROA not after: Tue 02 Jun 2026 13:23:46 +0000
asID: 215287
IP address blocks: 91.206.2.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f7:ef:3b:a0:fa:28:cf:03:bf:3b:92:ba:39:eb:3e:88:7d:03:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 3 13:18:46 2025 GMT
Not After : Jun 2 13:23:46 2026 GMT
Subject: CN=DD2C43BC8B4437B1CBEC9FF59D77343816E06C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:32:fa:ed:36:45:93:96:29:88:30:5b:53:
a1:ce:41:ba:b7:dd:0f:4f:51:2d:67:10:a9:ff:21:
03:d1:c6:06:e3:63:5b:d9:57:a3:ee:86:72:48:67:
66:5a:bf:57:41:fc:3c:96:73:3d:eb:c6:95:7b:a8:
e3:72:bf:2e:0c:f7:c7:8c:c2:40:f2:10:ee:32:75:
42:c4:7b:3c:37:bd:0d:01:33:be:45:0e:58:bb:49:
81:3c:32:4a:26:a2:3b:84:8c:e8:72:32:d7:1e:c6:
5c:3a:58:1f:32:58:f3:2d:18:61:45:3e:52:d0:14:
fe:94:4f:9d:19:9b:0b:43:83:7e:67:c8:ea:53:64:
8d:5b:07:65:6f:fa:b1:b3:b5:64:ce:b1:08:ac:00:
ad:06:b9:85:a6:b9:cf:b3:a0:75:82:51:d3:0a:94:
26:db:3f:2b:45:70:57:2b:3f:73:4d:56:1b:fa:44:
5a:12:8d:a4:94:0b:52:b6:76:f2:c3:b4:bd:10:28:
9d:8c:5b:2d:86:54:64:aa:2d:d1:9f:ee:08:02:35:
d1:49:3a:7e:ee:e0:ee:30:d1:1a:47:0c:89:78:32:
66:76:16:93:29:0e:91:a1:2b:50:53:7b:5c:1c:e4:
38:dd:2b:bd:8c:e5:25:10:ab:08:63:bd:56:cf:03:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:43:BC:8B:44:37:B1:CB:EC:9F:F5:9D:77:34:38:16:E0:6C:6E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:00:c1:6e:4e:02:05:ab:1f:a9:54:06:25:ca:11:50:58:83:
e1:c6:81:ac:1d:72:2b:11:92:5d:fc:d4:00:df:60:f6:60:b8:
f5:d5:20:42:c5:6d:20:23:55:ea:5b:dc:74:10:00:45:ec:35:
f2:7c:1c:bc:ad:a1:74:96:5a:46:08:a7:23:7f:fb:94:cc:b1:
c9:5e:2e:bc:58:57:f6:e6:ea:0e:f6:bc:9c:e7:bc:30:3e:a1:
f1:f1:67:ab:7d:e0:6d:2b:09:c0:b6:b2:27:11:ab:a0:3f:39:
d3:a2:13:5a:4b:a2:9c:e9:fc:cd:25:4a:2b:c7:ca:09:e2:45:
d9:ab:11:9e:86:13:13:ca:02:2b:fe:87:88:0c:42:ba:95:16:
fd:30:52:7a:65:23:ca:ac:2f:8d:1e:04:2c:27:74:75:f8:1e:
69:d7:4d:7b:4b:69:9f:7b:a2:73:e5:ce:e1:02:f6:5a:39:aa:
d3:f0:b6:cb:e9:c5:34:fb:fb:fa:45:5a:70:6b:de:61:a4:44:
b3:91:08:3e:b7:91:23:33:f1:1c:ae:00:e1:96:b7:d2:db:1b:
44:85:f7:52:65:fd:c9:bd:46:76:f5:c7:35:6c:c1:0b:fe:8c:
99:8e:4d:07:13:89:a5:5c:a5:e9:31:1a:d5:d0:d7:66:35:27:
e5:69:ad:ea
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUI/fvO6D6KM8DvzuSujnrPoh9AzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA2MDMxMzE4NDZaFw0yNjA2MDIxMzIzNDZaMDMxMTAvBgNV
BAMTKEREMkM0M0JDOEI0NDM3QjFDQkVDOUZGNTlENzczNDM4MTZFMDZDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXjL67TZFk5YpiDBbU6HOQbq3
3Q9PUS1nEKn/IQPRxgbjY1vZV6PuhnJIZ2Zav1dB/DyWcz3rxpV7qONyvy4M98eM
wkDyEO4ydULEezw3vQ0BM75FDli7SYE8MkomojuEjOhyMtcexlw6WB8yWPMtGGFF
PlLQFP6UT50ZmwtDg35nyOpTZI1bB2Vv+rGztWTOsQisAK0GuYWmuc+zoHWCUdMK
lCbbPytFcFcrP3NNVhv6RFoSjaSUC1K2dvLDtL0QKJ2MWy2GVGSqLdGf7ggCNdFJ
On7u4O4w0RpHDIl4MmZ2FpMpDpGhK1BTe1wc5DjdK72M5SUQqwhjvVbPA8ZhAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU3SxDvItEN7HL7J/1nXc0OBbgbG4wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE1Mjg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW84C
AwQAwpMEMA0GCSqGSIb3DQEBCwUAA4IBAQCaAMFuTgIFqx+pVAYlyhFQWIPhxoGs
HXIrEZJd/NQA32D2YLj11SBCxW0gI1XqW9x0EABF7DXyfBy8raF0llpGCKcjf/uU
zLHJXi68WFf25uoO9ryc57wwPqHx8WerfeBtKwnAtrInEaugPznTohNaS6Kc6fzN
JUorx8oJ4kXZqxGehhMTygIr/oeIDEK6lRb9MFJ6ZSPKrC+NHgQsJ3R1+B5p1017
S2mfe6Jz5c7hAvZaOarT8LbL6cU0+/v6RVpwa95hpESzkQg+t5EjM/EcrgDhlrfS
2xtEhfdSZf3JvUZ29cc1bMEL/oyZjk0HE4mlXKXpMRrV0NdmNSflaa3q
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:14:32 2025 by rpki-client