Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215017.roa
File: AS215017.roa (raw, json)
Hash identifier: UM/3+/O9OZ7QRO3EfQKsQA2/dmunqVj1hnHl1I6NBKo=
Subject key identifier: C1:E3:CE:68:99:8A:58:94:5D:FC:EF:AE:E7:B4:CA:7C:50:7D:13:6D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 30CBAD9B5F4A7E2443E740FE2B77F9C43C9C2D93
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215017.roa
Signing time: Tue 18 Aug 2026 21:09:04 +0000
ROA not before: Tue 18 Aug 2026 21:04:04 +0000
ROA not after: Tue 17 Aug 2027 21:09:04 +0000
asID: 215017
IP address blocks: 2a0f:85c1:ce7::/48 maxlen: 48
2a0f:85c1:d50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:cb:ad:9b:5f:4a:7e:24:43:e7:40:fe:2b:77:f9:c4:3c:9c:2d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 21:04:04 2026 GMT
Not After : Aug 17 21:09:04 2027 GMT
Subject: CN=C1E3CE68998A58945DFCEFAEE7B4CA7C507D136D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:eb:46:93:35:e6:ca:d4:90:30:f2:aa:b7:
a7:d5:a3:10:dd:f7:bb:cf:b5:ab:6d:ac:88:18:2b:
b9:74:69:74:05:f9:31:e0:d0:6a:3e:32:9e:52:fb:
69:10:8b:50:03:44:3a:b6:1f:50:e4:8e:b2:3e:ab:
00:0f:9f:07:35:49:e7:08:7f:78:37:3d:ea:53:13:
7a:85:60:f1:4e:63:d9:73:b8:06:4f:f0:be:47:78:
00:ec:48:20:e3:c1:22:ce:ba:af:ee:51:ce:07:f2:
97:58:6a:59:ec:c6:b5:16:b3:52:5a:cc:3e:c2:47:
dc:50:56:1b:20:9b:c2:8f:4e:3a:a1:aa:02:44:7a:
fb:d9:37:ac:fe:65:b9:ad:84:3b:14:24:bb:1f:25:
b1:22:cd:f9:d8:dc:28:6c:aa:6e:78:dd:c7:3a:8a:
de:cd:4b:b2:be:6d:a1:3c:6f:44:2f:ef:9f:23:05:
12:1a:fd:78:ed:1b:75:d5:9e:49:e3:c2:f2:74:d0:
06:d1:aa:24:5e:e5:bb:df:5e:19:b7:1b:56:b2:75:
4d:3d:ce:0b:87:02:d0:6c:f9:72:39:40:b1:d5:7c:
f1:91:44:28:79:a2:7c:a1:9e:b5:1d:79:31:c0:f5:
b2:6c:38:e9:29:93:4a:b1:79:14:9e:b3:7e:60:a0:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:CE:68:99:8A:58:94:5D:FC:EF:AE:E7:B4:CA:7C:50:7D:13:6D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce7::/48
2a0f:85c1:d50::/44
Signature Algorithm: sha256WithRSAEncryption
e8:e7:12:6b:93:7d:b5:9f:4b:82:d0:25:71:2a:da:be:d9:10:
bd:18:56:33:b6:d8:d3:7f:fd:ee:82:9f:13:75:db:1f:b4:ce:
b5:cb:33:4e:74:58:64:d1:23:ae:96:19:a9:29:a4:05:54:bf:
29:f7:b9:42:47:be:3c:ca:6c:e6:38:6c:9c:8c:86:7b:e3:18:
49:4f:3a:e2:8b:52:ff:6c:42:5d:fb:4f:97:7e:6e:f6:00:a7:
26:de:26:90:05:c3:81:57:5d:5e:fa:dd:a0:d0:7e:92:8c:5f:
78:e7:ff:78:29:d2:b4:86:b0:97:15:2c:28:82:c9:20:0e:dc:
87:01:76:d4:de:31:4c:e6:09:91:ff:5a:da:bb:50:b5:7e:b7:
5a:b9:fd:6b:7a:ac:5f:c2:2f:1b:9c:86:50:10:b7:eb:3f:7e:
96:7d:1f:7f:40:ed:b0:2c:2b:a5:b7:bc:3e:70:2c:56:68:ea:
8e:ae:59:33:1d:d7:aa:0d:e5:8b:51:78:f7:9c:84:8c:f9:e6:
b2:ba:7f:11:71:43:ce:6f:cc:e2:2e:67:a1:2e:1d:ae:ba:45:
ac:4c:be:64:5a:0f:a3:2d:1c:e8:69:76:22:84:54:d7:04:fd:
73:fd:55:18:80:72:1b:b1:b2:f1:0f:a5:23:30:b1:59:a9:66:
02:40:cd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:59:30 2026 by rpki-client