Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: kIX9dKSYDGJmJVnA3UHHIcicIZkUsV0lvh4mLn7AI/o=
Subject key identifier: 54:16:32:E8:DA:4F:EB:D4:46:0C:32:EA:29:3C:0A:9B:8E:1E:8E:53
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 222945986F7D7631D13402838FBF9ACD350D742A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215039.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 215039
IP address blocks: 2a0f:85c1:3c9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:29:45:98:6f:7d:76:31:d1:34:02:83:8f:bf:9a:cd:35:0d:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=541632E8DA4FEBD4460C32EA293C0A9B8E1E8E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:2e:ac:eb:30:95:dd:dd:ce:7d:34:2e:8c:
0b:ea:d7:4e:5e:01:63:9f:38:b2:1c:8e:b0:e6:18:
97:11:e5:e0:b9:18:e6:99:2a:96:54:b7:db:a4:62:
c8:a0:66:12:fc:71:2d:2a:6f:90:3f:ea:11:8a:a0:
6b:6d:8e:61:6c:a3:7a:ef:d4:3e:be:c0:6b:d8:5d:
a8:e1:74:21:53:ad:46:59:49:0c:23:f8:ab:4d:69:
b9:7b:3a:30:3e:ae:a5:63:15:67:ba:24:42:55:8c:
30:57:42:25:8f:2e:9b:d9:2d:f6:9b:87:c8:5b:48:
e8:0d:5d:89:e6:84:0b:fb:44:75:51:32:60:7c:06:
0f:99:c8:a9:62:6a:73:4c:18:88:fc:84:d0:41:1e:
f1:1b:3c:0b:ad:f0:f1:4c:5b:19:6c:02:dc:62:71:
6b:37:dc:2a:f6:68:e0:e9:82:42:a6:5d:6b:34:c0:
79:bc:c7:9d:2c:a0:22:e1:c1:89:db:cd:c0:b6:eb:
24:be:20:7f:43:7e:5e:d2:63:7a:a6:08:4d:98:0b:
79:16:87:3f:38:6f:45:f8:20:69:94:53:74:32:d3:
42:e6:9b:e2:ed:a8:6e:76:7f:f1:fb:d4:3f:b2:ba:
be:60:bb:82:3b:73:fc:c1:2f:78:6d:24:df:3c:de:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:32:E8:DA:4F:EB:D4:46:0C:32:EA:29:3C:0A:9B:8E:1E:8E:53
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c9::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ca:f5:2b:11:6c:fc:73:c4:b6:d9:3f:cb:86:81:5b:d3:65:
1e:a8:60:66:f6:e1:65:81:53:6e:eb:4f:c6:8d:3b:2c:49:84:
13:66:fa:6b:56:4c:7a:2b:77:7c:98:95:67:c3:eb:01:2d:be:
8f:88:73:6c:f8:ec:50:31:98:35:8f:13:f1:1c:bc:4c:b1:24:
5f:2b:af:a2:a6:02:5d:5f:6d:a7:6e:82:4b:81:bb:c2:4d:67:
5f:c7:74:d6:da:31:37:36:c7:55:8b:79:82:e3:8b:3c:50:57:
e9:5d:97:0c:17:d7:d4:fb:4a:7b:e8:00:83:1e:27:3f:f3:3d:
3e:6b:c0:c8:0d:d3:f0:f0:68:0d:13:2d:80:11:5b:61:41:06:
a8:f9:16:64:cb:7a:62:46:c2:f7:19:45:7f:8a:ed:ad:f9:60:
a9:52:22:a0:98:eb:87:4c:19:37:49:85:30:07:52:7b:42:86:
2a:f7:08:84:28:ea:f4:0b:9e:4b:2d:32:44:c4:38:b4:c2:18:
30:6f:78:02:30:fd:cb:38:2f:2d:a1:81:71:06:42:33:22:12:
d9:3d:3f:6a:98:72:2d:53:d4:de:1f:7c:a2:3f:e9:23:f0:c4:
c6:a8:a1:58:bd:cf:d7:4a:a7:9b:86:0f:37:40:3b:a6:d8:f8:
cd:15:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:13 2026 by rpki-client