Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215062.roa
File: AS215062.roa (raw, json)
Hash identifier: QWt2QeKJEcDgJW6jvNuOG8f2R1jDMWgbk0QP0KpwzdI=
Subject key identifier: 2D:DF:20:01:83:02:52:BF:4E:05:F8:40:7A:E6:22:2F:A5:C6:EB:0B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 118F2638E032A7B4E518B2077CE99523EC1FE24D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215062.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 215062
IP address blocks: 2a0f:85c1:3c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8f:26:38:e0:32:a7:b4:e5:18:b2:07:7c:e9:95:23:ec:1f:e2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=2DDF2001830252BF4E05F8407AE6222FA5C6EB0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:15:f7:70:5b:da:8b:2c:ea:89:5a:ae:27:
2c:74:93:23:d5:23:ea:ef:6e:6b:a5:08:9e:59:68:
23:9c:7d:c8:f1:ef:42:f9:33:c4:94:67:28:03:96:
11:5a:11:2d:05:64:29:6b:70:f7:1c:6e:42:63:fe:
ff:ca:e3:6f:ac:77:61:b1:97:08:ac:7b:61:ef:40:
2c:43:aa:53:43:c9:b6:db:92:fd:95:a9:09:0d:20:
f3:c3:15:74:b6:7e:24:b5:f9:cd:0c:a6:5d:b6:5f:
0e:f1:5d:36:a9:81:57:8d:16:72:31:67:91:b5:2e:
bc:08:f8:76:1f:37:b7:5c:99:e1:c2:22:a7:e5:bf:
61:ba:f3:65:50:16:6c:a8:a4:65:33:c4:e4:3a:eb:
98:6d:d7:69:87:58:6c:75:92:eb:9c:7c:c6:8d:be:
a7:5d:0c:71:2d:29:90:3a:54:97:e8:1c:47:8b:bb:
2e:34:23:f8:e9:4c:13:34:5c:ce:d5:51:3c:d5:27:
fe:ee:6b:0b:79:89:99:c6:26:f9:83:d3:8d:f4:75:
4e:7e:c9:3a:d3:0f:62:28:09:2a:c0:f2:d8:c9:4a:
e3:db:fc:65:33:1d:d9:20:dc:c9:57:80:fe:e3:4d:
7d:37:c5:bd:9f:73:2d:cd:b4:d5:76:a2:1f:0f:36:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:20:01:83:02:52:BF:4E:05:F8:40:7A:E6:22:2F:A5:C6:EB:0B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c7::/48
Signature Algorithm: sha256WithRSAEncryption
5f:65:4b:f5:0f:8f:37:a2:69:ce:56:8b:cd:9e:90:cf:09:2a:
03:62:4b:c4:77:54:89:de:f6:65:97:57:3f:cf:44:a5:4c:ee:
1d:ad:05:92:1a:95:38:9f:05:ec:5b:a3:0e:d2:be:5e:7f:ae:
d5:8b:13:5e:c8:05:d7:78:7b:62:fe:0c:fd:25:00:c0:24:0a:
60:36:fd:3e:c4:e1:61:7b:4e:51:bd:ee:28:c5:9a:cf:06:c8:
a9:42:53:95:0d:e5:5e:db:29:ab:9f:86:86:b7:d5:23:7e:55:
89:b1:7c:f4:dd:5b:97:be:01:68:0e:17:7e:5f:ad:5d:b3:27:
1b:2a:d0:4a:6d:37:94:02:1c:09:14:a0:6d:ad:54:8d:c4:3f:
aa:35:03:d8:67:fe:af:d5:5e:0d:69:89:74:6b:06:c0:ff:ae:
eb:ea:1c:68:c3:c0:fe:e7:c2:2f:ec:a2:49:48:43:fb:63:f8:
8d:e0:23:30:22:e7:5e:b2:89:ab:a7:f3:1e:5f:de:e4:f7:5a:
a1:a7:05:e2:96:11:d4:f3:01:b9:51:31:42:37:af:81:27:81:
6a:63:c3:e4:ec:d0:44:aa:c7:cd:73:bc:07:9c:f0:9c:ef:88:
74:f3:ea:22:28:9a:92:19:46:05:6e:1e:65:16:49:ba:e7:42:
88:61:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:02 2026 by rpki-client