Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215087.roa
File: AS215087.roa (raw, json)
Hash identifier: FNGRNp7qqlYPwfVZidAgUXsyftDu+9wb2LB12ZhE0/Y=
Subject key identifier: B6:8A:F8:52:E0:73:15:AB:4E:49:D7:33:DC:D4:D4:CD:02:56:78:53
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 61D0E599A7606A51D8023C5CB9F45428AEF2D2D8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215087.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 215087
IP address blocks: 2a0f:85c1:3b6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d0:e5:99:a7:60:6a:51:d8:02:3c:5c:b9:f4:54:28:ae:f2:d2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=B68AF852E07315AB4E49D733DCD4D4CD02567853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:89:a3:09:08:1c:4a:06:58:e1:d5:73:f7:
9b:40:6c:50:76:ed:2b:29:67:85:32:d7:1a:f7:fd:
18:56:15:bd:b5:d1:9f:1e:f3:b3:47:66:f4:e0:0f:
93:b5:3d:65:4b:9f:90:91:ce:00:03:1f:e7:fb:a7:
03:b1:08:de:90:e5:c9:89:a6:b5:f3:6b:bb:73:87:
b7:e9:c3:be:fd:5a:85:6d:44:84:f9:88:65:72:3c:
23:b5:10:a6:45:5d:bc:90:9d:ba:43:8c:9a:6e:ad:
de:ce:cd:8c:3b:72:21:47:c7:84:66:eb:29:ed:8c:
56:99:c5:44:8f:9a:57:cc:95:f2:56:56:e8:de:28:
9e:85:9c:ca:2e:d3:65:5d:6c:61:f1:17:48:f9:55:
fa:69:f0:6e:86:0b:15:dc:4a:92:db:fd:c4:9a:52:
31:e9:32:e1:11:0d:7b:b3:0d:5b:83:dc:13:e9:15:
fb:c1:91:9b:08:61:de:3d:6b:bb:ab:85:01:dd:3f:
7e:c6:51:7a:70:62:75:06:45:61:b8:1c:0b:9f:27:
e2:19:a7:fc:70:8d:5e:37:ce:cf:2e:8d:45:97:bb:
2a:04:8a:9c:47:f8:4d:e2:1b:af:b4:0e:85:38:6e:
38:b7:bb:a7:f9:8f:ac:48:39:e2:18:63:d7:40:42:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:F8:52:E0:73:15:AB:4E:49:D7:33:DC:D4:D4:CD:02:56:78:53
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b6::/48
Signature Algorithm: sha256WithRSAEncryption
c0:c8:8e:33:e1:93:78:1c:a0:50:91:91:17:a7:a5:f5:8a:c4:
fb:9c:65:6e:83:81:6a:f9:5c:d6:78:2c:c0:38:a5:76:67:a2:
12:4f:e4:89:6f:e3:f6:b6:d8:50:c3:43:fe:89:84:3a:eb:0c:
e4:4a:cf:0a:0a:58:10:ad:cc:7d:66:64:15:a2:4d:cf:ba:a4:
d6:9c:46:4f:52:d3:53:de:56:27:c4:21:88:cb:7d:46:c6:c4:
b1:4c:c6:5d:02:6f:b6:1e:4a:d7:3a:52:d0:41:cf:67:51:fa:
6b:4c:fe:69:e8:1d:48:2e:18:18:1c:d1:40:51:e3:29:89:f8:
bf:de:f0:2f:8a:29:b6:bf:02:28:b3:70:bb:7f:49:b0:fa:30:
27:08:db:f5:62:53:7a:de:25:c9:db:9f:fa:72:02:58:64:16:
d2:de:15:0e:50:1e:ac:8d:08:84:22:26:55:8c:81:a2:14:0d:
e6:2d:66:b3:00:46:b6:0e:a6:72:1d:87:07:09:b2:01:25:fe:
20:d7:b8:0c:bb:97:d4:df:53:68:09:92:d8:e6:09:73:78:a2:
f8:e4:33:3b:be:6f:86:f9:cf:6d:af:54:26:e2:52:b0:c4:49:
a8:0d:00:d9:c3:e4:e5:28:cd:28:d3:eb:2f:40:84:21:b0:8e:
33:21:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:07 2026 by rpki-client