Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215105.roa
File: AS215105.roa (raw, json)
Hash identifier: cAz0WaEmmrM4Tzjnd5Q1zK8V2S5fihFMwZ/txY9IMq4=
Subject key identifier: 33:64:C7:89:1F:83:A3:77:B0:74:0F:6D:2C:B2:25:A9:AC:00:46:B4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3DDB7E84B814214EFC1294D4E49D97F33EB06E61
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215105.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 215105
IP address blocks: 2a0f:85c1:3b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:db:7e:84:b8:14:21:4e:fc:12:94:d4:e4:9d:97:f3:3e:b0:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=3364C7891F83A377B0740F6D2CB225A9AC0046B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:92:c2:c7:12:4a:ec:aa:ff:2a:e7:b1:7e:
a1:21:86:bd:87:61:db:75:0f:5b:b3:8c:94:ab:7b:
c1:05:80:62:74:43:3c:ea:02:12:94:a3:52:f6:79:
cc:36:f4:ec:86:18:94:27:86:15:c4:b7:d7:81:df:
8f:5a:43:43:9b:95:91:ff:97:eb:39:77:05:f2:f0:
e3:eb:af:0e:17:77:59:dd:1e:76:63:ca:82:80:25:
fb:7f:68:c3:10:31:fc:fc:f6:0d:d5:c3:1b:79:91:
5d:b2:6c:4d:ef:ac:50:b6:3a:52:54:45:ea:91:71:
ad:fa:49:02:54:11:7c:eb:74:ae:04:7a:a4:86:4a:
a3:77:24:73:da:77:d6:03:c7:f4:49:02:d2:5d:04:
9f:c8:33:2d:73:cf:3a:5d:19:48:c4:03:61:2b:75:
61:e0:f8:e2:cd:f7:4c:69:59:4d:17:0f:68:9a:7f:
9e:1e:2a:42:2d:3a:9e:83:26:0a:2b:b2:0a:4a:89:
cb:43:44:44:51:f9:bf:dd:2b:76:cb:13:b1:07:0e:
25:d9:98:bd:2c:44:85:7a:f3:64:9f:fc:59:81:bd:
84:ed:e0:2f:78:df:ed:60:b8:6a:20:1f:98:83:e0:
b2:e3:29:04:29:4b:98:79:4a:1d:78:e4:27:43:3c:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:C7:89:1F:83:A3:77:B0:74:0F:6D:2C:B2:25:A9:AC:00:46:B4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b5::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e6:80:93:79:2f:2b:0b:e7:34:71:a5:79:2d:2e:09:f0:a1:
f2:8d:41:97:60:18:a6:c8:a6:87:4e:77:5b:c4:67:19:ca:ac:
18:01:8e:73:c2:3c:c0:ef:98:ce:22:89:3a:f5:7e:ba:d2:c6:
dd:2b:9f:aa:6e:1a:92:d9:72:e2:96:14:81:35:78:b8:82:44:
57:d7:c0:f3:5a:f5:75:d0:35:2a:40:c0:07:9c:6a:22:af:71:
c1:24:d0:8b:ca:6f:03:e2:92:bc:f4:06:f5:08:93:7b:a8:53:
22:ec:69:7f:ee:2d:bf:4f:47:24:24:a3:a5:d3:a6:ab:fc:cf:
68:b4:37:eb:50:65:58:8b:7a:04:af:10:7f:ba:b7:a5:58:ce:
9f:00:89:6b:49:fc:f4:cf:dc:1e:3e:60:91:83:29:70:8e:aa:
e4:01:97:0d:80:8c:10:c4:7d:7c:42:14:5f:ad:45:28:27:91:
67:cf:96:1e:5c:78:a5:43:a3:ac:33:37:22:95:b7:c2:bd:85:
79:48:4e:e3:c2:49:81:bc:8c:92:d5:4d:9a:d4:3f:c6:76:60:
13:d2:f0:54:d2:75:c1:0d:d6:21:8e:31:37:37:9c:ee:2c:44:
6e:76:0d:43:e0:ab:bf:cd:04:36:c5:47:67:84:a7:3c:80:af:
2b:ab:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:45 2026 by rpki-client