Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215108.roa
File: AS215108.roa (raw, json)
Hash identifier: 6qbQ2zM356VZO5E7GjgSPqps21jvuajDQNLgw3prTv0=
Subject key identifier: 64:A3:4C:C9:56:22:66:B7:14:64:BB:41:3E:5C:2A:2D:1E:DA:88:B7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2C2A6B030882FAA5A073A1D4AAD6F7C83B97C84D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215108.roa
Signing time: Fri 26 Jun 2026 08:08:43 +0000
ROA not before: Fri 26 Jun 2026 08:03:43 +0000
ROA not after: Fri 25 Jun 2027 08:08:43 +0000
asID: 215108
IP address blocks: 2a0f:85c1:3bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2a:6b:03:08:82:fa:a5:a0:73:a1:d4:aa:d6:f7:c8:3b:97:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:43 2026 GMT
Not After : Jun 25 08:08:43 2027 GMT
Subject: CN=64A34CC9562266B71464BB413E5C2A2D1EDA88B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:10:7e:2f:91:69:94:99:41:28:6f:aa:bc:
e1:29:25:93:59:3d:b6:0e:a3:0d:7d:38:cb:d4:52:
b0:54:c6:58:6c:56:35:aa:b3:aa:66:05:66:72:ae:
6d:28:8e:63:d7:5b:ec:f6:e2:19:28:a6:32:27:8a:
f2:22:9b:e6:79:f4:f4:05:80:df:ac:d7:64:00:6a:
57:91:f5:50:ee:e0:79:80:f4:68:2a:0b:ea:4d:50:
66:89:b7:b8:0f:f3:c0:3f:c3:5f:17:e6:aa:dd:dd:
6f:dd:6b:d9:14:68:4e:d6:52:3e:10:5b:5c:48:e0:
a3:3d:1c:81:26:47:3c:64:f6:79:64:36:fd:c4:c0:
ee:2c:9a:13:db:ef:f4:9b:d9:f8:d1:c1:78:9f:58:
5b:c1:a1:28:4a:cc:68:72:d1:84:f8:08:9c:f3:60:
60:3f:dc:55:3a:fa:f7:3e:e5:4d:3b:97:e4:1c:95:
10:4a:22:ad:5b:59:96:c7:3e:1f:16:89:e4:da:17:
36:a3:d0:cb:58:5d:07:24:ad:81:f1:b3:75:44:4b:
6e:18:a6:60:d6:99:de:c2:20:72:a3:ae:24:2f:de:
6d:12:71:17:74:ee:54:5a:b7:b0:01:f2:e9:4b:4e:
5d:13:46:2e:82:04:ac:b5:ea:d6:90:05:b9:73:e8:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:4C:C9:56:22:66:B7:14:64:BB:41:3E:5C:2A:2D:1E:DA:88:B7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215108.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3bf::/48
Signature Algorithm: sha256WithRSAEncryption
5b:6c:80:ff:74:a6:45:b4:14:39:33:4d:7e:db:af:8e:23:ed:
e4:02:d7:6d:97:3d:e3:cf:1e:b5:29:02:1f:15:1d:2c:d0:b0:
3a:75:b8:d7:9a:dd:18:3b:cf:26:19:12:b7:cd:82:42:ca:89:
19:a7:05:a0:8f:2c:ee:2d:d5:34:d7:28:6e:ba:7e:10:76:83:
cb:b1:f1:f9:6a:ef:73:53:85:c0:ea:ef:0f:07:92:71:64:e5:
f2:ff:ba:ca:98:e5:ce:7f:39:74:8a:e6:ad:94:d7:56:02:3d:
7f:e7:d6:c4:97:b9:ba:ce:e7:4f:f6:58:ac:af:8d:bd:27:d9:
2a:e7:97:e4:7d:db:b9:b8:40:07:6f:ec:f0:a4:45:8e:b4:4f:
bc:7e:49:02:0d:70:5e:18:70:d8:d1:d0:56:cc:f9:4f:15:01:
6f:8c:4e:a9:15:4c:02:91:85:e5:bd:cd:1d:b2:de:c1:2d:11:
3f:c8:22:96:01:95:d0:3b:d1:a3:5d:c7:7c:dc:0e:c7:52:b8:
a6:27:a3:cb:4e:ed:a1:37:4a:ce:1e:3f:d6:94:31:eb:b2:d2:
d0:57:f9:75:7e:09:e8:9c:53:8e:ad:7f:42:b4:ca:8a:ef:9e:
78:ec:67:54:37:b3:43:99:46:0f:f3:95:cf:3a:68:f7:70:a1:
8f:85:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:44 2026 by rpki-client