Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215111.roa
File: AS215111.roa (raw, json)
Hash identifier: zQTdUEA0CvOFqkpdYBORoWer8mpMeUS+Qowi74XD6Bg=
Subject key identifier: 81:51:E9:DA:23:C2:6D:EA:CF:25:AC:64:FD:A3:6F:A0:42:BA:FF:82
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 588034D702883830435BBF2DE8865C2BCE14FE87
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215111.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 215111
IP address blocks: 2a0f:85c1:3be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:80:34:d7:02:88:38:30:43:5b:bf:2d:e8:86:5c:2b:ce:14:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=8151E9DA23C26DEACF25AC64FDA36FA042BAFF82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:a7:d4:c3:27:4d:6e:01:0e:5e:20:0f:78:
9a:45:53:16:8e:06:5b:1a:a0:93:36:a7:ba:c0:d8:
f0:b6:53:52:2a:80:13:16:e5:6f:5d:85:7d:a5:bd:
14:08:9d:89:13:7e:58:63:e2:98:9a:ed:59:5c:c9:
5d:dd:3b:45:23:bb:fd:27:3d:22:ea:3d:53:6a:37:
3e:0a:1d:de:28:52:64:1b:53:8b:cc:59:30:ba:46:
06:48:e6:30:31:6c:01:7e:96:59:f3:21:8a:0e:1c:
8f:10:cb:1e:35:83:1f:66:0a:24:57:1f:62:84:5c:
8a:95:2f:35:5b:ee:a2:cc:02:0d:a4:64:c7:b4:8f:
03:42:16:5e:57:50:c7:fd:c2:54:d6:52:b0:de:42:
32:c0:f7:d1:65:17:ec:76:d1:15:4b:00:68:69:e1:
09:50:dc:80:da:6b:d4:51:ae:9c:a5:2d:6d:1c:76:
82:3e:e2:9d:64:84:d2:68:0a:d1:b0:a9:fe:9b:82:
d2:fb:17:69:9e:54:ce:49:db:80:04:5b:c5:41:63:
28:70:f1:46:10:c6:f6:12:9a:97:da:d8:5a:bc:9d:
2e:86:ba:88:2b:32:f3:5d:70:f7:03:06:ff:36:87:
0a:88:63:4b:81:57:65:f9:80:cb:b9:24:3b:12:d4:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:E9:DA:23:C2:6D:EA:CF:25:AC:64:FD:A3:6F:A0:42:BA:FF:82
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3be::/48
Signature Algorithm: sha256WithRSAEncryption
a4:9f:0a:c2:88:c6:a1:ad:c1:49:e8:79:56:23:53:5d:cf:8b:
c3:e5:8a:59:b9:8d:2d:a1:b5:9c:e7:52:5f:b2:df:4b:58:9e:
c0:4e:6b:c6:15:58:aa:84:04:77:bb:53:89:70:91:4f:91:b3:
ee:3b:7f:b4:84:0b:5f:32:f5:ab:7d:83:a9:86:da:be:9b:af:
4b:74:bc:51:9e:c7:0b:09:13:b8:77:d4:b7:8b:d3:b8:db:65:
46:24:bc:c8:65:fa:07:90:ca:b1:f9:5c:76:67:a9:09:73:7b:
81:15:e8:d1:96:f8:71:39:49:4d:54:76:3c:15:e1:c4:9b:25:
e4:d8:e5:6d:85:73:04:76:39:06:cd:0a:48:39:63:b4:6f:24:
d6:80:86:38:a1:ac:a6:d1:7a:26:c5:a2:8b:db:0e:00:85:48:
1b:0a:66:62:98:9e:71:d7:d4:31:9a:8f:16:66:38:e6:61:cd:
72:90:d9:79:ff:c4:1a:32:16:fa:a8:e1:d1:be:24:c9:c1:74:
23:64:fe:95:a2:ee:b8:f9:f9:a0:fc:62:2c:21:c1:a0:f4:37:
23:85:40:9a:1a:0d:ec:99:99:85:87:de:9b:51:69:e7:04:8b:
3a:9a:a2:1b:6b:c5:ba:03:a7:1a:9c:8b:6c:ba:71:a5:94:b1:
a1:d0:8a:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUWIA01wKIODBDW78t6IZcK84U/ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzMzhaFw0yNzA2MjUwODA4MzhaMDMxMTAvBgNV
BAMTKDgxNTFFOURBMjNDMjZERUFDRjI1QUM2NEZEQTM2RkEwNDJCQUZGODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiKfUwydNbgEOXiAPeJpFUxaO
BlsaoJM2p7rA2PC2U1IqgBMW5W9dhX2lvRQInYkTflhj4pia7VlcyV3dO0Uju/0n
PSLqPVNqNz4KHd4oUmQbU4vMWTC6RgZI5jAxbAF+llnzIYoOHI8Qyx41gx9mCiRX
H2KEXIqVLzVb7qLMAg2kZMe0jwNCFl5XUMf9wlTWUrDeQjLA99FlF+x20RVLAGhp
4QlQ3IDaa9RRrpylLW0cdoI+4p1khNJoCtGwqf6bgtL7F2meVM5J24AEW8VBYyhw
8UYQxvYSmpfa2Fq8nS6GuogrMvNdcPcDBv82hwqIY0uBV2X5gMu5JDsS1Hc/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUgVHp2iPCberPJaxk/aNvoEK6/4IwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MTExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQO+MA0GCSqGSIb3DQEBCwUAA4IBAQCknwrCiMahrcFJ6HlWI1Ndz4vD5YpZuY0t
obWc51Jfst9LWJ7ATmvGFViqhAR3u1OJcJFPkbPuO3+0hAtfMvWrfYOphtq+m69L
dLxRnscLCRO4d9S3i9O422VGJLzIZfoHkMqx+Vx2Z6kJc3uBFejRlvhxOUlNVHY8
FeHEmyXk2OVthXMEdjkGzQpIOWO0byTWgIY4oaym0XomxaKL2w4AhUgbCmZimJ5x
19Qxmo8WZjjmYc1ykNl5/8QaMhb6qOHRviTJwXQjZP6Vou64+fmg/GIsIcGg9Dcj
hUCaGg3smZmFh96bUWnnBIs6mqIba8W6A6canItsunGllLGh0Ir/
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:59 2026 by rpki-client