Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
File: AS215134.roa (raw, json)
Hash identifier: 6o09xk1lFipYaUflJL/ReDBoYvKweMU+IusJsNbPt+o=
Subject key identifier: 51:E0:B8:E9:43:AD:FD:8E:A0:1C:3C:E5:7A:EC:63:FA:DF:2B:E5:C5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5D2C73B80A2C1FAA151BC3D3CDA24C10D65A17C0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 215134
IP address blocks: 2a0f:85c1:3bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2c:73:b8:0a:2c:1f:aa:15:1b:c3:d3:cd:a2:4c:10:d6:5a:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=51E0B8E943ADFD8EA01C3CE57AEC63FADF2BE5C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:ea:7c:d3:70:f0:dc:53:bb:ce:88:9f:a3:1c:
2a:8f:bf:c8:03:8e:07:63:36:09:d8:9a:db:9e:10:
6f:29:d0:1d:fa:dc:90:89:17:01:65:4c:c8:28:1d:
76:b4:4a:cc:98:74:85:49:e7:ae:5b:73:bf:7c:ec:
54:09:82:ca:a1:0a:b4:b1:ad:ec:a2:a2:41:43:63:
38:88:ac:f4:5f:dd:60:04:05:41:ab:e9:2b:f2:c2:
00:e6:6f:fb:81:5b:3e:c8:ff:b3:b6:8f:4e:7e:dd:
f0:53:25:31:65:67:4e:5d:69:c4:73:70:58:fd:a4:
0e:14:69:3a:bc:b0:99:a6:0e:8a:85:01:e2:92:23:
15:9d:20:b6:fc:c2:de:98:89:cc:8c:95:fe:0d:02:
89:1d:2f:7f:b3:c6:43:32:35:07:1c:41:24:11:0b:
bf:95:9d:91:fb:42:cf:a5:8d:48:7e:b3:1e:f0:9e:
88:6f:e9:e6:71:82:e6:3b:77:9b:95:58:65:c7:f3:
b5:76:6d:35:25:5c:b9:ff:58:4f:43:f4:82:c1:52:
d1:80:89:4b:c6:24:c3:14:49:43:5a:a8:a7:99:dc:
85:0b:4f:c8:1f:17:75:43:35:b7:9e:a5:77:a0:7e:
f5:9b:c4:6f:d2:ae:ed:7d:c6:b5:af:bb:be:31:b6:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:B8:E9:43:AD:FD:8E:A0:1C:3C:E5:7A:EC:63:FA:DF:2B:E5:C5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3bc::/48
Signature Algorithm: sha256WithRSAEncryption
9f:57:2c:eb:9b:62:47:53:8f:07:21:9d:df:8e:45:30:f9:db:
bc:a0:96:8f:76:10:b0:b0:5c:59:6e:68:ca:e3:7f:f1:ee:bc:
47:48:6c:d5:51:1d:72:3f:dc:80:c2:f3:40:0f:67:c4:bf:09:
3b:94:58:30:38:ad:9d:27:1d:6c:a4:d9:48:90:9c:7f:e2:3b:
05:3f:c6:51:95:94:cf:55:00:a2:fb:ae:fc:0a:8f:74:e4:b1:
57:56:7e:fe:19:9c:cf:ad:b7:75:8c:90:6e:ff:50:65:f7:21:
ff:1a:19:8b:e0:5f:0c:56:46:6a:6d:ab:69:ff:2e:2b:ec:ba:
a5:9d:17:73:cf:96:a9:33:21:63:b4:13:ba:08:9d:9e:bd:4d:
d3:b0:eb:67:e8:c2:14:1b:07:b7:23:eb:5f:c0:44:f5:c7:fc:
3a:55:15:a8:13:99:e2:aa:bb:60:61:6a:84:e7:a9:5f:2e:c1:
19:7d:17:a7:e2:28:ad:e0:ff:fb:b8:1e:20:f3:85:73:b0:17:
bf:8d:ce:dc:66:30:8f:16:76:8f:89:73:d8:10:d1:84:ea:3d:
24:d2:db:f5:22:c8:4e:32:36:85:46:69:36:a9:96:e1:de:21:
c5:10:a4:f1:d0:dd:92:98:0c:f2:69:5a:f3:24:05:aa:d8:23:
d4:8d:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:06 2026 by rpki-client