Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215135.roa
File: AS215135.roa (raw, json)
Hash identifier: K9zMJOKgFOVdxwW38C+QWXX2zXcR9h10Ytk/U9uJTWA=
Subject key identifier: B3:E0:3A:38:2F:45:DF:45:60:6C:D2:71:03:BD:5D:B5:2C:B0:D9:72
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 12FC6080BC3F781FABC6DFF5369B33BF4F4C2721
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215135.roa
Signing time: Fri 26 Jun 2026 08:08:37 +0000
ROA not before: Fri 26 Jun 2026 08:03:37 +0000
ROA not after: Fri 25 Jun 2027 08:08:37 +0000
asID: 215135
IP address blocks: 2a0f:85c1:3b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fc:60:80:bc:3f:78:1f:ab:c6:df:f5:36:9b:33:bf:4f:4c:27:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:37 2026 GMT
Not After : Jun 25 08:08:37 2027 GMT
Subject: CN=B3E03A382F45DF45606CD27103BD5DB52CB0D972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:44:ac:80:f2:92:7b:be:87:32:8d:ab:03:
8a:dd:87:92:c4:64:19:d7:aa:7c:4e:21:3e:3f:28:
5e:25:4a:e7:2e:8d:e4:50:8a:64:88:ea:44:f9:e7:
bf:f1:80:ee:30:f1:fd:96:49:68:87:79:4e:73:34:
3f:e1:f4:af:22:15:8b:a6:37:06:04:05:db:a1:ee:
c7:93:a9:ac:78:3d:2e:30:d7:1a:a2:38:53:aa:35:
fa:9c:22:0b:fb:4f:a4:c3:fc:f5:25:29:b8:bf:ea:
9e:8d:85:5b:f9:0d:63:22:b8:63:ee:dd:7e:90:0f:
ba:4c:2e:90:18:6b:1d:15:ca:67:11:c5:33:9c:0a:
8a:d2:ef:f7:31:ad:d5:f8:fb:8e:c0:b6:c7:9f:58:
94:e3:b3:4a:52:29:85:dc:75:b0:54:20:1c:35:d5:
75:41:22:af:b5:cb:a9:a9:92:0d:da:a3:3f:0d:21:
18:11:d7:0a:d8:1c:5d:4d:a5:6a:7f:7b:b0:f1:69:
9a:9e:18:14:7d:67:21:7b:97:9a:f9:98:f7:1f:b4:
de:f1:24:9e:a8:55:99:d8:44:cf:37:9f:5a:2d:03:
19:42:ab:c4:b0:98:b7:a5:c0:0d:f4:d6:cf:d6:92:
b7:d5:c8:9b:53:4b:16:75:1d:86:90:de:1d:81:f0:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:3A:38:2F:45:DF:45:60:6C:D2:71:03:BD:5D:B5:2C:B0:D9:72
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b9::/48
Signature Algorithm: sha256WithRSAEncryption
43:1a:e5:e9:e8:ed:5c:06:e6:e3:c4:87:22:c7:26:b6:38:f3:
fd:d4:d9:2f:3a:a5:43:5a:f4:42:ef:25:ef:82:d3:1c:43:4d:
35:51:03:aa:1c:d0:10:0f:0c:c3:4c:1c:ae:63:22:ae:05:da:
f6:b2:7e:97:60:4d:c9:66:dc:97:f5:0c:a3:47:80:d8:e8:e8:
93:cc:2f:c5:1d:63:1d:70:5f:6a:f3:27:fd:3a:68:de:8a:31:
6b:8d:1e:74:6b:25:9d:24:5e:79:45:f2:b2:4d:54:6c:5e:f4:
7f:b7:2a:e9:e0:fd:66:ce:10:b0:6e:35:30:65:5b:ef:8e:bd:
1a:33:a4:df:02:39:83:30:b6:48:20:40:23:53:0e:c2:9c:d6:
0b:cf:38:9d:85:1c:83:a9:a1:50:76:91:fa:ac:7a:05:21:ed:
fa:aa:76:bd:e3:0e:d3:e8:59:26:a3:78:ee:6d:20:4c:46:35:
a6:c8:62:d9:c9:d2:c8:9c:89:e0:44:9f:18:33:32:cb:e5:c4:
0c:6d:4b:a5:df:d0:29:33:f8:74:ff:a5:75:7a:10:12:72:8c:
b2:0b:66:b8:20:86:e3:7c:72:6b:51:31:06:bf:a8:af:ca:2b:
14:77:e1:33:99:20:a5:17:18:74:ec:f9:ed:0f:ba:59:ea:60:
df:f5:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:05 2026 by rpki-client