Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215154.roa
File: AS215154.roa (raw, json)
Hash identifier: qJU3bYQdzZUN9kXcD0zq++4gXcpuIuIddsS143idb18=
Subject key identifier: FD:AA:63:53:E9:36:C4:F4:7C:7F:5B:B9:62:2F:B5:97:D8:C2:6F:CE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7C990C32EFD26EE555EC71CEF971D6844E6906F9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215154.roa
Signing time: Fri 26 Jun 2026 08:08:37 +0000
ROA not before: Fri 26 Jun 2026 08:03:37 +0000
ROA not after: Fri 25 Jun 2027 08:08:37 +0000
asID: 215154
IP address blocks: 2a0f:85c1:3b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:99:0c:32:ef:d2:6e:e5:55:ec:71:ce:f9:71:d6:84:4e:69:06:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:37 2026 GMT
Not After : Jun 25 08:08:37 2027 GMT
Subject: CN=FDAA6353E936C4F47C7F5BB9622FB597D8C26FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:16:15:a0:7a:5e:d8:73:fc:0c:f3:1d:ff:
8e:7e:da:d8:21:bd:ce:f5:74:0a:9e:08:0c:5e:cf:
08:cc:1d:18:57:0c:d4:3f:c1:a8:58:ac:df:08:58:
8b:fe:83:bb:7b:64:93:e9:5d:df:ea:8a:be:43:a6:
aa:8c:91:a1:da:24:b1:ca:9b:45:1c:c2:72:e7:9c:
42:f6:d8:6a:e2:0c:6c:0d:df:f6:bc:88:e8:dc:71:
f5:76:f0:0a:4f:f4:33:3c:b2:09:38:d8:5c:1f:e0:
1b:e7:ba:02:77:f9:2e:e0:58:f9:82:b9:e9:6a:e3:
60:c9:5e:2c:25:06:1d:82:3f:f9:06:37:4a:f3:7c:
16:d7:39:45:92:b1:c7:ca:db:78:ab:1a:80:6e:54:
ba:0e:c0:94:f8:be:db:1b:39:b8:e2:f3:9c:75:c3:
1a:0d:c5:80:08:f9:24:17:c8:3f:4e:89:27:46:a4:
ec:9e:81:8f:71:85:2c:92:a4:70:c5:e0:3a:db:e0:
6c:ba:74:a5:9d:a1:57:5b:4e:99:ef:7b:fb:df:e6:
df:ce:7c:cb:80:88:40:1b:a4:6c:35:93:ca:05:11:
98:fb:5e:4e:bb:ae:81:cc:41:91:fa:97:37:3e:00:
0e:b9:a5:c8:66:ba:b7:2a:3b:ba:fe:b4:34:fe:ae:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:63:53:E9:36:C4:F4:7C:7F:5B:B9:62:2F:B5:97:D8:C2:6F:CE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d3:98:1f:6b:f1:65:dd:40:c4:68:05:ad:11:81:e8:9c:ef:
4e:85:d4:f5:c5:29:82:c2:d8:6c:c1:ce:83:c7:6a:bf:c3:50:
64:41:6e:32:aa:8b:98:ea:89:51:17:37:2f:67:3b:2b:12:8e:
4a:bb:2d:65:0b:3f:cb:9f:77:96:83:9e:7d:44:ad:9d:3f:6d:
f8:4d:cd:55:db:d6:a9:af:12:8a:36:77:34:fa:ff:ef:72:71:
b4:85:29:e2:76:8d:b9:d9:18:21:58:5a:a0:59:98:0f:d9:37:
ca:09:de:bd:c9:8a:71:96:98:29:f6:9f:9f:a0:f1:17:b9:61:
c0:60:ca:f3:ac:62:c9:a0:31:94:49:19:c9:94:13:82:57:85:
89:a0:04:ae:50:61:e9:4a:a8:8d:dc:1e:70:19:9b:04:41:50:
d9:f0:bf:28:7c:56:81:82:aa:b9:7f:49:a9:dc:1a:eb:e1:76:
e2:a0:40:97:fc:c0:74:6d:87:03:d1:84:62:3d:fa:86:a6:c3:
41:30:85:da:8e:78:2c:d1:9a:3a:ea:48:58:4a:88:16:b3:88:
b9:42:b3:ff:15:b1:b6:87:9e:ec:6a:76:a3:1c:41:84:48:6c:
fc:c0:b7:17:47:3b:c7:3e:cb:da:2d:16:86:08:50:db:88:9f:
97:58:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:46 2026 by rpki-client