Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215177.roa
File: AS215177.roa (raw, json)
Hash identifier: VZ/OFN5W9P5OdDFYNMIKRmlNNazHeD4PDNuaMtJgY10=
Subject key identifier: AC:78:38:AB:86:71:04:FD:D7:1F:4B:6F:E7:92:86:74:CA:4A:ED:A6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 351A8FD7D420E03DE82F3D523D17777BE82915CC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215177.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 215177
IP address blocks: 2a0f:85c1:3a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1a:8f:d7:d4:20:e0:3d:e8:2f:3d:52:3d:17:77:7b:e8:29:15:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=AC7838AB867104FDD71F4B6FE7928674CA4AEDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:55:3c:04:a4:aa:c4:d3:8b:32:be:bf:cb:
5f:4e:31:ec:70:39:60:89:85:36:a5:9e:18:21:b3:
f1:1f:5a:19:02:5a:ff:69:79:4d:9e:ca:90:f2:f4:
ba:61:6a:bf:8e:3d:f6:b5:a9:9f:12:40:6c:df:7b:
b5:da:bf:96:19:6b:fd:41:ff:d3:ad:bf:e4:7e:d8:
29:4d:aa:a2:dd:12:ce:1f:f1:37:a5:ea:ae:e5:3a:
a1:59:b1:54:11:00:82:09:79:ef:5b:ee:59:1d:a2:
30:74:3b:53:0e:7b:78:62:8f:91:59:ed:84:58:15:
b2:b8:e7:3f:17:12:71:d0:42:e6:af:a0:c3:85:15:
b7:21:ec:58:37:45:c6:01:b7:0c:cf:a2:77:99:02:
6c:27:a6:ac:be:45:46:e4:22:1c:b8:8c:2a:b6:f2:
da:7d:14:bc:83:d8:69:7a:fe:83:e9:8e:4b:8b:82:
ac:e6:1b:86:09:09:cb:9f:76:ad:99:03:9e:8d:ac:
6f:8f:d8:3d:6e:d1:e7:b5:41:a1:95:e9:db:43:40:
6f:9c:5f:08:d7:14:e8:56:90:b2:49:fc:0e:64:ee:
01:45:71:7d:10:db:a0:c9:3f:e1:98:1c:57:ec:bf:
64:0c:26:b3:10:b0:de:48:76:91:4d:ef:57:5c:38:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:38:AB:86:71:04:FD:D7:1F:4B:6F:E7:92:86:74:CA:4A:ED:A6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215177.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a9::/48
Signature Algorithm: sha256WithRSAEncryption
54:d9:15:0b:e3:67:78:bf:ea:00:b5:94:c6:df:01:d1:5a:b7:
f9:57:71:e9:95:2e:a9:39:6e:f0:96:6f:26:b7:35:10:93:19:
d8:4b:3e:82:5e:cf:f5:1a:b4:fd:da:2b:0a:72:85:a0:18:7d:
ed:fa:85:2a:67:07:fa:4a:c1:5b:e5:03:68:8a:54:fc:68:44:
83:c6:de:7d:ff:ee:2c:4c:e4:4c:f4:8a:09:bd:d7:91:f0:09:
75:fd:f6:e6:34:16:68:f4:71:95:99:07:3c:d5:ff:57:b4:d4:
a1:e4:33:2c:5c:f1:b4:d8:de:76:fa:2e:7e:60:6b:7f:ec:b2:
15:cc:f9:60:28:ac:d7:08:8a:8f:d0:5b:a4:e2:68:3a:e5:67:
f7:10:d2:12:d7:93:3a:29:84:48:3c:ef:c0:f5:2e:63:e1:10:
4d:e5:fb:15:76:28:8a:e0:1b:7b:dc:ab:a7:c6:b0:ea:6c:ab:
93:58:93:05:c2:65:5f:ca:5d:97:87:39:72:b5:c4:f6:91:0b:
69:45:8f:24:19:ca:1f:50:df:d2:fd:25:6d:a8:5b:9a:20:0b:
06:8c:76:c2:ee:3a:8f:f2:58:71:6c:d1:10:94:af:7e:d8:e5:
cc:3b:de:99:a0:bf:6e:c9:9a:24:05:c1:7e:96:5f:af:7e:20:
4a:0a:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:06 2026 by rpki-client