Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215196.roa
File: AS215196.roa (raw, json)
Hash identifier: e9gtF/Rb5t0xWOst6DAcNr9534gZNHbEOiCfYtx+vZ0=
Subject key identifier: 25:56:BA:F9:82:16:25:31:D0:10:C3:D1:FF:C0:FA:7C:32:8A:B9:EE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 724E1BAB3F3C1602113B718231028D426F547CE0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215196.roa
Signing time: Wed 19 Aug 2026 03:09:05 +0000
ROA not before: Wed 19 Aug 2026 03:04:05 +0000
ROA not after: Wed 18 Aug 2027 03:09:05 +0000
asID: 215196
IP address blocks: 2a0f:85c1:3ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4e:1b:ab:3f:3c:16:02:11:3b:71:82:31:02:8d:42:6f:54:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:05 2026 GMT
Not After : Aug 18 03:09:05 2027 GMT
Subject: CN=2556BAF982162531D010C3D1FFC0FA7C328AB9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:80:77:4a:9c:52:43:8f:d2:32:7f:3b:d4:
81:c3:71:8f:05:b4:ed:1c:07:52:d0:22:49:9c:fc:
71:a9:c1:0c:76:f6:17:fa:80:e1:63:65:8b:2a:4d:
a0:8b:6e:5e:e3:0b:75:aa:5f:17:dc:1c:30:f2:34:
f0:09:e8:4e:d7:aa:de:f6:cf:d9:74:0b:52:e8:00:
4e:87:89:b8:4f:8d:04:b5:fc:17:ec:87:a8:62:05:
c5:3a:51:fd:f1:0f:92:75:89:d8:4e:9a:30:2b:dc:
26:9d:19:e6:05:46:ac:2f:15:b2:3a:5a:32:a8:2d:
98:e2:9a:3d:1c:70:24:81:c6:43:e1:fb:5d:cb:be:
90:4c:47:96:9e:70:d7:5e:bd:72:62:42:74:6e:a6:
e3:d5:57:39:58:8a:6e:f0:01:57:a6:9c:66:03:12:
10:91:46:a5:d3:32:e4:92:65:2d:6d:19:cc:fc:54:
0d:43:bb:5b:5f:d9:da:44:54:b0:d3:1e:fd:81:42:
f4:76:e1:a1:ff:b6:65:20:b4:f6:2e:57:75:ad:af:
c3:0f:da:08:83:23:ce:03:7e:b4:b4:e5:4d:23:c8:
db:20:40:48:3c:1e:00:ab:39:67:b2:79:17:7a:50:
31:3c:ee:a7:37:c6:3f:e2:1b:b1:2a:31:9f:66:15:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:BA:F9:82:16:25:31:D0:10:C3:D1:FF:C0:FA:7C:32:8A:B9:EE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3ac::/48
Signature Algorithm: sha256WithRSAEncryption
95:5b:c0:a1:d2:c6:e8:bb:6e:82:a3:0d:42:53:bc:60:33:4b:
5a:1b:87:04:14:fb:d7:61:fc:77:fc:d7:ea:40:8c:7b:f9:ca:
bd:be:1d:61:09:78:6e:74:c0:7b:71:13:89:51:fd:2a:58:47:
89:1e:2d:a9:77:6f:0d:79:e3:b4:60:7e:4c:1c:e8:9f:8d:fc:
a0:20:01:ac:72:c4:ac:ed:07:12:80:b1:a2:cc:ed:a0:67:80:
3c:ad:a6:f7:7f:12:6c:51:e1:52:41:66:0b:c4:53:91:f7:fe:
08:b8:8a:57:ec:3d:93:de:ea:0b:77:1e:4c:3f:64:07:cb:3a:
f0:9f:a2:f5:1e:ae:11:59:13:f0:64:9a:37:4a:d1:a6:f7:6d:
aa:87:3a:b2:80:0f:24:08:05:0f:09:6f:35:04:46:f8:fb:d6:
fb:f4:3e:dd:7d:8b:2d:77:a1:90:1a:5c:75:11:19:25:b0:c4:
d3:a8:b8:16:3e:af:ec:99:c7:97:8a:c6:4d:36:89:db:13:54:
05:fb:fc:ea:9e:0f:c5:9a:8a:19:9d:5b:bd:04:96:96:4c:7e:
38:24:09:01:16:7c:c3:e1:95:5b:45:0f:c5:43:41:05:b3:44:
4e:5e:10:3d:02:14:81:eb:26:60:a9:d6:8b:16:e4:0a:57:d7:
9f:a6:dd:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUck4bqz88FgIRO3GCMQKNQm9UfOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MTkwMzA0MDVaFw0yNzA4MTgwMzA5MDVaMDMxMTAvBgNV
BAMTKDI1NTZCQUY5ODIxNjI1MzFEMDEwQzNEMUZGQzBGQTdDMzI4QUI5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDP4B3SpxSQ4/SMn871IHDcY8F
tO0cB1LQIkmc/HGpwQx29hf6gOFjZYsqTaCLbl7jC3WqXxfcHDDyNPAJ6E7Xqt72
z9l0C1LoAE6HibhPjQS1/Bfsh6hiBcU6Uf3xD5J1idhOmjAr3CadGeYFRqwvFbI6
WjKoLZjimj0ccCSBxkPh+13LvpBMR5aecNdevXJiQnRupuPVVzlYim7wAVemnGYD
EhCRRqXTMuSSZS1tGcz8VA1Du1tf2dpEVLDTHv2BQvR24aH/tmUgtPYuV3Wtr8MP
2giDI84DfrS05U0jyNsgQEg8HgCrOWeyeRd6UDE87qc3xj/iG7EqMZ9mFdf/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUJVa6+YIWJTHQEMPR/8D6fDKKue4wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MTk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQOsMA0GCSqGSIb3DQEBCwUAA4IBAQCVW8Ch0sbou26Cow1CU7xgM0taG4cEFPvX
Yfx3/NfqQIx7+cq9vh1hCXhudMB7cROJUf0qWEeJHi2pd28NeeO0YH5MHOifjfyg
IAGscsSs7QcSgLGizO2gZ4A8rab3fxJsUeFSQWYLxFOR9/4IuIpX7D2T3uoLdx5M
P2QHyzrwn6L1Hq4RWRPwZJo3StGm922qhzqygA8kCAUPCW81BEb4+9b79D7dfYst
d6GQGlx1ERklsMTTqLgWPq/smceXisZNNonbE1QF+/zqng/FmooZnVu9BJaWTH44
JAkBFnzD4ZVbRQ/FQ0EFs0ROXhA9AhSB6yZgqdaLFuQKV9efpt0H
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:11:03 2026 by rpki-client