Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215214.roa
File: AS215214.roa (raw, json)
Hash identifier: YcXbf7oEQqHhjZL4kljFygKYc9ZioPKnI6aO8Ro+tZk=
Subject key identifier: 98:DA:C3:8E:61:B9:2E:1D:1C:84:B0:E9:98:DE:85:4D:A8:9D:8F:B3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2E2FDA67072616C24AC389A4DCEECF5C20BFCD1E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215214.roa
Signing time: Fri 26 Jun 2026 08:08:45 +0000
ROA not before: Fri 26 Jun 2026 08:03:45 +0000
ROA not after: Fri 25 Jun 2027 08:08:45 +0000
asID: 215214
IP address blocks: 2a0f:85c1:3a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2f:da:67:07:26:16:c2:4a:c3:89:a4:dc:ee:cf:5c:20:bf:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:45 2026 GMT
Not After : Jun 25 08:08:45 2027 GMT
Subject: CN=98DAC38E61B92E1D1C84B0E998DE854DA89D8FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:3b:16:17:9a:6f:98:d2:22:42:58:95:ac:
8f:71:26:39:a2:23:5d:e6:d0:2e:7a:f8:f2:26:1b:
bf:07:c2:bd:3c:f5:7f:3a:b7:47:0f:00:67:65:36:
9e:e5:eb:37:7f:e5:f2:f4:78:cc:e8:76:b0:b1:44:
a9:79:76:3a:50:0c:01:fb:39:e0:cd:8f:e5:49:e7:
ab:c3:ee:a3:67:92:9e:66:df:87:55:3e:f3:eb:c5:
05:57:2b:fe:3a:4f:60:fe:29:d3:94:94:b8:d3:82:
4b:ac:b8:39:04:6d:d6:2b:f4:0b:61:33:3f:23:84:
8b:91:22:0b:3c:5a:8e:4a:c1:eb:c0:a1:11:1a:a4:
0f:07:5f:bd:f9:0d:4a:e3:9d:a9:ae:4c:90:86:91:
cd:78:93:cb:03:a5:66:e7:41:bb:09:cd:2f:c0:5a:
e9:e2:e2:db:a6:f3:45:aa:e0:60:9f:a9:7a:21:f8:
4c:41:06:1c:9f:27:35:4a:32:a4:98:62:d5:45:84:
6d:2a:24:36:4a:d4:95:65:7f:fc:f3:de:33:b4:31:
ba:d7:f4:15:6b:ef:a5:70:55:b2:80:a2:d5:17:94:
50:19:d4:a9:6f:76:e0:4b:1b:65:52:8d:f9:7b:db:
14:e8:5d:92:b4:26:64:67:09:41:10:2c:e9:c5:7e:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:C3:8E:61:B9:2E:1D:1C:84:B0:E9:98:DE:85:4D:A8:9D:8F:B3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a5::/48
Signature Algorithm: sha256WithRSAEncryption
79:bf:2a:2d:ff:0f:9f:76:e2:6e:08:22:10:aa:05:b3:80:d6:
c2:65:87:f3:74:8f:11:47:a0:10:5d:b8:55:ec:9b:06:09:73:
b1:83:3a:55:00:ed:a8:3d:de:02:70:7f:ed:8f:9c:10:36:5f:
35:91:b8:0a:4e:99:87:64:08:1b:50:94:41:ad:6e:c7:df:9f:
2a:30:4b:61:1f:9a:b1:d2:15:fb:d5:88:5f:1d:42:c7:0c:ad:
a5:e5:af:80:1a:25:d5:7b:21:5c:71:29:1b:ec:6b:7f:69:b7:
27:20:ed:9e:65:a6:36:b7:8d:a0:2f:09:b6:3f:e4:48:5d:55:
5f:d5:e9:a2:65:ce:e3:aa:e0:9d:96:99:6d:2a:dc:65:4b:0e:
e2:35:a9:ff:d8:20:4d:b9:6c:7b:b9:52:dd:ea:96:95:1c:8a:
84:0d:45:67:73:eb:e5:66:d1:f4:a9:7f:84:76:60:6f:9a:4b:
3a:8f:11:2f:08:ed:49:85:9b:6a:f8:5e:97:e0:b7:68:de:0e:
70:c8:a1:de:c9:4f:09:09:43:66:2a:9d:ad:b7:a2:5b:c7:ba:
e5:d7:f0:9d:e9:f6:f8:5d:b2:de:92:05:6d:5e:1f:b1:33:61:
05:61:70:bc:a2:e8:9d:9e:ee:44:7a:9b:57:90:bc:50:72:df:
a6:ba:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:39 2026 by rpki-client