Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215223.roa
File: AS215223.roa (raw, json)
Hash identifier: 1qGb9owRWBSfQPY2sCnnXIBiVUXoqHSUKBfB8PKzF/U=
Subject key identifier: BD:BC:64:21:26:B8:2D:71:C1:86:98:6D:59:1E:EC:13:AC:71:5F:95
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 207BE1EABEA65CD219E7BEA51E3EEAB254250CC8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215223.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 215223
IP address blocks: 2a0f:85c1:3a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7b:e1:ea:be:a6:5c:d2:19:e7:be:a5:1e:3e:ea:b2:54:25:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=BDBC642126B82D71C186986D591EEC13AC715F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:a9:41:4b:1d:85:53:3a:e1:85:e3:40:93:
c3:43:c1:fd:2f:c4:14:4f:0d:9f:73:3b:47:b7:87:
25:2e:35:e4:3f:b5:9b:87:e3:19:04:54:b5:94:cb:
d8:01:52:60:3e:a2:24:e4:1f:43:9e:47:80:ed:c1:
8a:80:a6:1c:af:c9:50:59:2c:03:50:69:a9:3f:2e:
b0:9c:67:18:3b:d1:76:00:a9:bf:96:1c:f9:ea:d0:
e1:be:04:02:40:55:d7:5f:f9:2f:c1:be:f8:5c:c3:
55:71:35:54:69:99:be:9a:03:36:32:35:50:b4:82:
0f:c5:fa:6b:a9:e1:0c:bc:bf:0a:a9:90:07:a3:48:
0a:cc:de:c0:2a:c1:ed:49:a0:29:6b:71:3c:60:78:
09:59:fe:a6:a5:be:c3:b6:54:cd:b0:77:5f:05:3e:
27:d0:ed:82:be:18:81:2a:2d:64:7e:72:28:bd:7e:
56:7e:cd:95:62:90:58:be:b3:6e:d4:2f:78:23:0c:
df:af:ad:36:e5:8f:52:57:98:25:af:ae:a3:1b:82:
c0:55:6a:e3:90:e4:c6:f4:98:1f:f3:58:a0:41:ee:
b1:97:6c:51:92:d6:ae:dd:5a:ce:14:c7:d9:1e:91:
80:0c:9b:88:cf:ee:35:ae:21:d7:e1:58:25:5b:89:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:64:21:26:B8:2D:71:C1:86:98:6D:59:1E:EC:13:AC:71:5F:95
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a6::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d3:7e:40:07:8d:17:c0:fa:33:e1:31:51:0c:3c:db:6f:d7:
b3:bc:27:7d:a4:a1:1d:09:98:d7:d7:8b:99:2c:6f:bb:15:3e:
79:14:3a:bb:fc:23:77:9a:fa:40:54:a4:bf:9b:b4:d2:e1:f2:
1e:af:db:8a:90:1c:e7:98:d7:66:95:42:57:65:f3:39:2e:d7:
64:3f:cb:af:1a:23:22:e0:18:92:8a:62:00:eb:cc:9c:56:31:
5f:0c:5a:7b:de:d0:45:32:17:6d:87:ed:f7:a5:97:c3:f4:f1:
08:98:ae:88:1d:82:7f:66:21:39:32:97:cb:7f:1b:29:f9:d0:
02:1c:96:4a:dd:50:90:f6:25:a1:5e:5d:48:1b:6e:c9:b2:98:
e0:fa:59:e1:f0:d9:85:95:68:8c:cd:14:02:28:38:bb:a2:e8:
c3:b4:5f:b5:4a:1a:e5:c5:9b:68:08:5f:7a:25:34:df:91:da:
71:50:2c:d0:91:32:93:14:01:47:cf:af:69:50:da:21:50:f5:
e8:30:d2:74:c1:4c:c8:10:2b:75:c0:7c:d4:3f:43:17:c4:51:
a7:67:39:43:d2:d3:b9:bb:53:f4:16:ab:89:82:d2:3d:87:d1:
24:f0:6f:40:2b:5b:54:3e:eb:fe:8e:fb:86:e6:75:40:5f:29:
82:0b:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:05 2026 by rpki-client