Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215238.roa
File: AS215238.roa (raw, json)
Hash identifier: s5cglcnZaZ2SV3k1kukd94aa7k/rAQj1gA0ayd7rdFc=
Subject key identifier: 56:4D:3A:C6:5B:E6:B3:DF:2A:D5:08:CF:EA:1C:E8:06:63:49:0A:13
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0796DBB38D9187EA2D4C69E6E36A121A4EA4E4EC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215238.roa
Signing time: Tue 18 Aug 2026 21:09:04 +0000
ROA not before: Tue 18 Aug 2026 21:04:04 +0000
ROA not after: Tue 17 Aug 2027 21:09:04 +0000
asID: 215238
IP address blocks: 2a0f:85c1:b77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:96:db:b3:8d:91:87:ea:2d:4c:69:e6:e3:6a:12:1a:4e:a4:e4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 21:04:04 2026 GMT
Not After : Aug 17 21:09:04 2027 GMT
Subject: CN=564D3AC65BE6B3DF2AD508CFEA1CE80663490A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:22:d0:4a:dc:5c:a9:da:54:20:04:77:85:
13:cd:35:58:d6:c1:4f:b3:8b:6b:f7:8b:88:d4:1c:
8d:f6:d3:8c:a4:ce:1b:9a:24:a7:da:e5:da:3c:c7:
a7:e5:d1:c2:52:63:f7:2f:f3:23:8c:9b:f3:24:f8:
c0:9f:10:6f:cb:6a:38:2f:02:97:c7:34:45:8e:7a:
1a:bc:34:56:6a:a0:0b:8e:d9:78:ab:34:b7:05:60:
39:13:f2:06:96:76:34:cd:e9:64:cd:59:4c:33:21:
08:2d:f8:b3:55:0d:46:9d:16:ef:67:7f:4e:3f:f8:
0c:ae:bf:bf:c1:a9:60:00:03:f4:b4:6a:8c:53:ec:
86:7c:4e:cf:c5:35:2b:7e:ec:db:e7:eb:d0:7f:05:
c0:4d:97:a5:10:99:b9:76:99:d9:ab:c7:07:65:82:
d7:48:22:0e:f6:54:5e:ef:68:f5:44:c1:f7:d7:b1:
67:e7:e5:50:d5:35:f8:7f:d5:63:38:58:96:27:84:
fe:55:38:bd:49:28:21:dd:a7:96:94:2b:8f:09:26:
5d:b2:cc:f5:31:22:d0:61:e0:04:5a:d4:9e:e0:d0:
a3:3c:68:ff:50:b7:81:77:94:c0:09:91:3b:8a:e6:
fa:91:dd:f4:05:42:68:eb:b8:92:b1:9e:16:4f:b3:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4D:3A:C6:5B:E6:B3:DF:2A:D5:08:CF:EA:1C:E8:06:63:49:0A:13
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b77::/48
Signature Algorithm: sha256WithRSAEncryption
0e:eb:f3:2c:87:3b:a9:c3:2c:ab:33:d0:59:83:4f:6a:8f:a2:
ab:78:7e:3f:e7:12:4f:c9:dd:78:8d:ce:58:9f:d2:ef:8d:cf:
df:7a:5b:e3:74:42:10:94:dc:0d:7a:fa:8a:fe:b1:06:c8:54:
09:f3:a9:eb:28:5b:80:4a:42:58:d1:3b:8c:48:41:7b:3b:7a:
9c:86:40:46:57:69:de:9f:d1:b3:90:24:49:28:45:43:d7:45:
ef:d0:96:b5:b3:de:02:35:54:f4:83:d6:b9:f6:a9:58:27:de:
b9:04:ca:b2:3f:0e:8d:b3:01:dd:ee:39:78:82:6d:73:74:ac:
51:e9:dd:76:dd:36:45:91:00:6c:51:e3:a5:a9:40:ef:82:a2:
7c:cb:1e:28:8f:85:49:cd:b2:d2:f1:62:8d:ff:02:8b:4d:6b:
8b:c0:3e:63:3e:f2:4d:a0:e0:c3:0d:02:ee:de:38:e3:0f:15:
26:84:16:9d:93:fb:23:33:11:2a:37:91:8b:f0:b7:ce:7e:fa:
ab:55:c3:dd:b5:b0:2a:44:06:3a:e3:f7:63:07:df:47:19:65:
48:52:f7:4a:55:4e:46:ef:99:cf:a9:cc:5c:c8:e4:e9:f3:31:
49:c0:21:33:77:1b:11:11:77:76:0f:d9:e5:14:93:da:35:86:
55:9f:9a:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUB5bbs42Rh+otTGnm42oSGk6k5OwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MTgyMTA0MDRaFw0yNzA4MTcyMTA5MDRaMDMxMTAvBgNV
BAMTKDU2NEQzQUM2NUJFNkIzREYyQUQ1MDhDRkVBMUNFODA2NjM0OTBBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULSLQStxcqdpUIAR3hRPNNVjW
wU+zi2v3i4jUHI3204ykzhuaJKfa5do8x6fl0cJSY/cv8yOMm/Mk+MCfEG/Lajgv
ApfHNEWOehq8NFZqoAuO2XirNLcFYDkT8gaWdjTN6WTNWUwzIQgt+LNVDUadFu9n
f04/+Ayuv7/BqWAAA/S0aoxT7IZ8Ts/FNSt+7Nvn69B/BcBNl6UQmbl2mdmrxwdl
gtdIIg72VF7vaPVEwffXsWfn5VDVNfh/1WM4WJYnhP5VOL1JKCHdp5aUK48JJl2y
zPUxItBh4ARa1J7g0KM8aP9Qt4F3lMAJkTuK5vqR3fQFQmjruJKxnhZPsw8bAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUVk06xlvms98q1QjP6hzoBmNJChMwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQt3MA0GCSqGSIb3DQEBCwUAA4IBAQAO6/MshzupwyyrM9BZg09qj6KreH4/5xJP
yd14jc5Yn9Lvjc/felvjdEIQlNwNevqK/rEGyFQJ86nrKFuASkJY0TuMSEF7O3qc
hkBGV2nen9GzkCRJKEVD10Xv0Ja1s94CNVT0g9a59qlYJ965BMqyPw6NswHd7jl4
gm1zdKxR6d123TZFkQBsUeOlqUDvgqJ8yx4oj4VJzbLS8WKN/wKLTWuLwD5jPvJN
oODDDQLu3jjjDxUmhBadk/sjMxEqN5GL8LfOfvqrVcPdtbAqRAY64/djB99HGWVI
UvdKVU5G75nPqcxcyOTp8zFJwCEzdxsREXd2D9nlFJPaNYZVn5pn
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:27:45 2026 by rpki-client