Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215255.roa
File: AS215255.roa (raw, json)
Hash identifier: iZ/CDO0anxM7FG8ftgC6YuHpwl846xiI+Ns4DAxXqmU=
Subject key identifier: 71:CC:95:7E:04:FC:51:C1:43:40:77:97:C1:E1:D3:93:09:63:D5:C8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0CB62D2624BC6002716670AB5BCC8A618F85E0D4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215255.roa
Signing time: Fri 26 Jun 2026 08:08:41 +0000
ROA not before: Fri 26 Jun 2026 08:03:41 +0000
ROA not after: Fri 25 Jun 2027 08:08:41 +0000
asID: 215255
IP address blocks: 2a0f:85c1:39f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b6:2d:26:24:bc:60:02:71:66:70:ab:5b:cc:8a:61:8f:85:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:41 2026 GMT
Not After : Jun 25 08:08:41 2027 GMT
Subject: CN=71CC957E04FC51C143407797C1E1D3930963D5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:9b:34:a7:45:af:5b:9b:09:6f:bf:06:93:
3b:9a:a2:68:eb:63:8e:ee:90:45:3d:18:cd:7e:dd:
c9:0b:6c:68:05:c0:d2:52:51:2c:6e:47:e9:1a:7d:
46:52:2a:38:b6:68:f8:b7:db:34:52:45:88:1a:ac:
fe:b3:cc:e3:56:89:35:8f:4b:74:c7:87:f9:8f:84:
a6:43:3f:c4:7a:2f:b2:f0:79:51:fa:56:b9:c5:71:
d3:66:e7:f2:35:aa:62:85:f0:5f:2e:6a:58:af:12:
c3:41:27:e0:45:93:e8:a6:56:3f:f3:ae:90:97:40:
10:c4:a8:b5:d1:36:e9:d7:be:66:af:dd:67:2f:d3:
af:29:6d:bc:9a:14:d0:21:54:d9:d4:a2:ab:36:9c:
84:01:19:2c:fd:be:11:06:c0:a3:2c:0a:d6:5b:26:
a8:2f:7c:c7:97:33:aa:d2:b4:93:5a:3e:06:f6:7f:
28:97:cf:29:e2:41:ed:1a:27:1a:e5:51:fe:1b:2c:
f6:05:bd:e8:bb:bf:dc:23:d2:be:d6:bd:89:4a:df:
62:e3:cf:2d:0b:e2:30:1b:f0:54:9c:aa:c4:f2:ce:
c9:fa:c8:2a:5d:a5:7f:c8:c2:6b:ac:f6:cc:8e:38:
e0:71:98:d5:ee:dc:c6:c6:47:f3:9e:52:1b:83:a2:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:95:7E:04:FC:51:C1:43:40:77:97:C1:E1:D3:93:09:63:D5:C8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:39f::/48
Signature Algorithm: sha256WithRSAEncryption
5c:e3:2f:72:61:e8:2a:fa:10:9d:a4:05:ef:ab:71:ef:a5:79:
4e:0e:6b:d2:a0:ed:de:7a:81:22:d4:2b:fc:c2:0b:9c:e8:c2:
a2:14:09:e7:26:9d:ff:67:9d:f7:d3:b6:5e:f9:b2:0e:65:cd:
34:e2:1a:57:09:da:51:43:a7:25:a7:b6:cd:9b:ae:f3:73:a9:
5a:2f:60:87:5a:f4:b5:c1:13:d3:24:96:b7:62:e7:5f:33:a1:
5a:10:fe:c8:1b:ae:f5:21:92:11:61:97:b6:5a:1c:cf:80:34:
54:0b:b7:74:d7:8f:97:e4:eb:9b:d8:9e:fb:37:c2:7e:2d:9b:
96:29:1f:4c:2d:20:c5:ea:f0:26:58:e6:92:b6:dd:75:07:3d:
00:c2:2c:ab:57:7b:de:7d:c6:27:15:27:61:e4:12:71:dc:8b:
de:14:f8:30:ad:a3:92:2e:e4:80:81:3b:1d:6c:cd:58:19:01:
8b:7e:ab:c1:b8:35:19:64:eb:9a:89:e6:1d:95:91:f9:4d:de:
02:cc:55:55:d2:2c:10:cd:96:4b:30:90:e2:67:ca:15:b6:4e:
b4:d5:df:8c:af:4d:49:b0:c4:26:88:2d:c4:96:23:27:50:78:
dd:89:3f:45:11:43:bd:57:58:1e:74:1a:80:c2:62:fb:27:f5:
22:4a:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:17 2026 by rpki-client