Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215262.roa
File: AS215262.roa (raw, json)
Hash identifier: VbF1bxEuLn6x2BLrSB+mh1+cUDPd4iWzgX0Hqzzk3nI=
Subject key identifier: B7:8A:3B:B0:46:4D:E9:99:5D:7D:3A:9F:2F:22:61:F9:FB:50:1D:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 29EA86DAC555437E62F6F7DD67F21A6AD99B3D8F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215262.roa
Signing time: Tue 07 Jul 2026 15:02:56 +0000
ROA not before: Tue 07 Jul 2026 14:57:56 +0000
ROA not after: Tue 06 Jul 2027 15:02:56 +0000
asID: 215262
IP address blocks: 2a0f:85c1:d3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ea:86:da:c5:55:43:7e:62:f6:f7:dd:67:f2:1a:6a:d9:9b:3d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 7 14:57:56 2026 GMT
Not After : Jul 6 15:02:56 2027 GMT
Subject: CN=B78A3BB0464DE9995D7D3A9F2F2261F9FB501D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:60:7e:ba:88:6c:1a:0d:ad:c2:97:5e:f9:
a3:98:5e:46:79:47:4a:41:09:1a:eb:fd:f1:f4:a5:
26:d6:47:77:c4:40:a5:d4:52:e4:43:7a:60:9b:52:
cb:ba:c7:fe:02:3e:85:f5:37:ae:97:ed:d3:e2:d5:
2e:12:3b:f5:b0:d6:6c:1e:7d:be:74:34:67:54:ea:
7b:d1:39:2f:8b:94:2f:f9:13:99:29:b0:48:05:50:
3a:0c:c7:04:71:00:ab:37:7e:b0:8b:a2:c3:9e:51:
ee:1d:ed:cc:22:3a:d8:e6:b9:8d:46:75:6c:2c:96:
52:3c:ad:1a:c4:79:3f:12:17:9d:8e:a6:9d:1b:f0:
15:25:ae:3f:30:ae:2c:19:98:9b:6b:2c:96:18:5a:
53:6e:12:75:a1:e1:ed:a3:a6:a6:07:c5:26:f3:1c:
56:9f:68:20:19:30:aa:d4:e4:72:e5:a4:3c:01:24:
e6:dd:81:47:20:ad:9d:88:f1:22:c7:04:89:0d:6b:
92:72:d7:8c:5c:df:d7:25:fe:22:e8:82:5f:a5:eb:
c7:56:bf:88:a0:52:f8:9f:bc:ad:7f:bb:d2:0e:49:
41:73:ee:71:e6:f2:58:bd:0d:33:27:73:30:51:38:
6a:21:98:3d:90:bb:b4:ce:f2:2b:ec:14:bf:9c:a7:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:3B:B0:46:4D:E9:99:5D:7D:3A:9F:2F:22:61:F9:FB:50:1D:1C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3f::/48
Signature Algorithm: sha256WithRSAEncryption
3d:68:98:c2:23:70:b2:64:18:f7:07:6b:86:a4:f9:d2:2e:51:
4e:b6:5e:af:79:7e:e4:90:1a:89:ba:77:b4:81:be:47:9e:ae:
4a:ee:68:2d:28:fa:4b:b7:5a:d7:45:74:6e:fb:50:3d:32:3c:
ba:d8:97:bf:a0:12:38:03:fb:c0:da:4f:ed:a0:be:9b:d3:5c:
23:53:8a:d6:55:7c:cf:21:6d:c6:d5:74:a2:67:7e:16:71:d7:
d4:87:36:22:1c:35:1a:48:f8:9b:d3:9d:04:b4:4f:a6:cc:9f:
e0:35:28:d7:96:01:0f:05:eb:9f:81:8b:81:2a:0d:b2:2d:05:
05:bd:bd:24:ed:4c:f1:ed:b2:da:38:a1:d7:39:b7:73:95:8a:
29:9c:da:f9:e3:20:fe:d1:24:89:62:21:4d:6b:30:18:1f:05:
cf:7d:06:79:59:52:6b:6d:5b:cb:c3:9d:e4:3b:a4:31:c2:cb:
59:45:44:48:b2:a3:db:e5:9f:23:7b:1a:28:de:b3:83:3d:4a:
e4:a3:12:9f:6a:e1:28:3f:3f:7f:6d:59:c2:25:f0:de:46:6f:
4c:db:15:64:d9:38:a3:96:b3:c0:b6:59:f6:eb:ac:10:31:b9:
c8:f9:0a:08:29:da:8f:53:8d:eb:3c:19:05:4a:99:a1:54:11:
1e:e1:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:44:04 2026 by rpki-client