Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215281.roa
File: AS215281.roa (raw, json)
Hash identifier: qmPw9b6meqBmXpIWgKkyHF06ux08pJd9O2fQmkO7qno=
Subject key identifier: 96:53:B8:0A:B8:EB:E9:E2:89:28:62:A2:D2:6A:B8:87:1E:9D:CD:F6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7E2E748673B8495349EB2BB53A490C02572D03B3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215281.roa
Signing time: Fri 07 Aug 2026 01:09:00 +0000
ROA not before: Fri 07 Aug 2026 01:04:00 +0000
ROA not after: Fri 06 Aug 2027 01:09:00 +0000
asID: 215281
IP address blocks: 2a0f:85c1:d3e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2e:74:86:73:b8:49:53:49:eb:2b:b5:3a:49:0c:02:57:2d:03:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 7 01:04:00 2026 GMT
Not After : Aug 6 01:09:00 2027 GMT
Subject: CN=9653B80AB8EBE9E2892862A2D26AB8871E9DCDF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:eb:0a:4c:b2:3c:54:72:69:c2:0c:ff:35:
fb:96:96:c0:52:52:19:40:bf:66:ca:8c:0b:c6:78:
12:84:68:5f:08:e8:21:f2:bd:38:2e:5a:ad:a1:66:
d5:e3:c3:7b:47:e4:35:0c:39:c8:f3:8e:5a:f8:15:
e6:f3:8f:21:03:88:1b:ef:84:f0:27:40:ed:c2:0c:
09:6d:5d:81:5f:19:d6:b2:c2:0f:90:95:1a:ea:4b:
d8:a9:00:e3:80:44:08:23:83:11:f6:c4:03:7b:ab:
2a:92:cd:d4:43:fb:07:ed:9c:12:c3:1a:68:c4:c0:
b4:02:9e:a5:7b:40:ba:ee:ae:fa:59:62:13:e3:cc:
29:84:43:2f:46:90:e6:61:e8:ef:43:1f:dd:24:9b:
a6:67:27:45:b9:2d:4b:4a:81:db:79:f0:11:20:16:
63:ee:42:9d:26:8e:5f:02:4f:d9:fa:62:c7:97:25:
43:f8:0a:ed:7d:d5:bf:ac:82:7a:eb:ec:4e:7a:3a:
dc:54:b8:fc:5c:48:f9:42:bb:43:3f:32:8e:a8:fb:
a3:79:5e:22:5f:fb:4c:53:0a:5d:20:90:b9:9a:3d:
11:8f:87:e3:e3:b1:60:49:28:9b:da:40:3d:0f:81:
c2:09:56:29:6f:d0:9e:b1:a6:6f:94:4e:54:e7:c2:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:B8:0A:B8:EB:E9:E2:89:28:62:A2:D2:6A:B8:87:1E:9D:CD:F6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3e::/48
Signature Algorithm: sha256WithRSAEncryption
2f:39:fc:01:f5:95:39:e4:a5:51:d1:08:56:ba:23:22:90:fa:
56:3d:42:49:ba:a6:4c:01:bf:5b:84:d4:12:45:28:9f:6f:b6:
8d:be:06:6c:76:6d:5f:87:41:1e:5c:0c:5b:ef:35:ad:f4:2f:
c7:40:cd:7c:6d:26:5b:df:60:3b:ff:28:d8:70:c8:a7:03:ef:
c3:66:e0:74:51:34:c7:56:90:95:54:4b:02:02:16:0d:54:e4:
c2:f2:81:a6:1d:dc:c5:c3:65:2b:c7:56:0d:38:ab:81:fb:43:
47:8f:4a:37:31:7f:c3:31:e0:a9:99:ea:c0:7e:ed:96:03:d2:
c6:ff:69:d8:14:0a:57:8d:35:9c:01:90:d0:ed:70:33:47:84:
ba:f6:33:81:80:92:72:22:1d:23:2a:80:54:35:e5:b2:9b:47:
b4:10:94:af:7e:31:9b:2a:aa:05:f9:07:86:99:8b:2a:f8:da:
a3:b8:94:d6:fd:36:c0:73:e4:70:aa:7d:b1:47:fd:b4:be:61:
88:ac:91:e7:82:47:9d:96:77:b6:8c:b0:5c:71:3c:6b:b1:fe:
c9:b8:0e:9f:49:ee:7e:c3:62:01:29:d6:98:f0:3c:84:42:a8:
e6:3f:fb:46:3c:65:88:64:53:5c:9f:90:06:35:68:2a:bd:88:
70:60:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:15 2026 by rpki-client