Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
File: AS215313.roa (raw, json)
Hash identifier: +wJdbuyfldtp8+7LiZ4XyKP6QYGFeAH49cdkHCH+N9E=
Subject key identifier: 71:5C:54:46:88:57:D2:3A:69:96:30:47:90:5D:62:38:6C:09:C9:4E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D059E34FEEF936188884A7D37F1E4824190E9A6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
Signing time: Wed 14 Oct 2026 04:09:19 +0000
ROA not before: Wed 14 Oct 2026 04:04:19 +0000
ROA not after: Wed 13 Oct 2027 04:09:19 +0000
asID: 215313
IP address blocks: 2a0f:85c1:398::/48 maxlen: 48
2a0f:85c1:b20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:05:9e:34:fe:ef:93:61:88:88:4a:7d:37:f1:e4:82:41:90:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 04:04:19 2026 GMT
Not After : Oct 13 04:09:19 2027 GMT
Subject: CN=715C54468857D23A69963047905D62386C09C94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:45:6f:44:2b:61:28:9f:95:cd:fc:42:29:
54:1e:18:65:5a:94:98:55:b8:99:68:e4:f7:24:7e:
37:8a:27:54:63:ac:81:a4:50:42:09:b3:f2:a1:cb:
a6:11:1e:95:72:94:5d:f0:6a:d4:ac:ce:28:ef:f4:
49:19:33:71:04:a2:37:8b:57:ae:e9:52:e4:e1:91:
08:c2:f1:68:c6:30:28:96:da:39:35:a6:f5:9a:04:
29:a7:f7:36:01:b1:b4:34:93:fe:95:57:93:78:b8:
2f:19:c5:98:0b:6c:ea:2a:90:48:c3:23:0b:65:ae:
31:db:f3:dd:2f:a5:1c:6a:6c:3d:fb:32:80:15:6b:
03:d1:26:19:94:27:26:2e:37:d6:48:63:99:66:8a:
9b:c1:89:20:e5:1b:31:11:cd:81:ee:30:fd:6e:5c:
9a:c5:48:9c:11:7b:97:fe:6c:53:70:25:a9:5d:b7:
76:ab:07:0f:f0:09:f6:c5:45:a9:78:2b:73:e8:b4:
66:f0:63:c2:33:62:85:a5:2d:fc:b6:d4:8a:d7:35:
0b:41:11:7f:5d:32:b9:17:4b:4a:4a:87:fb:4c:5c:
c4:b3:56:9b:74:55:51:f1:40:b5:a1:2d:94:5a:93:
09:76:05:5a:20:3a:d9:d3:46:a2:c6:74:b1:61:6f:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5C:54:46:88:57:D2:3A:69:96:30:47:90:5D:62:38:6C:09:C9:4E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:398::/48
2a0f:85c1:b20::/44
Signature Algorithm: sha256WithRSAEncryption
36:26:82:2e:b9:7b:6a:30:13:ec:69:1c:ec:3d:c4:6f:95:96:
15:68:4d:34:90:68:eb:30:76:8f:37:cb:33:6b:76:10:18:af:
e1:86:4c:4a:52:f8:a7:06:1c:2d:30:7c:41:e8:e8:a7:f0:e7:
9a:54:f3:2f:c4:36:c3:cf:26:4d:9c:a9:9f:6b:f1:87:66:32:
f9:99:39:00:6c:4b:c5:a5:a3:03:95:6e:23:15:88:ff:66:17:
8e:17:5c:17:4e:b3:6e:a2:58:bb:f7:5c:af:5c:f1:5b:92:ea:
61:9a:2c:d2:d4:8b:63:71:48:02:0b:5f:1c:37:08:c9:70:e8:
ba:83:ba:04:d9:3d:36:00:ab:48:f9:44:d3:78:8e:bf:a0:6d:
b1:1c:7a:57:77:f7:7f:0d:d0:c0:3b:2b:39:b4:f2:e3:02:bb:
d2:79:aa:2d:85:1c:13:fd:3e:4c:ea:bf:93:9e:f3:53:e8:5a:
24:e7:5c:66:fa:20:c0:da:45:a6:76:3e:44:8a:43:73:e9:b7:
48:c6:89:7f:bc:1a:c8:c1:f7:d1:6c:04:3a:8b:a1:4b:bc:cc:
29:56:12:d1:3a:21:f3:15:c5:9d:13:6a:9a:86:d6:a1:7b:ec:
9b:74:d6:0e:bb:b8:06:9b:8f:30:16:8d:94:27:4a:9c:14:6c:
66:20:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:04:53 2026 by rpki-client