Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215368.roa
File: AS215368.roa (raw, json)
Hash identifier: 80+NGherNah9kowOWs+JYs9boQIApmz1gRo8smHc0Xs=
Subject key identifier: DB:F5:45:66:80:18:52:D6:30:16:F6:0F:4E:50:F4:4D:02:98:71:5F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2F1B5DA5847ECB2324E961E65E8A93E802D111FE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215368.roa
Signing time: Fri 26 Jun 2026 08:08:43 +0000
ROA not before: Fri 26 Jun 2026 08:03:43 +0000
ROA not after: Fri 25 Jun 2027 08:08:43 +0000
asID: 215368
IP address blocks: 2a0f:85c1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1b:5d:a5:84:7e:cb:23:24:e9:61:e6:5e:8a:93:e8:02:d1:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:43 2026 GMT
Not After : Jun 25 08:08:43 2027 GMT
Subject: CN=DBF54566801852D63016F60F4E50F44D0298715F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:4d:23:dd:08:00:57:13:c4:1c:41:85:b5:
4b:fc:5e:7f:70:40:d1:c1:62:4a:2a:b6:17:23:28:
f2:5e:55:8b:f3:bf:b2:4a:45:0c:65:d2:6f:8f:69:
92:37:0f:15:8d:86:ca:6a:c6:31:d9:9b:3d:16:31:
dc:15:9b:96:fa:1d:fe:09:a7:b7:87:6a:8f:e3:e0:
e3:b3:d4:7e:f4:bf:7c:60:2d:9d:6c:8b:71:0b:54:
62:63:f0:28:42:c2:da:59:12:02:56:55:56:3b:bb:
d5:a4:98:12:d0:c0:1f:f2:28:9c:8d:9e:7e:bf:ae:
da:d4:5b:40:bf:f4:4e:64:ed:a7:22:39:7c:bd:15:
35:27:3c:1f:fb:3f:2d:e6:1d:d0:1a:cb:f7:b0:ca:
3e:f9:41:8c:69:05:76:7b:9d:c4:92:df:cd:3f:c2:
81:d2:e4:31:c0:66:77:b6:d3:6f:4e:ec:26:95:7d:
6d:6e:6c:ac:7f:fd:71:0d:78:a7:c2:00:5d:0d:28:
3a:df:b4:1c:51:8f:3c:99:6b:42:fb:ca:af:d6:68:
de:69:5d:72:6a:f1:82:84:b9:c7:f7:28:31:e0:35:
58:92:e8:c4:e1:77:2d:36:22:75:d5:34:4f:8e:f5:
2c:9c:35:de:b0:03:eb:e7:d9:5d:a0:c2:b1:28:b5:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F5:45:66:80:18:52:D6:30:16:F6:0F:4E:50:F4:4D:02:98:71:5F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
cf:a3:4a:da:e9:1d:05:d2:b8:d8:9d:7f:5b:3e:3d:1d:e0:dd:
6b:8e:b0:d8:32:fd:64:c7:a3:ac:a9:2f:1a:e4:3b:19:fa:f0:
96:be:2d:3b:fd:ed:b5:4a:c3:17:53:5b:9e:59:1d:f3:03:99:
52:a3:18:4b:f3:1d:c5:58:a5:a9:98:9e:09:19:06:31:f3:96:
23:8d:c9:08:30:91:33:56:3d:30:4c:93:6f:6f:b2:08:f7:53:
fa:29:5d:81:99:c8:97:50:a2:bb:3d:68:1a:e5:98:9e:54:70:
eb:be:b1:c8:93:5b:04:f5:7d:a2:c6:1a:9b:50:80:b3:df:54:
70:d2:05:40:80:6c:f0:2b:bf:63:03:04:d5:c5:ee:9f:89:be:
73:08:9b:a2:a9:7c:93:37:2d:05:b1:71:03:60:14:66:bd:8a:
7e:86:c9:77:5d:af:a0:50:3b:32:0b:af:36:b9:79:64:80:9c:
69:ce:4a:9b:9b:cb:df:21:19:b8:2b:29:6f:55:9d:c2:95:07:
ad:8a:85:f4:a6:9a:3e:bc:2e:d8:04:7c:c8:33:68:3e:d3:82:
f3:79:38:86:27:53:b3:bd:f6:a3:00:63:92:05:5e:57:ee:76:
59:58:75:ed:84:6a:7e:d3:e7:96:0c:cb:4f:1d:ea:5f:65:44:
d1:da:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:47 2026 by rpki-client