Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215382.roa
File: AS215382.roa (raw, json)
Hash identifier: d8ZDyXoaQMESVe8uOa+Z37Mi1X6ztpvnGdHRAkABAl0=
Subject key identifier: E8:A7:24:90:E9:76:D7:05:4D:5A:37:98:E4:61:48:52:C2:8A:65:FC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7A021C77DDD22AD657EB651BE9E356C4E6E84489
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215382.roa
Signing time: Fri 26 Jun 2026 08:08:48 +0000
ROA not before: Fri 26 Jun 2026 08:03:48 +0000
ROA not after: Fri 25 Jun 2027 08:08:48 +0000
asID: 215382
IP address blocks: 2a0f:85c1:395::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:02:1c:77:dd:d2:2a:d6:57:eb:65:1b:e9:e3:56:c4:e6:e8:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:48 2026 GMT
Not After : Jun 25 08:08:48 2027 GMT
Subject: CN=E8A72490E976D7054D5A3798E4614852C28A65FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:28:4a:a8:7a:a6:11:ea:9d:ba:5e:a1:0d:
97:b9:b2:91:a9:bb:5a:b2:4d:09:cb:5c:bb:d4:35:
bd:b0:18:11:ca:d2:e0:25:e5:c5:87:4a:96:9d:cf:
f6:ad:df:39:b3:4c:1b:67:3e:38:58:4a:9f:0b:44:
90:c7:98:aa:e3:6c:ba:7f:a6:dd:78:13:c1:0f:8d:
c8:85:bf:20:13:70:f0:f5:60:dc:2f:f3:6c:43:fb:
2f:64:44:8f:e2:2f:75:6a:b9:3f:65:e7:6e:c8:f8:
be:98:52:c0:eb:a6:35:01:d0:88:d4:ca:fb:72:ef:
bb:59:f5:c0:9a:59:ac:15:f8:a8:9e:05:a4:73:20:
88:c5:fe:54:0a:b3:43:35:da:18:21:1b:71:d1:bc:
7c:e2:f5:0b:13:f8:1b:0f:c2:56:17:61:41:56:0f:
fb:53:b6:9f:a5:42:ab:1d:72:b3:85:b5:4b:75:73:
73:2a:ad:b1:88:b0:79:2c:a9:62:2e:75:6e:b0:22:
ea:2d:cc:cf:6c:fd:b4:2d:5c:6b:14:0c:13:7f:7b:
34:f0:a8:e2:e3:ee:04:b2:bf:1c:87:6a:7d:26:af:
36:34:e0:11:64:2f:66:55:5d:c7:92:fb:24:60:5c:
22:76:27:79:2a:6b:12:ab:fb:4b:fb:97:5c:73:8e:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:24:90:E9:76:D7:05:4D:5A:37:98:E4:61:48:52:C2:8A:65:FC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:395::/48
Signature Algorithm: sha256WithRSAEncryption
87:56:7c:8a:29:8d:5b:2d:97:df:7c:d2:02:64:e1:a5:73:0c:
77:46:0d:11:5a:6e:3f:c3:33:a1:37:4b:7e:7b:6e:76:fa:60:
83:9b:8e:67:7f:d2:63:de:ee:6a:41:ec:d3:6f:1c:4d:a1:b4:
5c:95:ea:dd:6d:6c:50:a5:05:9a:d9:1e:5e:5f:eb:79:61:b1:
ae:95:c0:96:79:78:11:02:b8:3f:29:c0:cf:d7:57:8d:66:d4:
b9:51:6c:56:c5:69:b8:fd:95:df:39:60:b5:ea:ca:98:69:4f:
bd:96:83:5e:d7:b1:cf:07:74:a1:14:52:6b:2d:e4:a5:79:4c:
d6:14:e0:6b:a0:72:a6:67:f2:25:86:10:86:17:90:9d:9c:db:
fc:21:d5:bb:ca:54:35:64:8a:5d:b3:69:b1:0b:24:a9:73:42:
62:4c:95:a4:42:5b:5c:c4:29:50:e5:79:7c:cf:d7:45:21:94:
83:1f:d3:32:92:40:70:e0:60:e5:c8:49:b4:a3:8a:11:9e:e5:
e1:8c:84:f5:a2:2c:2f:d9:96:5c:ab:e3:41:3f:c4:c2:49:f1:
3e:72:e1:f0:16:91:fa:58:2d:71:73:a3:de:83:46:be:45:57:
65:b6:62:6d:bc:36:ae:92:83:24:08:f2:15:5f:1c:b9:c8:6e:
b4:b6:f9:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUegIcd93SKtZX62Ub6eNWxOboRIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDhaFw0yNzA2MjUwODA4NDhaMDMxMTAvBgNV
BAMTKEU4QTcyNDkwRTk3NkQ3MDU0RDVBMzc5OEU0NjE0ODUyQzI4QTY1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNShKqHqmEeqdul6hDZe5spGp
u1qyTQnLXLvUNb2wGBHK0uAl5cWHSpadz/at3zmzTBtnPjhYSp8LRJDHmKrjbLp/
pt14E8EPjciFvyATcPD1YNwv82xD+y9kRI/iL3VquT9l527I+L6YUsDrpjUB0IjU
yvty77tZ9cCaWawV+KieBaRzIIjF/lQKs0M12hghG3HRvHzi9QsT+BsPwlYXYUFW
D/tTtp+lQqsdcrOFtUt1c3MqrbGIsHksqWIudW6wIuotzM9s/bQtXGsUDBN/ezTw
qOLj7gSyvxyHan0mrzY04BFkL2ZVXceS+yRgXCJ2J3kqaxKr+0v7l1xzjgAvAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU6KckkOl21wVNWjeY5GFIUsKKZfwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MzgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQOVMA0GCSqGSIb3DQEBCwUAA4IBAQCHVnyKKY1bLZfffNICZOGlcwx3Rg0RWm4/
wzOhN0t+e252+mCDm45nf9Jj3u5qQezTbxxNobRclerdbWxQpQWa2R5eX+t5YbGu
lcCWeXgRArg/KcDP11eNZtS5UWxWxWm4/ZXfOWC16sqYaU+9loNe17HPB3ShFFJr
LeSleUzWFOBroHKmZ/IlhhCGF5CdnNv8IdW7ylQ1ZIpds2mxCySpc0JiTJWkQltc
xClQ5Xl8z9dFIZSDH9MykkBw4GDlyEm0o4oRnuXhjIT1oiwv2ZZcq+NBP8TCSfE+
cuHwFpH6WC1xc6Peg0a+RVdltmJtvDaukoMkCPIVXxy5yG60tvnl
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:46 2026 by rpki-client