Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215513.roa
File: AS215513.roa (raw, json)
Hash identifier: ecDwaFrdnPfkrElk5KWVmmY1rtqSRhT6ER8xMe98/Uc=
Subject key identifier: 03:F0:27:52:A9:41:61:00:6D:C7:50:09:8B:DE:3B:7E:A9:ED:9E:D9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 152B00C09D6D78F73D2008A32F04FE44F35DB29E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215513.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 215513
IP address blocks: 2a0f:85c1:36e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2b:00:c0:9d:6d:78:f7:3d:20:08:a3:2f:04:fe:44:f3:5d:b2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=03F02752A94161006DC750098BDE3B7EA9ED9ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:fd:aa:99:17:20:69:7c:71:b3:17:97:32:
87:a1:3d:cb:5e:58:96:04:b6:06:e4:46:24:09:7a:
81:96:50:ca:09:7b:6e:48:54:6d:01:c8:04:d4:ff:
35:ab:fc:f1:c6:c4:28:09:43:8a:00:38:7e:c2:5c:
98:f4:dd:e7:1a:94:ce:78:5e:bb:d2:a4:8d:b1:0e:
03:3a:12:80:8c:59:91:b1:be:0a:3e:d1:d8:43:89:
2f:5c:21:34:60:2d:dd:00:45:1b:5e:ed:5c:fc:d8:
63:6f:04:b2:1a:0c:76:b0:0c:ad:03:dc:02:b1:18:
36:be:c8:88:49:df:a9:79:a8:dd:5c:9f:59:4b:75:
8c:ea:f0:e4:38:38:da:2d:5d:15:b4:e9:fb:3c:3b:
d9:fe:f8:90:ef:99:d1:97:b3:05:1f:64:17:b1:da:
28:8e:bd:bb:72:43:90:bb:ac:a5:17:d9:1b:05:ba:
3f:01:33:24:01:35:e2:a3:23:51:31:36:f7:60:bb:
74:0e:92:9d:8c:f8:b9:89:b2:48:48:b1:df:ea:b0:
c5:35:89:70:c4:e5:b0:ea:69:0f:4e:9c:de:80:9f:
01:15:b5:cf:64:4b:e5:ad:73:97:d7:20:0a:06:8d:
8b:bb:10:ba:d0:91:c9:8f:97:7a:cd:ad:9c:d6:07:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:27:52:A9:41:61:00:6D:C7:50:09:8B:DE:3B:7E:A9:ED:9E:D9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36e::/48
Signature Algorithm: sha256WithRSAEncryption
6b:34:4f:83:32:ec:eb:52:28:a7:91:6c:19:11:52:6f:59:d2:
e6:34:bf:d7:21:9c:e5:1c:77:47:b6:5e:15:93:c5:e0:be:2f:
3d:50:9a:7b:23:78:63:e5:18:6a:07:0b:80:e3:c5:43:bb:2d:
8d:e6:50:ff:24:a2:93:0d:06:19:56:ba:ed:38:dc:84:9a:ea:
98:3d:59:b8:db:7d:71:ca:e1:51:c1:4c:31:0e:53:41:f6:ef:
f3:04:86:bb:94:f9:e2:4c:bc:34:7c:13:d9:d0:94:f1:3f:4f:
2a:12:59:3a:66:83:c6:92:93:cd:18:8e:cb:9b:05:3b:16:0d:
c0:1a:cc:a1:5d:8f:32:8c:1e:f4:c8:d2:4f:38:62:13:ae:89:
75:33:f1:e0:2d:83:92:73:6b:c6:b1:91:91:97:f2:18:fc:f2:
37:fe:4e:26:66:7a:4f:46:ce:62:eb:f6:ae:5f:f7:97:1e:04:
fa:36:72:bb:38:a2:a2:9f:09:22:30:a4:f3:a1:19:26:cb:a2:
e3:be:b8:7b:e4:d0:5b:20:fc:07:fd:12:78:fa:fb:f6:44:23:
af:fc:04:21:2a:d5:d0:f0:03:ce:e3:6c:ee:8c:e9:55:9c:40:
17:77:e9:8b:9c:52:44:59:f0:37:f7:e1:e0:28:fe:17:a8:44:
6a:fa:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:39 2026 by rpki-client