Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215520.roa
File: AS215520.roa (raw, json)
Hash identifier: 1uZ+Q/itaoeo+ahl9YEfWpDSAO4zC0z7C7VeIuCrxBU=
Subject key identifier: A0:AC:58:1C:B4:3F:E1:0B:C8:34:C8:B5:CF:48:E8:F4:AB:24:45:F6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 547B7AC8FD324BED8549ED45F63F96F6CFB1AB93
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215520.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 215520
IP address blocks: 2a0f:85c1:368::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7b:7a:c8:fd:32:4b:ed:85:49:ed:45:f6:3f:96:f6:cf:b1:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=A0AC581CB43FE10BC834C8B5CF48E8F4AB2445F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:b7:09:03:84:de:43:33:71:6b:f4:59:0e:
54:c7:94:e9:11:52:1a:fe:4d:9c:91:60:b5:f9:80:
56:75:8b:f2:7e:8f:b5:c9:c9:57:3b:04:09:98:f2:
06:97:95:10:b1:b0:45:39:25:64:98:04:72:a5:e2:
9e:46:e6:f1:4f:0c:9c:aa:92:47:f6:aa:56:68:6e:
be:23:63:e3:56:db:0e:11:22:cf:63:a8:64:99:16:
68:df:91:e7:86:b2:8c:84:ad:36:81:a8:e6:4d:db:
7d:c2:d1:16:84:f7:04:ca:25:ba:62:15:39:ed:7b:
4c:10:83:a7:72:a1:ea:21:f8:5a:59:c0:f2:84:d6:
ac:0f:a2:9f:c4:ad:37:da:fb:ba:7d:ef:02:0e:23:
76:2e:e4:cf:82:92:8e:88:c6:2e:35:4b:43:49:25:
4d:6c:bf:5d:f4:7f:a9:28:0e:6a:f4:58:21:a8:4f:
9d:88:92:4d:20:8d:dd:54:d6:39:ce:80:d0:8e:46:
5e:4c:b8:03:b4:9b:88:44:fb:be:9b:da:3b:de:ca:
e3:6e:d5:7d:1d:fb:df:0c:1d:21:f3:c6:b4:2d:22:
f5:fb:c7:77:a8:db:df:51:67:5c:90:91:bb:51:f1:
26:9e:63:c8:d0:0e:ee:7e:88:30:5c:ef:5d:7e:17:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:58:1C:B4:3F:E1:0B:C8:34:C8:B5:CF:48:E8:F4:AB:24:45:F6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:368::/48
Signature Algorithm: sha256WithRSAEncryption
d3:7b:a0:7c:cd:60:f0:7e:5d:b2:ab:e7:c0:b1:2c:31:6c:71:
d3:96:c4:16:0d:60:51:a4:81:89:06:64:c7:8f:d6:82:33:bc:
56:3b:5d:74:68:0e:56:b5:b0:b8:b5:5b:d7:54:1e:ac:d2:db:
e3:80:d0:c3:bd:dc:e3:c0:c1:61:c6:61:ca:85:1b:ed:13:fb:
e4:d1:a5:1c:0e:00:34:c9:df:72:11:cc:36:15:6c:69:d3:19:
67:f1:51:59:a5:1b:d8:5c:67:b4:7d:ec:f4:c3:5a:4d:9f:17:
5e:dd:53:a3:cc:fd:0c:42:80:86:2a:cf:6d:d1:c7:e6:0f:70:
28:8e:d6:77:43:c7:b8:d0:f9:fe:90:49:90:7a:df:c3:fb:c2:
2c:b9:b8:99:34:eb:78:f1:05:b1:82:eb:3a:58:f7:37:40:51:
b3:a9:0b:6d:7f:f2:e5:b2:72:ab:22:c7:12:ec:ab:aa:08:5e:
ca:69:7a:17:52:19:b5:ea:12:43:41:ef:de:90:7f:d9:26:7d:
9c:92:9f:05:fb:4a:5f:cf:a3:0c:c8:38:d7:60:77:cd:5a:77:
76:d2:12:15:51:7a:1f:d0:56:fb:43:69:01:51:d2:7f:aa:7c:
f1:f0:e0:85:f2:80:17:ed:da:79:e8:1b:41:18:62:bd:ce:6a:
ae:df:14:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVHt6yP0yS+2FSe1F9j+W9s+xq5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzMzhaFw0yNzA2MjUwODA4MzhaMDMxMTAvBgNV
BAMTKEEwQUM1ODFDQjQzRkUxMEJDODM0QzhCNUNGNDhFOEY0QUIyNDQ1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5bcJA4TeQzNxa/RZDlTHlOkR
Uhr+TZyRYLX5gFZ1i/J+j7XJyVc7BAmY8gaXlRCxsEU5JWSYBHKl4p5G5vFPDJyq
kkf2qlZobr4jY+NW2w4RIs9jqGSZFmjfkeeGsoyErTaBqOZN233C0RaE9wTKJbpi
FTnte0wQg6dyoeoh+FpZwPKE1qwPop/ErTfa+7p97wIOI3Yu5M+Cko6Ixi41S0NJ
JU1sv130f6koDmr0WCGoT52Ikk0gjd1U1jnOgNCORl5MuAO0m4hE+76b2jveyuNu
1X0d+98MHSHzxrQtIvX7x3eo299RZ1yQkbtR8SaeY8jQDu5+iDBc711+F8nPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUoKxYHLQ/4QvINMi1z0jo9KskRfYwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1NTIwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQNoMA0GCSqGSIb3DQEBCwUAA4IBAQDTe6B8zWDwfl2yq+fAsSwxbHHTlsQWDWBR
pIGJBmTHj9aCM7xWO110aA5WtbC4tVvXVB6s0tvjgNDDvdzjwMFhxmHKhRvtE/vk
0aUcDgA0yd9yEcw2FWxp0xln8VFZpRvYXGe0fez0w1pNnxde3VOjzP0MQoCGKs9t
0cfmD3AojtZ3Q8e40Pn+kEmQet/D+8IsubiZNOt48QWxgus6WPc3QFGzqQttf/Ll
snKrIscS7KuqCF7KaXoXUhm16hJDQe/ekH/ZJn2ckp8F+0pfz6MMyDjXYHfNWnd2
0hIVUXof0Fb7Q2kBUdJ/qnzx8OCF8oAX7dp56BtBGGK9zmqu3xTZ
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:40 2026 by rpki-client