Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
File: AS215522.roa (raw, json)
Hash identifier: xSJbzQZa4TTkv4/ivu2hKFqHDbte/3/TgN79Jd72VcE=
Subject key identifier: A3:CD:03:84:BB:B3:18:DA:EC:F2:F8:5F:1A:D1:F4:43:1C:E5:C0:8C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6BEE221BC1F3F1FA09B69E15B66F4F81D049F664
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 215522
IP address blocks: 2a0f:85c1:36c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ee:22:1b:c1:f3:f1:fa:09:b6:9e:15:b6:6f:4f:81:d0:49:f6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=A3CD0384BBB318DAECF2F85F1AD1F4431CE5C08C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:e7:39:ab:c9:e6:f6:a0:af:84:1b:06:99:
d5:51:29:94:dc:57:4d:a3:cd:a7:5d:e6:36:b9:78:
f2:05:5f:f9:77:89:61:78:cd:0f:87:6b:e2:da:c7:
66:36:18:9b:ee:6c:6b:21:37:4b:77:f2:96:8c:f6:
f7:c0:b7:ea:74:80:f8:ab:f8:cf:ef:8e:f6:dd:7f:
9e:ed:60:a2:06:38:11:bd:f2:32:ac:a4:4b:ad:1e:
61:2e:d3:24:3b:ef:db:4e:19:1f:a2:7a:98:71:fc:
72:9b:8b:7b:ba:11:99:46:d0:e6:d5:a7:e5:d6:f5:
ee:58:e7:65:38:7c:c6:a3:b7:42:0f:8c:00:17:d9:
64:dc:58:86:05:1e:8b:80:2e:bf:40:23:26:c0:b0:
94:19:d5:35:73:58:11:83:3a:eb:c0:e2:a6:71:46:
a1:fd:a4:f2:5a:71:b8:22:f7:2f:25:c0:8a:27:9a:
f0:49:b4:21:ad:d8:d0:84:21:1c:b3:b5:ad:71:35:
90:0f:6a:dd:83:ca:31:b4:98:f7:10:0a:f8:26:c2:
5f:61:74:23:94:29:de:09:9d:1e:e4:77:fe:97:b2:
2f:b8:b0:19:83:cb:5d:39:ac:81:42:3c:aa:f5:c8:
c8:b9:50:b3:8e:a4:fd:60:9a:66:32:e3:92:7d:66:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:03:84:BB:B3:18:DA:EC:F2:F8:5F:1A:D1:F4:43:1C:E5:C0:8C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36c::/48
Signature Algorithm: sha256WithRSAEncryption
d4:98:31:1b:c1:b6:7f:d1:e4:7f:77:9f:41:0d:fb:6c:ee:92:
d8:2f:28:13:71:e2:ea:44:da:4f:4a:42:47:50:95:ca:23:2e:
c2:14:f9:cd:62:31:9c:1a:49:48:ee:8b:8d:97:ca:74:7b:a0:
90:3c:ee:72:34:da:1d:85:75:a2:4b:7b:35:6d:bd:90:a3:d1:
ed:3b:8c:6f:f0:b6:49:07:16:62:bd:7b:fd:66:3c:88:59:a4:
f3:5a:1e:b5:51:d6:9e:5b:1e:45:51:17:31:72:b0:8a:61:14:
5d:a5:89:85:1f:3f:42:aa:81:64:b9:83:89:6b:51:cd:e5:bf:
75:d7:67:37:a0:4c:e8:9c:bf:09:80:ca:8a:33:ce:e1:83:f7:
d2:01:e7:74:e1:00:58:e4:e9:cb:26:57:b0:fa:88:8f:52:0e:
12:39:4d:5b:7f:53:f9:2c:0c:4f:bd:b9:e3:7c:d1:7c:83:3b:
80:70:55:a4:25:2e:de:1c:f1:c3:ae:f7:91:e8:8a:e8:0e:8e:
38:85:87:49:e6:08:30:2d:e2:58:cd:5d:3f:44:98:f6:ca:ee:
88:74:6d:d5:da:bd:14:18:02:bf:8a:69:d0:55:00:ce:77:84:
d1:de:06:46:86:e0:bc:52:51:dc:11:a2:96:7b:dc:a7:78:5e:
f2:7f:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:40 2026 by rpki-client