Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215526.roa
File: AS215526.roa (raw, json)
Hash identifier: PMuU7YqQ4jfCKDk/CU3+DM/++0tb5MZxfJ3kezTVzb8=
Subject key identifier: 73:91:D8:13:62:50:63:B9:7A:ED:01:EC:BA:FC:72:72:21:8F:5D:9D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 254B66FCEFF5EBFEA4E084C3CE95D2F639C49B0F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215526.roa
Signing time: Tue 21 Jul 2026 05:08:55 +0000
ROA not before: Tue 21 Jul 2026 05:03:55 +0000
ROA not after: Tue 20 Jul 2027 05:08:55 +0000
asID: 215526
IP address blocks: 2a0f:85c1:367::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4b:66:fc:ef:f5:eb:fe:a4:e0:84:c3:ce:95:d2:f6:39:c4:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:55 2026 GMT
Not After : Jul 20 05:08:55 2027 GMT
Subject: CN=7391D813625063B97AED01ECBAFC7272218F5D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:9d:ae:b6:b1:b8:f8:44:53:5a:92:10:03:
11:58:bb:55:80:43:f4:4e:51:46:28:fa:94:92:a7:
bc:3e:6f:9b:4f:c4:c8:06:d8:25:88:f8:80:b2:d3:
db:54:56:a8:12:db:71:f3:9d:3d:cf:45:9f:c1:f2:
83:70:bd:80:db:37:63:c1:8b:18:2a:a5:a6:bf:fd:
18:e9:7c:d6:01:8d:1c:b1:ae:a0:7c:61:ea:4f:b4:
aa:d9:de:f4:ab:90:8e:db:7f:a0:9a:98:d1:d8:65:
36:0f:0c:e3:ec:1b:b4:8f:92:73:f7:ac:20:8a:a2:
d8:59:68:ce:88:06:8e:de:f3:b5:be:81:5b:5e:ee:
d9:b2:f0:36:e3:2f:66:11:49:f4:33:28:b8:14:31:
26:00:62:9a:6d:15:29:d6:8d:91:11:66:a3:aa:ce:
ee:21:45:e2:f8:a9:6c:e2:dc:37:7b:fa:c4:cc:f3:
87:b4:0d:ef:6a:dd:4d:fa:97:2d:0e:8b:e9:a9:9b:
c4:1d:a1:a6:11:00:95:4f:2c:8b:e0:ec:b7:36:38:
c6:b8:cf:02:8d:e1:78:32:01:d7:0e:99:3c:91:2d:
d3:32:4a:3c:7c:28:39:de:55:7c:54:59:99:a0:9b:
9b:18:46:7f:70:5a:ed:00:46:aa:dd:7a:e1:f1:6a:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:D8:13:62:50:63:B9:7A:ED:01:EC:BA:FC:72:72:21:8F:5D:9D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:367::/48
Signature Algorithm: sha256WithRSAEncryption
bb:55:e6:a1:de:d1:f6:44:4c:11:7f:f1:18:83:e0:2e:46:fa:
10:08:ee:63:9a:9b:ae:6b:53:ca:a5:f6:4b:18:4f:f4:d1:bd:
58:64:48:a4:db:d1:2a:e2:a0:c7:a4:0a:68:7f:e2:aa:fb:02:
bf:75:22:fe:2c:6d:18:3b:56:ed:a4:dc:24:82:97:f2:62:74:
8f:c3:47:d1:72:e9:9f:dc:56:12:8e:f9:61:81:8e:25:de:37:
09:30:5c:d1:27:b9:b8:a1:13:90:ba:fb:14:04:4a:c2:da:09:
48:80:64:e2:5f:0c:94:87:5c:f1:c5:aa:75:e5:47:57:73:3a:
5d:8e:10:a4:f2:3d:8a:34:54:27:a1:87:0d:ff:8f:69:57:91:
d7:95:d3:85:fd:81:8a:4a:79:d4:7d:6c:e3:4b:e2:35:4b:5d:
76:0d:b9:28:1d:93:6b:52:5d:72:1c:fe:36:ea:2b:a4:52:b4:
c9:3c:01:d5:8c:8b:d1:88:5e:de:dd:a6:37:48:96:55:f0:df:
79:ee:e1:49:9c:64:ef:c6:c6:8e:96:87:cd:c3:97:29:6c:c4:
36:8b:52:0a:4a:19:e8:bf:19:a8:4f:c5:96:52:e8:ba:08:c9:
25:b9:60:50:40:63:03:0d:5b:2c:e2:9c:a8:68:57:00:2f:1f:
bd:e6:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:39 2026 by rpki-client