Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215532.roa
File: AS215532.roa (raw, json)
Hash identifier: ba3kpJO8XqhDu59WUCuXsznQ90N2WEUe5E2eSjCgFcU=
Subject key identifier: 9F:C9:7C:02:18:5F:6C:4B:60:9B:7F:45:70:7A:9C:38:8A:41:A5:EE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4E41F7FEF08391A35FE472E4C3AD211EE31F5299
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215532.roa
Signing time: Fri 26 Jun 2026 08:08:43 +0000
ROA not before: Fri 26 Jun 2026 08:03:43 +0000
ROA not after: Fri 25 Jun 2027 08:08:43 +0000
asID: 215532
IP address blocks: 2a0f:85c1:36d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:41:f7:fe:f0:83:91:a3:5f:e4:72:e4:c3:ad:21:1e:e3:1f:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:43 2026 GMT
Not After : Jun 25 08:08:43 2027 GMT
Subject: CN=9FC97C02185F6C4B609B7F45707A9C388A41A5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:d4:b5:cc:c4:f1:8a:df:4f:28:68:2c:de:
98:04:12:86:b0:1f:1b:ac:b1:6b:fe:e4:b6:16:9d:
ad:25:53:5f:19:7c:0a:1b:15:24:64:f0:0b:e8:5c:
29:17:2c:29:6d:46:e5:c1:37:3d:6b:3e:60:17:60:
71:b6:37:18:4a:d1:c2:3e:47:0b:3e:21:8e:79:4b:
55:1c:79:25:a7:d0:d5:a6:e2:53:86:41:f9:4d:b5:
d6:75:ae:52:b8:26:fb:77:71:95:16:ac:f0:af:72:
5b:7f:37:2b:2e:a7:16:26:92:54:2a:ef:a9:11:3e:
d0:bb:5e:97:77:c6:ef:09:d4:d2:d3:67:ee:9b:33:
a0:dc:f8:6b:05:67:dd:f5:9a:40:ae:fb:bf:a9:a1:
39:7c:40:93:3a:5a:7f:f5:77:57:95:01:9c:50:64:
54:77:3a:96:69:18:a9:57:6b:a4:60:77:dd:9f:1b:
42:f9:28:20:e4:f0:db:5d:b8:25:e1:ac:c2:fe:17:
7b:06:e5:af:1e:f3:79:a6:2a:24:1c:ea:27:4b:b9:
bb:02:44:d4:c9:e4:56:78:d4:76:8a:b0:f2:0b:3b:
33:72:e7:12:25:a6:ee:54:7c:05:6f:d1:62:7f:25:
c9:1b:05:a4:8e:92:64:2d:ad:26:b1:87:7d:c4:cc:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:7C:02:18:5F:6C:4B:60:9B:7F:45:70:7A:9C:38:8A:41:A5:EE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36d::/48
Signature Algorithm: sha256WithRSAEncryption
dd:bb:e6:12:0c:8c:52:66:81:a8:f9:fc:be:5b:0e:25:0a:94:
38:7b:2a:8e:ae:a5:78:82:e7:2b:43:c8:79:84:70:d6:8d:c5:
82:59:5a:4a:43:71:78:b5:a6:08:77:e3:07:89:12:a6:5d:26:
19:5e:97:1f:43:c7:65:c4:af:45:8a:9c:96:aa:53:25:a3:3d:
40:35:d3:1f:a3:91:ce:0d:90:48:13:14:e8:fe:83:08:0b:f9:
e1:15:c4:42:a2:3e:e6:27:bf:2f:27:46:c4:d9:8d:10:69:19:
86:30:67:7b:cb:8e:07:1e:a8:da:a8:c0:b0:98:36:62:a8:b4:
1f:9a:59:38:3f:99:9c:44:b0:a6:43:ea:45:69:d1:c6:73:34:
15:18:2a:d4:44:22:70:b0:49:ba:14:f2:42:45:4a:e5:7e:ed:
9f:e5:24:3d:81:c1:89:eb:b4:48:d8:32:7f:24:9f:9d:1f:f4:
08:67:59:32:e3:10:19:d5:9b:c4:4f:6c:71:53:86:54:2a:0d:
e0:c8:e2:87:2b:a1:a4:82:c6:96:be:a7:04:9b:f8:ad:8d:28:
3b:80:c9:14:ca:56:24:2b:8f:70:c9:33:c5:72:d3:41:31:be:
07:72:dc:a5:1f:05:24:80:a8:4c:53:d4:a3:eb:9c:a0:96:02:
47:d1:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:41 2026 by rpki-client