Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215605.roa
File: AS215605.roa (raw, json)
Hash identifier: MSBehfYLoj0Vgokn5DBQWMesNcN5luEUrS1v1QKtQAY=
Subject key identifier: D3:FF:F6:43:C9:83:6B:D5:87:98:F9:2B:41:CC:01:9A:80:00:94:D8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 45D9C9813424D6F1683BE5A5A6C94C9A77241D4A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215605.roa
Signing time: Fri 26 Jun 2026 08:08:45 +0000
ROA not before: Fri 26 Jun 2026 08:03:45 +0000
ROA not after: Fri 25 Jun 2027 08:08:45 +0000
asID: 215605
IP address blocks: 2a0f:85c1:361::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d9:c9:81:34:24:d6:f1:68:3b:e5:a5:a6:c9:4c:9a:77:24:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:45 2026 GMT
Not After : Jun 25 08:08:45 2027 GMT
Subject: CN=D3FFF643C9836BD58798F92B41CC019A800094D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:b6:4f:5a:3a:49:43:ac:bd:1c:b9:1e:68:
52:45:b0:56:a9:08:a9:6d:6c:ec:a9:e9:96:4a:d4:
84:81:99:20:b7:16:6e:e7:ef:c7:e6:29:a5:1b:dd:
8d:d3:f6:50:bf:0c:a1:42:42:c7:82:6a:97:9b:aa:
a8:b0:f0:8b:6d:80:54:d2:e2:df:43:6c:de:66:7e:
e7:15:7d:d0:01:d5:83:15:ec:cf:76:0a:8e:c2:0f:
c4:ec:7b:0d:b2:fc:f4:6d:02:a7:b5:30:a2:81:ad:
da:9f:52:67:26:1f:7d:6e:44:45:e9:f6:a6:89:d5:
b4:d3:e2:1a:e2:ee:68:aa:a0:56:50:18:44:f9:96:
d4:fc:2d:23:3e:a7:59:e8:f1:05:00:04:a9:87:34:
ec:96:24:e8:2c:76:c3:ec:3f:5a:72:9b:f6:05:9a:
76:b8:7b:9d:cd:a3:1b:35:f5:6d:5c:26:4a:54:85:
7a:8b:99:30:79:47:21:a8:a8:b8:6d:4b:d8:09:24:
86:05:18:4b:37:68:1c:70:0f:15:91:af:37:cc:f0:
76:58:fc:d1:93:b7:00:48:bd:12:04:49:73:36:36:
20:54:45:69:28:bc:9c:b9:cf:ca:ce:21:3a:3c:ed:
c8:7a:db:9e:11:cb:30:b9:37:20:31:9d:e6:49:e2:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:F6:43:C9:83:6B:D5:87:98:F9:2B:41:CC:01:9A:80:00:94:D8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:361::/48
Signature Algorithm: sha256WithRSAEncryption
c6:27:f9:13:2c:6a:68:35:e0:a8:ec:96:e1:6a:81:57:63:b3:
e5:af:48:dc:56:21:b4:ed:48:0b:cb:75:04:5b:da:2e:14:2c:
4d:bc:9f:66:93:05:9d:98:f1:4c:4f:c7:da:e7:aa:79:bb:d1:
49:f6:94:bb:90:a7:97:b9:99:f6:53:db:32:aa:8d:61:38:76:
38:40:20:0d:cc:41:27:3a:1f:d3:9b:24:ac:45:f8:b9:1d:37:
d6:7c:85:79:6e:2f:cf:ff:2f:ea:7c:05:94:58:91:9c:3f:95:
09:e4:64:59:e4:31:a8:48:2b:c5:48:d1:e1:9d:73:40:c6:fd:
e7:27:cc:38:f2:b0:27:3e:b0:02:db:05:bf:cc:e9:ba:12:dd:
43:46:4f:e2:ee:74:c5:95:b0:20:c9:91:98:01:a7:d5:b9:13:
d8:bc:28:30:1f:4c:3a:68:d5:92:6f:5b:d8:64:b0:20:9f:18:
e8:48:fc:6f:1d:bb:e3:a7:c7:95:e9:57:9d:12:e6:6e:85:4d:
fc:dc:e1:47:b0:f3:98:bb:a4:56:87:69:86:d4:ce:73:e9:25:
a6:ab:fc:d8:33:aa:e8:03:b5:19:3f:4e:fb:5c:fb:6b:2e:6f:
e9:50:49:72:14:0a:6c:ed:d6:19:4e:c3:80:f8:ea:29:48:1a:
78:89:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:14 2026 by rpki-client