Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215676.roa
File: AS215676.roa (raw, json)
Hash identifier: AUI5+ZQGHq5dS7ev5FEONZmkHCWbuhyKdA/QFvB0hEA=
Subject key identifier: 05:EA:10:C8:73:DF:5C:03:1E:E5:9D:66:F7:C1:7B:D2:FA:37:2E:49
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 60BD43091E27FF872ACFBF16074AE047230FA407
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215676.roa
Signing time: Fri 26 Jun 2026 08:08:47 +0000
ROA not before: Fri 26 Jun 2026 08:03:47 +0000
ROA not after: Fri 25 Jun 2027 08:08:47 +0000
asID: 215676
IP address blocks: 2a0f:85c1:355::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bd:43:09:1e:27:ff:87:2a:cf:bf:16:07:4a:e0:47:23:0f:a4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:47 2026 GMT
Not After : Jun 25 08:08:47 2027 GMT
Subject: CN=05EA10C873DF5C031EE59D66F7C17BD2FA372E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:fa:9f:37:06:88:5f:df:bc:d5:06:eb:da:
fc:ff:4c:33:fe:d5:e8:b6:0f:58:30:f7:29:cf:8e:
4b:43:10:d4:08:a3:48:cb:4d:2e:d3:b2:bb:96:8f:
37:16:7d:af:16:f8:88:c1:5d:5c:9d:49:2b:ae:61:
b4:c7:5c:c0:52:06:41:55:0a:fe:4c:a1:8d:13:05:
25:10:91:b2:0b:c6:0d:f3:5f:77:e1:76:a9:bd:19:
d0:92:e2:91:c1:ad:db:1a:2e:f2:2a:47:22:e7:3b:
a4:19:92:43:56:bc:62:48:d7:5c:a3:80:51:f8:d2:
21:9f:c2:57:4a:40:09:cb:85:e4:85:b4:c9:67:8b:
d8:b5:a2:d0:86:46:1b:5a:c7:b6:76:be:25:7b:fc:
e0:61:f6:f9:67:6d:9a:65:36:a4:a1:52:af:be:6f:
17:99:a3:49:53:cc:c9:ed:f1:1d:13:ab:ce:0a:9f:
f2:6f:4a:fe:69:e6:f8:fa:ca:ca:86:21:e4:dd:fe:
c1:5e:9f:88:a2:c4:57:b8:85:a0:45:6d:c9:5e:dc:
b9:e2:d2:3f:48:e1:69:f1:ca:64:a1:b9:5b:eb:00:
60:51:98:74:47:34:2e:00:f2:94:bb:3c:01:17:cc:
f2:ba:34:0f:ae:be:ea:0c:9b:9a:a5:0f:76:ff:fe:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:10:C8:73:DF:5C:03:1E:E5:9D:66:F7:C1:7B:D2:FA:37:2E:49
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:355::/48
Signature Algorithm: sha256WithRSAEncryption
7f:59:83:60:78:2e:10:70:28:d3:cd:19:14:1f:22:7b:3f:58:
d2:ef:52:e0:4b:e2:ae:11:5e:f1:0c:e1:6b:3a:fa:38:8d:8c:
b1:94:65:ae:e2:2f:4d:40:dd:94:50:fa:27:42:5d:cb:b3:97:
e9:c0:ef:0d:bb:93:43:e2:a6:4f:f8:29:59:e1:b8:da:0e:21:
9f:bc:bd:dc:fa:8a:31:80:16:00:66:ad:33:02:9c:4d:24:55:
76:3b:8f:2b:c6:de:4e:5c:82:bc:19:b9:37:7b:a2:e8:ad:26:
db:bd:ab:17:be:ad:33:19:d7:3e:4a:01:e3:03:eb:05:44:ac:
18:5e:50:3e:9d:16:b0:d4:90:ba:4a:6c:7e:04:70:df:03:09:
b8:41:c3:6d:77:d1:92:1b:8e:b3:00:33:de:06:85:cb:1a:16:
23:12:f2:61:84:cb:ec:bb:e2:7e:b5:1b:44:96:af:97:7f:da:
41:b5:72:84:dd:80:cc:79:55:45:1e:a0:d6:58:fa:cb:4d:18:
ff:77:ba:96:33:bf:37:69:43:89:3c:69:47:bc:17:c0:db:a3:
b4:55:bc:3e:39:5b:80:25:7c:c4:8a:cc:05:3a:b7:dd:74:b8:
3b:39:db:79:59:b2:b1:54:91:ee:dd:10:af:e6:e2:09:5e:56:
96:d1:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:15 2026 by rpki-client