Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215743.roa
File: AS215743.roa (raw, json)
Hash identifier: Jmmd4I99wOWnw6TJqDUuooLmsYl6nUx0GFP4dcsH8y4=
Subject key identifier: 94:97:0C:5D:E6:51:0C:E1:C6:F6:A0:19:55:6F:25:D8:40:F8:97:DD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 05846579C1C7A721E171C6F735B2006F8B8D1B74
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215743.roa
Signing time: Fri 26 Jun 2026 08:08:49 +0000
ROA not before: Fri 26 Jun 2026 08:03:49 +0000
ROA not after: Fri 25 Jun 2027 08:08:49 +0000
asID: 215743
IP address blocks: 2a0f:85c1:347::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:84:65:79:c1:c7:a7:21:e1:71:c6:f7:35:b2:00:6f:8b:8d:1b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:49 2026 GMT
Not After : Jun 25 08:08:49 2027 GMT
Subject: CN=94970C5DE6510CE1C6F6A019556F25D840F897DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:04:c5:25:1d:56:63:f4:aa:0e:36:ef:16:
aa:57:60:74:c1:ba:16:36:42:68:14:c6:ac:03:05:
40:6f:4d:db:8b:94:fd:1c:5e:ed:34:6a:7a:fc:55:
b7:de:e6:f4:94:98:a5:e4:ee:e2:0c:22:de:4a:12:
b9:76:c1:c6:1b:bb:d0:f8:22:1f:d4:ff:d9:86:3c:
5c:b9:87:60:7a:0e:f3:2f:2b:99:ac:8e:aa:61:b9:
d5:3e:de:12:66:f7:10:79:63:78:e7:63:52:bc:17:
4e:87:5a:d2:d2:14:52:2c:08:01:74:0a:b2:f7:ac:
ec:1f:37:0d:03:ac:98:a7:a5:21:8f:0a:89:bb:8c:
6d:8b:2d:36:ac:dd:47:6b:5e:c8:27:c7:71:4b:55:
cf:52:96:39:09:3e:bd:71:67:0d:74:e6:12:66:d9:
2b:f7:30:34:fb:41:17:9c:aa:82:b6:ce:4f:e0:77:
d3:7b:27:67:49:50:18:7d:1e:08:49:46:73:3d:46:
cb:5a:1a:d4:2b:28:ff:a8:28:b0:45:6b:95:44:45:
e6:46:f0:fd:f4:e2:e9:5d:cb:c3:e7:61:f7:53:92:
b1:6e:4e:a9:93:41:65:f8:80:4a:5a:de:9c:55:7e:
5c:62:9c:88:30:7c:06:95:cb:6b:94:c6:97:97:e2:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:0C:5D:E6:51:0C:E1:C6:F6:A0:19:55:6F:25:D8:40:F8:97:DD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215743.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:347::/48
Signature Algorithm: sha256WithRSAEncryption
67:dd:93:d3:0f:f9:43:a9:0d:f5:79:b3:58:58:1a:93:14:cf:
37:c2:75:2f:ac:7b:bf:09:fb:02:b4:a4:87:55:02:b6:3a:c3:
6f:45:6a:24:f4:b2:b8:9d:08:c1:69:0b:6f:55:e7:50:56:72:
a7:a8:f6:74:99:eb:bc:c4:28:8d:7f:77:29:34:ac:61:04:3c:
1f:9d:70:4d:0f:2a:82:ad:d3:96:ae:aa:97:e9:f5:b7:60:2f:
7b:9c:e1:18:12:fd:9a:c8:aa:57:eb:43:95:bc:02:d7:04:11:
15:bf:81:d3:94:05:93:f2:90:0c:37:c7:c2:9b:d7:d5:70:37:
da:5c:14:87:92:c7:03:0b:36:8f:44:2b:3c:16:ad:27:c4:29:
d4:de:de:bc:94:d3:89:5b:9a:79:17:15:1e:8a:94:47:d4:7d:
3c:e0:fe:59:40:44:01:e1:d5:e6:e5:53:d6:4e:53:2f:ff:c2:
f0:45:e0:ce:77:fd:f8:19:d8:e9:86:64:52:26:da:26:cd:70:
ca:d3:bd:0e:c2:a1:e0:df:0a:b9:96:be:82:e3:15:65:f6:19:
78:20:79:8d:ac:5d:84:37:ee:8f:92:1a:47:8d:fa:8e:7b:52:
f9:6f:b5:f8:6c:a6:1e:9e:f0:be:f3:8f:6c:85:87:77:bc:8b:
ab:75:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:43 2026 by rpki-client