Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215791.roa
File: AS215791.roa (raw, json)
Hash identifier: NLeqjXTfG+0MyxSZxAM7/zawL0l7hz5Yn1AujvL3mNY=
Subject key identifier: 0B:32:33:78:7B:A4:19:AF:65:19:9D:FA:D0:CD:D3:00:E8:41:D0:AA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 41D10CD05ABEC1E4A3E87FEF9C65D9EF9782723C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215791.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 215791
IP address blocks: 2a0f:85c1:348::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d1:0c:d0:5a:be:c1:e4:a3:e8:7f:ef:9c:65:d9:ef:97:82:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=0B3233787BA419AF65199DFAD0CDD300E841D0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d9:e8:38:ba:e5:97:ea:5b:de:5a:57:c9:48:
7d:5a:29:d2:c2:bc:6b:c0:1c:83:d5:a3:69:ff:67:
49:87:5e:38:ff:74:94:55:f2:83:2a:8a:a2:fa:f1:
e5:e5:33:6a:29:2f:02:1c:d3:e6:e0:3a:eb:e9:da:
ea:35:20:bc:df:86:1b:43:16:d2:0b:e2:57:36:79:
3d:2b:95:34:72:53:93:ba:b1:78:40:06:29:f9:2a:
23:83:5e:05:e6:c8:a6:40:1e:0f:ca:5d:60:3e:ce:
5d:37:97:ae:48:2f:cd:66:4f:94:22:ac:9b:46:db:
64:89:66:4c:2b:5f:f9:76:cf:35:ce:42:41:cc:4a:
b3:d4:ff:4a:03:fc:42:2e:ff:19:86:95:c8:5e:ce:
1a:78:ea:9e:91:08:94:25:d7:29:06:0d:2a:1e:06:
86:4c:86:85:c2:85:51:d2:d8:35:a9:4c:25:85:ec:
02:f3:ce:39:d6:2e:37:29:2e:23:77:10:3f:1e:6e:
b6:32:25:ea:e9:99:8d:63:5e:de:a0:36:0b:c5:45:
25:73:d6:c2:58:ee:f0:a9:b4:26:55:fb:4c:5b:96:
28:37:a3:cc:cc:13:93:dc:00:ec:61:c7:b1:34:c4:
66:a3:65:3f:2f:7d:9d:5c:b3:c5:2f:09:17:c5:cb:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:33:78:7B:A4:19:AF:65:19:9D:FA:D0:CD:D3:00:E8:41:D0:AA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:348::/48
Signature Algorithm: sha256WithRSAEncryption
dd:33:db:f8:58:91:74:73:ee:2f:6c:13:28:f9:a9:31:76:b3:
54:2e:73:2d:6f:4a:3a:af:18:91:4f:02:3c:5a:e6:04:37:75:
75:09:68:7a:ab:92:2e:05:57:89:9d:b4:e2:a7:c3:3e:45:6d:
99:52:76:b3:db:c7:a9:60:58:bb:86:18:b7:0f:ec:b9:94:c7:
56:71:07:bf:91:96:5d:07:ed:a0:2b:17:a3:08:c3:c5:d0:e1:
5d:5a:c5:9b:97:df:16:e6:ec:a3:ed:28:df:6a:53:5d:01:ab:
49:51:c8:e7:64:de:fe:7a:44:ac:04:fe:7e:9c:81:64:a3:44:
a3:19:fc:11:21:1c:88:6d:97:4d:82:77:15:f7:68:d0:24:9e:
fb:ee:23:f1:34:c7:f2:cc:7d:2e:a2:67:2e:4f:32:dd:e9:bf:
6f:52:58:12:a0:2c:60:0c:a8:1d:84:a0:05:5e:86:ac:49:83:
37:ad:9a:6c:cc:df:6c:ba:f6:2c:58:9a:35:a8:f7:56:30:2d:
53:1d:f7:45:71:9c:4f:27:01:9d:93:89:6e:05:e0:5a:62:7c:
38:69:c2:e7:ce:17:76:26:14:55:d3:f8:59:72:cc:a2:ee:e3:
cd:8d:95:a2:bf:66:fe:dc:3a:e8:fd:dd:d5:d8:84:b5:51:82:
9c:96:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:45 2026 by rpki-client