Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215899.roa
File: AS215899.roa (raw, json)
Hash identifier: vRKJ7dUha9oGI7nfpUDbdX55Nl087CEp7j0ECYgXSZ8=
Subject key identifier: 61:CF:25:6C:37:45:D4:37:3C:40:0D:21:46:7D:6F:60:4B:8B:6E:AD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5202B3F3D8159B394135BA9ED9FC7776FECCD192
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215899.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 215899
IP address blocks: 2a0f:85c1:334::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:02:b3:f3:d8:15:9b:39:41:35:ba:9e:d9:fc:77:76:fe:cc:d1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=61CF256C3745D4373C400D21467D6F604B8B6EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:30:52:64:7d:65:2a:aa:47:d5:8b:66:a2:
2e:79:63:5b:57:8c:2e:ab:35:a2:20:31:3a:bb:73:
d3:90:87:9a:a4:50:1c:96:c5:3e:64:0f:8b:6b:34:
c5:6c:da:df:25:57:b4:94:e7:9c:64:57:02:3d:81:
fc:35:4b:67:7e:56:cd:3e:01:b4:4d:f4:2f:7b:13:
e5:90:95:dd:c7:80:e3:6d:f0:6d:31:d8:f0:e1:8a:
be:e2:d5:c4:a9:e8:50:49:2a:e3:41:15:f1:12:bf:
85:a0:7d:4d:78:c5:a7:7a:f4:66:90:f6:fc:90:ab:
f4:f0:f0:7d:69:21:52:7c:03:81:eb:a3:13:6d:e2:
ba:d5:6c:ae:c9:83:33:34:4a:ac:9a:01:16:3c:7e:
05:96:b1:f0:33:76:1b:d6:fa:2a:d3:7f:c2:d4:c7:
c0:49:8a:ee:56:d2:17:5d:82:1d:ce:ca:bf:47:a6:
70:16:3d:6a:01:9e:bf:fc:a5:13:02:75:23:64:f4:
bf:7d:bd:cd:7a:89:60:be:8e:88:41:b8:96:3f:b7:
3c:e4:99:e0:ff:61:fc:47:53:2a:b9:8c:e9:da:dc:
62:63:b7:49:2e:3a:af:e0:35:9e:93:92:d2:9a:20:
fe:73:8c:a9:7c:07:95:e6:6c:5d:dd:50:bb:f2:27:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:25:6C:37:45:D4:37:3C:40:0D:21:46:7D:6F:60:4B:8B:6E:AD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:334::/48
Signature Algorithm: sha256WithRSAEncryption
9a:7b:ec:a2:10:0d:c2:eb:83:d2:98:0e:7b:1f:f3:09:8e:30:
86:62:4d:a4:15:fb:09:68:34:54:13:dc:c3:65:06:ed:c4:33:
1d:e4:48:27:38:de:99:d1:7a:61:68:46:2f:9e:c4:a0:9e:94:
b7:20:b5:49:14:85:0f:24:2f:8e:cc:80:67:02:9a:99:06:91:
ae:4a:7f:eb:67:d7:2c:c6:10:4e:78:4b:07:d7:d0:01:96:02:
6d:47:8d:cc:10:59:ad:cb:b4:d1:60:8e:bd:76:9f:58:bb:f8:
aa:d7:5e:c9:03:e5:2a:d4:b8:7b:51:7d:eb:af:80:93:f1:85:
b2:a4:1f:75:e8:95:2d:41:4c:d5:e0:6d:5a:28:74:b6:f7:17:
43:e2:3a:ca:80:11:54:ac:3a:d3:ca:49:f1:ff:c3:bb:d7:4c:
a8:ed:81:01:8f:04:7e:53:5e:87:18:97:6f:ca:c1:1b:ef:30:
68:df:d5:ec:18:cb:d3:8a:c2:45:00:e2:3a:d9:50:5a:8e:8d:
cd:33:ef:63:fd:e2:07:32:b7:62:12:c2:b4:ee:bb:7a:49:84:
7a:8c:f6:e0:e7:3f:19:70:b8:3a:59:5f:84:1f:57:bd:fb:e4:
4d:21:d5:68:d4:b3:e7:b6:c8:30:0b:30:3b:35:1d:25:43:d5:
55:55:59:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:40 2026 by rpki-client