Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201815.roa
File: AS201815.roa (raw, json)
Hash identifier: RNRjRjeb0ByCE41Kf0nRxmFyU8KmuO/ERivWJor1g48=
Subject key identifier: DC:3F:05:72:C7:12:1E:95:03:29:7E:A1:19:AD:DC:5B:A2:74:E0:EC
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1D9BF1DFE0703E8ACBFAAB92D73DD987E616AE99
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201815.roa
Signing time: Mon 29 Jun 2026 13:33:49 +0000
ROA not before: Mon 29 Jun 2026 13:28:49 +0000
ROA not after: Mon 28 Jun 2027 13:33:49 +0000
asID: 201815
IP address blocks: 2a14:7584:4ec0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9b:f1:df:e0:70:3e:8a:cb:fa:ab:92:d7:3d:d9:87:e6:16:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 29 13:28:49 2026 GMT
Not After : Jun 28 13:33:49 2027 GMT
Subject: CN=DC3F0572C7121E9503297EA119ADDC5BA274E0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:c9:3d:e6:be:0f:e7:a6:5e:0c:ee:9c:17:
70:df:ba:05:89:ad:9e:6d:3c:7b:d2:70:c3:06:e4:
50:22:ff:ea:0d:bc:7c:ce:f5:0a:19:5a:5e:9d:49:
2e:59:2f:ee:e9:5d:77:db:fd:db:46:ad:36:15:74:
71:df:a7:d0:55:62:8c:08:6e:66:c8:42:e1:1a:18:
31:f5:c9:d1:f3:74:33:47:f9:b8:f6:96:19:31:1b:
88:f6:75:57:19:17:e1:d4:9d:09:f2:7e:ed:5b:7c:
44:40:28:87:93:a2:22:94:f5:36:b9:e4:75:74:ca:
a0:b2:3a:50:69:f8:05:23:8c:3a:fe:78:66:28:b2:
7d:14:f8:e0:e9:f6:df:33:57:50:14:98:d3:67:4f:
83:28:dd:f0:63:48:92:aa:41:72:0d:dd:fb:99:14:
14:15:8c:dc:e1:69:45:9f:9a:8b:fb:9a:84:53:ca:
47:d0:67:ad:fe:88:89:fd:6a:eb:9c:98:47:ba:63:
b6:65:b1:43:9f:ee:c3:6d:77:20:4f:2e:4c:a2:7d:
4e:8f:b5:09:da:eb:c2:ee:9c:55:62:b6:a8:f8:e4:
5d:23:91:05:5f:74:94:09:1a:17:96:ea:a4:46:48:
0c:75:65:7f:8d:f1:56:f6:1e:16:c0:02:6e:d3:52:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3F:05:72:C7:12:1E:95:03:29:7E:A1:19:AD:DC:5B:A2:74:E0:EC
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201815.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:4ec0::/44
Signature Algorithm: sha256WithRSAEncryption
75:45:bf:7d:5f:23:53:b4:60:ce:db:a4:16:01:bd:60:f6:67:
9a:00:48:4b:0c:a6:e7:00:45:9a:b6:d4:b5:90:de:11:8d:07:
9e:5a:bd:4e:56:9b:a8:52:59:16:bd:27:33:5a:e9:be:d7:a0:
a9:e8:60:95:bc:99:d9:92:76:5c:01:e4:03:3b:ee:91:6e:d2:
95:fc:17:73:78:ce:8d:ff:55:0d:27:99:60:64:17:17:a2:7d:
21:6e:76:4a:b9:37:25:f5:86:59:8f:f7:25:f4:1d:e9:d2:ef:
36:f4:18:dc:09:40:be:67:d4:08:e5:a1:08:f5:0f:78:2e:38:
b4:8d:24:e4:ce:ed:32:1b:8d:18:30:2f:79:55:27:cb:f5:92:
17:f4:27:9c:df:5c:79:6e:69:73:03:ec:75:f4:ed:00:f2:5a:
66:a8:98:8b:d0:ab:0a:62:fa:82:c7:12:da:e2:ce:e8:7e:c2:
b6:e1:12:04:78:a8:88:e6:24:42:a8:d3:e4:ef:54:79:4f:31:
c8:44:13:0c:0f:00:67:31:6e:3e:e2:79:4b:3e:01:6b:b6:c8:
e9:8b:a9:7d:7c:19:32:0c:1f:a1:f0:b3:be:54:eb:bd:51:70:
2c:a0:a4:80:56:01:28:f3:b7:25:16:7d:03:ad:fe:1e:da:bd:
da:f7:de:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUHZvx3+BwPorL+quS1z3Zh+YWrpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA2MjkxMzI4NDlaFw0yNzA2MjgxMzMzNDlaMDMxMTAvBgNV
BAMTKERDM0YwNTcyQzcxMjFFOTUwMzI5N0VBMTE5QUREQzVCQTI3NEUwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMkck95r4P56ZeDO6cF3DfugWJ
rZ5tPHvScMMG5FAi/+oNvHzO9QoZWl6dSS5ZL+7pXXfb/dtGrTYVdHHfp9BVYowI
bmbIQuEaGDH1ydHzdDNH+bj2lhkxG4j2dVcZF+HUnQnyfu1bfERAKIeToiKU9Ta5
5HV0yqCyOlBp+AUjjDr+eGYosn0U+ODp9t8zV1AUmNNnT4Mo3fBjSJKqQXIN3fuZ
FBQVjNzhaUWfmov7moRTykfQZ63+iIn9auucmEe6Y7ZlsUOf7sNtdyBPLkyifU6P
tQna68LunFVitqj45F0jkQVfdJQJGheW6qRGSAx1ZX+N8Vb2HhbAAm7TUuWbAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU3D8FcscSHpUDKX6hGa3cW6J04OwwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAxODE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1
hE7AMA0GCSqGSIb3DQEBCwUAA4IBAQB1Rb99XyNTtGDO26QWAb1g9meaAEhLDKbn
AEWattS1kN4RjQeeWr1OVpuoUlkWvSczWum+16Cp6GCVvJnZknZcAeQDO+6RbtKV
/BdzeM6N/1UNJ5lgZBcXon0hbnZKuTcl9YZZj/cl9B3p0u829BjcCUC+Z9QI5aEI
9Q94Lji0jSTkzu0yG40YMC95VSfL9ZIX9Cec31x5bmlzA+x19O0A8lpmqJiL0KsK
YvqCxxLa4s7ofsK24RIEeKiI5iRCqNPk71R5TzHIRBMMDwBnMW4+4nlLPgFrtsjp
i6l9fBkyDB+h8LO+VOu9UXAsoKSAVgEo87clFn0Drf4e2r3a996T
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:40 2026 by rpki-client