Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215030.roa
File: AS215030.roa (raw, json)
Hash identifier: dQgPCf8F4BK9NEv79i14GfZ6A4YBttko/OkTCB9MG9k=
Subject key identifier: 3C:DC:F5:74:FC:A5:BB:BA:10:EF:E3:1B:EB:AB:85:47:1E:B9:E6:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3268914515809639A2985FFCD4B79A2A8B64EF91
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215030.roa
Signing time: Sun 19 Jul 2026 18:33:54 +0000
ROA not before: Sun 19 Jul 2026 18:28:54 +0000
ROA not after: Sun 18 Jul 2027 18:33:54 +0000
asID: 215030
IP address blocks: 2a14:7580:5700::/40 maxlen: 40
2a14:7580:5700::/48 maxlen: 48
2a14:7580:5701::/48 maxlen: 48
2a14:7580:5900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:68:91:45:15:80:96:39:a2:98:5f:fc:d4:b7:9a:2a:8b:64:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 19 18:28:54 2026 GMT
Not After : Jul 18 18:33:54 2027 GMT
Subject: CN=3CDCF574FCA5BBBA10EFE31BEBAB85471EB9E672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:64:20:74:71:1e:47:3d:d7:11:e3:07:7f:
67:20:96:6f:05:46:08:35:55:a7:0a:98:0e:b7:d9:
33:d1:fd:b4:fd:65:4a:57:39:eb:4a:53:94:32:81:
e2:ca:a7:70:fc:93:16:bd:42:f7:5a:0d:e4:a5:ff:
dd:de:22:9b:4f:34:c3:46:f2:a5:af:db:7a:80:70:
b3:fe:18:9b:54:6e:24:21:df:a3:e0:a7:f9:bb:1c:
db:6e:fa:d3:52:76:f1:c0:51:b3:14:a2:04:46:ff:
67:3b:b9:fe:9a:2a:27:db:98:2d:ff:34:da:82:45:
1d:3d:68:c8:b5:85:0d:6f:c6:ec:64:85:df:cb:da:
95:92:9f:b6:87:39:9f:9a:2d:10:ac:e1:f9:e4:22:
dc:f7:08:92:b6:a4:f7:28:be:07:58:b7:b3:49:52:
f5:87:e9:33:75:ee:81:2f:54:54:59:fb:1d:3e:50:
ec:37:e0:da:74:38:c9:38:be:60:37:27:01:53:4d:
2f:63:fc:26:7a:a0:6d:b4:df:fc:11:32:b6:80:72:
12:5d:c4:8e:81:21:91:64:56:06:c1:90:ec:27:a0:
3d:42:51:a9:63:e3:37:8d:ec:3d:42:df:56:87:a2:
8e:64:98:35:ee:2f:5e:90:2d:3d:61:7e:3c:0f:c5:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:F5:74:FC:A5:BB:BA:10:EF:E3:1B:EB:AB:85:47:1E:B9:E6:72
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5700::/40
2a14:7580:5900::/40
Signature Algorithm: sha256WithRSAEncryption
46:b9:ff:a7:be:c8:ab:88:61:cb:36:73:fa:3f:97:7a:05:9b:
c5:c7:59:d3:a0:ae:db:a8:5e:0e:3b:8a:57:24:47:ce:d8:a9:
11:60:c4:d6:31:ca:f8:69:03:66:f6:3b:c0:fa:46:ae:db:ae:
e8:31:f5:2e:7e:77:a6:3c:b9:e3:5b:9a:1e:ed:e9:18:09:b0:
58:d3:41:0f:e8:23:39:b8:83:c3:ac:46:4e:35:4d:45:54:c5:
4f:ef:e6:10:b1:bb:a5:8e:69:a1:14:d7:a6:c4:aa:38:ac:db:
9f:28:e3:be:3a:fa:ec:80:3a:94:cf:fd:1c:bd:1d:6d:0d:b3:
0e:e1:97:a9:14:af:f2:5e:07:75:16:1d:60:13:5e:09:d2:89:
6c:10:51:7e:d3:c5:36:83:f3:db:9a:91:34:c2:71:e9:7f:ac:
cd:55:47:34:4d:10:da:be:61:c2:ad:4a:b3:97:98:00:50:68:
3d:36:10:20:9d:8b:c3:63:31:6c:9d:2d:5e:75:25:39:d3:34:
c8:ae:32:80:0c:10:44:a5:13:c0:19:79:6d:f4:02:5d:eb:73:
64:51:18:b2:6e:88:ec:aa:c4:dc:11:1e:ab:8f:35:c6:ea:0f:
80:bf:3b:74:78:98:29:79:d1:bd:cc:66:a5:d2:7c:58:d6:aa:
1b:9d:cd:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:39 2026 by rpki-client