Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215050.roa
File: AS215050.roa (raw, json)
Hash identifier: K3pSQWy7vQAjMDN0pgprFqC5N6zVPEXms5NTP3l+aA4=
Subject key identifier: 98:08:33:88:8A:CD:87:62:D2:34:61:1B:43:CE:DC:53:64:C9:1B:42
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0E5C41FDE7DFB39D5A5FE6CF8A3FDB96027D5340
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215050.roa
Signing time: Wed 22 Oct 2025 07:05:33 +0000
ROA not before: Wed 22 Oct 2025 07:00:33 +0000
ROA not after: Wed 21 Oct 2026 07:05:33 +0000
asID: 215050
IP address blocks: 2a14:7581:9700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5c:41:fd:e7:df:b3:9d:5a:5f:e6:cf:8a:3f:db:96:02:7d:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 22 07:00:33 2025 GMT
Not After : Oct 21 07:05:33 2026 GMT
Subject: CN=980833888ACD8762D234611B43CEDC5364C91B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:f2:40:d0:2d:50:42:90:3d:af:b2:a8:18:
b6:35:82:9e:9e:80:6b:bb:71:78:42:77:27:b8:9d:
1b:cf:f7:c9:63:fe:35:ad:3d:73:f4:47:e2:cf:dd:
63:90:41:57:99:cd:c4:e3:2f:81:6e:ad:4e:59:a2:
3e:fc:d7:57:16:e4:8f:f2:6d:13:ec:5b:47:8b:fc:
c1:11:ea:68:f4:6e:76:4d:1c:6f:59:88:c8:f7:3f:
be:25:fb:17:eb:5b:bf:66:b5:e2:13:06:09:69:a1:
ae:b7:7b:52:d1:06:05:5e:58:05:55:b3:f1:01:eb:
67:82:55:5b:1c:55:d2:82:67:97:28:17:fb:f0:f8:
b8:6e:c6:2a:7e:6c:51:14:d5:55:d2:40:a0:7f:10:
d0:0d:2b:87:3e:95:95:e4:90:36:df:74:80:f2:ab:
9c:59:57:37:8d:66:1b:2a:1d:40:37:d3:c1:ff:e8:
b2:ce:00:bc:5a:a7:c7:0e:d5:b4:29:1c:e5:ba:7e:
54:fc:58:3a:cb:bc:8c:68:1d:0d:37:64:3a:6a:cb:
ba:e4:a5:51:23:57:e3:28:0a:c6:f9:bd:a4:3c:62:
35:f5:ea:56:e1:91:b3:82:eb:04:11:ae:6f:7f:66:
22:ad:3e:5b:81:a4:25:a2:f8:e0:bc:41:01:42:1b:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:33:88:8A:CD:87:62:D2:34:61:1B:43:CE:DC:53:64:C9:1B:42
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9700::/40
Signature Algorithm: sha256WithRSAEncryption
07:3e:60:60:99:82:08:4a:de:cf:e4:a7:89:9b:b1:37:7d:78:
28:e4:41:ab:c0:b5:72:f8:25:85:3a:a3:fd:46:e7:7e:31:fc:
8c:b5:c2:7b:49:62:f9:23:e4:5d:26:27:c1:fe:24:eb:d9:5d:
5a:4e:99:2b:62:e2:da:38:da:08:de:6c:02:96:c7:a5:e0:69:
2a:55:30:0d:0c:19:67:81:7b:dd:e0:a1:c7:94:30:e6:58:5b:
fe:35:8c:9f:ac:fe:32:ca:bc:7e:37:b9:be:45:68:72:d3:9f:
a9:03:b9:bb:c5:21:33:b7:24:75:8e:b5:27:20:fd:b2:f0:dd:
51:5b:1d:1e:ed:72:7b:87:33:53:9a:94:06:01:8d:8e:cb:4d:
5f:45:0b:eb:92:e1:7f:72:f1:cc:a0:9d:1c:50:d0:19:4c:12:
fa:b4:85:fd:9c:6e:7a:56:46:49:0b:84:89:d1:32:50:62:8f:
78:e4:9e:8c:25:57:5f:a6:16:b0:23:8e:5a:9f:d5:1a:6d:4d:
1f:80:6d:f3:65:9e:eb:ae:fc:de:01:4b:a2:4b:c1:97:47:a6:
71:ad:d3:fc:e6:27:01:c6:57:67:3e:71:94:75:a4:de:9f:c6:
cf:d8:8c:2f:9c:17:99:58:ff:49:ea:b4:78:71:d7:e6:e3:cf:
f2:59:b9:f3
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUDlxB/effs51aX+bPij/blgJ9U0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTEwMjIwNzAwMzNaFw0yNjEwMjEwNzA1MzNaMDMxMTAvBgNV
BAMTKDk4MDgzMzg4OEFDRDg3NjJEMjM0NjExQjQzQ0VEQzUzNjRDOTFCNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxo/JA0C1QQpA9r7KoGLY1gp6e
gGu7cXhCdye4nRvP98lj/jWtPXP0R+LP3WOQQVeZzcTjL4FurU5Zoj7811cW5I/y
bRPsW0eL/MER6mj0bnZNHG9ZiMj3P74l+xfrW79mteITBglpoa63e1LRBgVeWAVV
s/EB62eCVVscVdKCZ5coF/vw+Lhuxip+bFEU1VXSQKB/ENANK4c+lZXkkDbfdIDy
q5xZVzeNZhsqHUA308H/6LLOALxap8cO1bQpHOW6flT8WDrLvIxoHQ03ZDpqy7rk
pVEjV+MoCsb5vaQ8YjX16lbhkbOC6wQRrm9/ZiKtPluBpCWi+OC8QQFCG1GnAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUmAgziIrNh2LSNGEbQ87cU2TJG0IwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1MDUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1
gZcwDQYJKoZIhvcNAQELBQADggEBAAc+YGCZgghK3s/kp4mbsTd9eCjkQavAtXL4
JYU6o/1G534x/Iy1wntJYvkj5F0mJ8H+JOvZXVpOmSti4to42gjebAKWx6XgaSpV
MA0MGWeBe93goceUMOZYW/41jJ+s/jLKvH43ub5FaHLTn6kDubvFITO3JHWOtScg
/bLw3VFbHR7tcnuHM1OalAYBjY7LTV9FC+uS4X9y8cygnRxQ0BlMEvq0hf2cbnpW
RkkLhInRMlBij3jknowlV1+mFrAjjlqf1RptTR+AbfNlnuuu/N4BS6JLwZdHpnGt
0/zmJwHGV2c+cZR1pN6fxs/YjC+cF5lY/0nqtHhx1+bjz/JZufM=
-----END CERTIFICATE-----
Generated at Wed Oct 22 08:58:48 2025 by rpki-client