Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215051.roa
File:                     AS215051.roa (raw, json)
Hash identifier:          yoTsfn1fR2oJqe+BlsC2QU6CK2znWdOUEclfzPoq+WU=
Subject key identifier:   B1:12:58:F2:EB:A5:4E:B1:08:2A:93:38:B7:2A:50:B1:F1:48:3A:05
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       594184EC571F324FC7C9397794D830E36D9D8B8B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215051.roa
Signing time:             Thu 25 Jun 2026 18:56:35 +0000
ROA not before:           Thu 25 Jun 2026 18:51:35 +0000
ROA not after:            Thu 24 Jun 2027 18:56:35 +0000
asID:                     215051
IP address blocks:        2a14:7583:f800::/48 maxlen: 48
                          2a14:7583:f802::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:41:84:ec:57:1f:32:4f:c7:c9:39:77:94:d8:30:e3:6d:9d:8b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Jun 25 18:51:35 2026 GMT
            Not After : Jun 24 18:56:35 2027 GMT
        Subject: CN=B11258F2EBA54EB1082A9338B72A50B1F1483A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:af:0e:94:1f:c3:6d:46:96:35:4a:f4:d0:a6:
                    c4:77:6f:20:11:9b:00:c1:e7:bd:1f:77:fe:85:70:
                    e4:ca:b0:b6:b4:0a:ea:d2:7d:d6:2a:78:54:11:00:
                    76:dc:d6:2b:eb:eb:4d:ad:f4:ef:cf:3c:2f:88:9e:
                    4e:6d:33:58:97:59:60:e2:93:6f:da:34:23:c7:25:
                    04:73:5d:25:6f:4e:53:5f:eb:c2:12:1d:9c:07:d0:
                    05:e3:02:b7:ff:9e:5c:e2:3b:67:bf:42:7c:5f:2f:
                    2f:a1:e8:8a:1c:2a:67:31:96:1e:4c:d9:35:61:70:
                    5c:95:05:91:ad:6f:93:82:ef:f7:d2:03:49:66:8a:
                    2a:ed:b6:ed:bf:23:f8:52:ae:c7:b5:9f:86:90:08:
                    71:99:e9:3e:cb:56:ed:f7:a1:a6:ec:05:f3:c5:1a:
                    f8:9d:0b:e2:1a:9c:12:d9:1e:fb:57:f1:d4:18:88:
                    06:2b:d9:91:20:60:71:05:36:0d:41:06:1c:4c:4f:
                    38:e2:17:18:9a:c9:34:99:cc:36:4a:64:dc:7d:5e:
                    81:e1:a9:7c:a9:1f:9b:aa:da:01:9b:41:f8:c5:7d:
                    23:75:47:97:d5:59:f4:b5:23:d4:4f:3b:f6:7e:49:
                    01:a1:7a:af:1e:a3:33:1c:be:6f:6d:b2:9f:c4:6a:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:58:F2:EB:A5:4E:B1:08:2A:93:38:B7:2A:50:B1:F1:48:3A:05
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215051.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f800::/48
                  2a14:7583:f802::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:40:b8:8e:66:29:e6:e2:bd:d3:d4:39:2c:a5:fb:5e:8d:e9:
         11:46:48:cf:62:b9:d8:94:30:df:b0:7e:94:85:87:25:40:73:
         b1:17:c1:fb:54:35:dc:96:dc:26:b2:be:e6:58:94:42:f7:fc:
         e4:c3:79:91:77:e5:51:0c:e0:7d:eb:ad:59:58:f6:1a:8f:5e:
         de:20:c5:1c:95:47:d6:95:33:d1:d2:d7:18:90:f8:07:36:16:
         22:f4:13:83:1e:bb:53:b8:a5:9a:37:75:78:65:c6:fe:cd:55:
         82:0d:5e:b6:63:57:3e:9a:5c:cb:7e:8a:00:e0:79:69:2f:16:
         02:16:5c:8c:4a:68:49:cb:36:be:34:97:9b:40:5d:93:1c:16:
         58:12:48:5d:5d:18:e3:90:80:8e:b5:46:f2:03:26:0b:1c:50:
         56:94:99:ff:e2:c8:2b:29:e4:f7:37:d8:46:e7:a5:98:b0:bc:
         30:2b:b7:4a:dd:9e:56:4f:e6:15:64:cb:30:37:81:98:6b:de:
         fe:ac:1f:96:52:d8:96:e9:06:35:ce:30:4a:63:17:1a:85:8b:
         81:e6:cc:49:e0:7a:6f:25:63:5e:55:de:3f:61:c7:76:35:97:
         3c:c3:0c:88:04:35:41:43:5c:58:c2:4f:0c:df:9d:87:39:72:
         4c:99:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----