Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215051.roa
File: AS215051.roa (raw, json)
Hash identifier: PbHukXrOimTRVfhfY52UiJYTxyDCl4GO+P5WECmMEDs=
Subject key identifier: BC:44:95:B0:60:A2:67:AC:EB:00:9C:C6:86:B4:C1:04:37:BA:83:89
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 51329703CD2C72225F7483EB43FCB53D782C8FA2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215051.roa
Signing time: Mon 01 Jun 2026 15:28:35 +0000
ROA not before: Mon 01 Jun 2026 15:23:35 +0000
ROA not after: Mon 31 May 2027 15:28:35 +0000
asID: 215051
IP address blocks: 2a14:7583:f800::/40 maxlen: 48
2a14:7583:f802::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:32:97:03:cd:2c:72:22:5f:74:83:eb:43:fc:b5:3d:78:2c:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 1 15:23:35 2026 GMT
Not After : May 31 15:28:35 2027 GMT
Subject: CN=BC4495B060A267ACEB009CC686B4C10437BA8389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:b2:94:b3:6f:5f:6b:e5:63:bc:ab:1e:4c:
1c:a2:cd:4f:92:f8:ca:0a:d3:ce:d9:f9:2c:ae:88:
aa:32:a3:d9:ea:f2:14:8d:27:9f:b1:57:45:e4:9c:
86:aa:17:34:26:0e:ae:64:59:43:ab:27:32:53:5e:
66:ad:0f:7c:c5:b8:f5:15:c1:c1:a7:da:f8:9a:8d:
b0:b7:97:43:73:93:c5:fb:ab:8b:ec:98:7e:01:0d:
3e:a1:63:90:26:29:9d:30:03:41:c1:d8:3d:98:56:
9a:1c:c9:d5:f7:8e:23:4b:02:96:e3:0a:a9:82:de:
29:73:fd:c4:7c:39:34:40:67:8f:13:7e:0a:63:cf:
fa:6f:00:33:1b:ea:d5:50:98:54:38:8e:68:f8:aa:
3f:90:1b:43:c0:71:f3:99:81:7f:9f:13:0a:2f:56:
e5:7d:9a:93:5e:6f:71:9a:cc:b8:4c:f3:9a:77:97:
18:c7:2f:22:24:8d:51:bb:91:0f:6d:10:65:79:b5:
62:ff:b9:3c:42:a0:b1:18:e1:50:2d:bb:d0:76:6f:
d2:41:e4:07:1c:b3:48:8f:75:1d:37:28:20:0c:01:
56:c8:4d:22:cd:d8:f0:2b:7c:a8:6b:de:a1:d3:5d:
ac:dd:90:e7:9a:64:6c:d3:83:6d:2a:79:ea:c0:ee:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:95:B0:60:A2:67:AC:EB:00:9C:C6:86:B4:C1:04:37:BA:83:89
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f800::/40
Signature Algorithm: sha256WithRSAEncryption
06:31:a9:2c:0c:4b:f6:da:12:de:8e:e0:0e:d8:40:ef:5f:d3:
f5:28:16:a8:1e:60:c8:3a:57:cd:03:c7:e5:03:c9:59:08:b6:
50:b7:c7:15:7b:df:7e:93:d1:ba:01:88:fd:6e:b3:5d:25:22:
bd:f4:3a:17:91:47:9f:a2:9a:7f:10:7e:78:eb:34:9a:40:ed:
48:68:51:6c:86:ff:5e:90:c2:8f:c5:e9:24:ac:01:2d:75:5f:
31:85:6f:1d:1a:ae:15:db:7e:27:7d:cc:e4:61:15:e1:c2:fb:
f2:96:99:38:b3:56:55:bf:42:28:73:82:92:0b:30:ea:25:a6:
dc:ec:90:f0:85:7b:58:5a:7a:57:ab:4c:66:b3:e4:07:99:1c:
47:43:15:7c:23:1b:cb:ef:0c:05:69:38:22:fd:5f:31:9c:97:
c7:b2:87:46:7a:22:72:08:28:ac:ea:b2:d0:59:e0:92:84:f4:
b9:9e:01:05:3a:1a:ef:8f:39:79:1a:c4:b3:20:d1:45:a4:fb:
87:1a:9d:d9:d2:46:47:83:91:66:77:57:63:31:bc:a6:70:09:
91:aa:2d:27:cb:8e:eb:76:aa:36:84:5d:5a:43:9f:29:e4:e4:
8b:ec:66:af:d1:a0:27:c4:f0:f1:26:b0:c4:56:69:7b:c8:ac:
d4:89:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:38 2026 by rpki-client