Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215752.roa
File: AS215752.roa (raw, json)
Hash identifier: 3gyEus+9VTe25BbUMZug1HjHB78l0GYjs3nlIdhhuMM=
Subject key identifier: 34:07:C5:E3:E1:63:24:E1:2D:EC:3F:16:8F:12:83:43:7F:72:86:A3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 32E953350E423D034281851D94A0D10E8E465237
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215752.roa
Signing time: Wed 05 Aug 2026 11:27:57 +0000
ROA not before: Wed 05 Aug 2026 11:22:57 +0000
ROA not after: Wed 04 Aug 2027 11:27:57 +0000
asID: 215752
IP address blocks: 2a14:7581:ffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e9:53:35:0e:42:3d:03:42:81:85:1d:94:a0:d1:0e:8e:46:52:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 5 11:22:57 2026 GMT
Not After : Aug 4 11:27:57 2027 GMT
Subject: CN=3407C5E3E16324E12DEC3F168F1283437F7286A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:93:5e:58:8a:c2:1b:03:22:9c:52:10:85:
4d:1a:60:4d:db:76:a0:ee:ed:83:f9:76:2b:a3:f9:
4c:67:4b:95:05:21:cf:5e:1c:84:72:18:08:0a:51:
c2:15:d8:d4:05:cd:7a:99:bc:92:3a:84:6d:4f:e6:
41:7b:ad:c5:90:a3:f0:b3:83:b3:7e:e8:05:f9:00:
b8:3d:71:a9:8b:05:1d:b8:e3:ec:a7:d7:d7:e2:80:
19:39:1e:76:e4:f1:bf:67:2a:12:96:6e:40:a9:41:
fe:18:e5:05:03:bf:b7:ea:de:71:b7:01:2a:34:f3:
71:2e:a3:2c:5e:be:b4:d1:0d:eb:b5:3a:36:ab:8e:
06:12:6c:0a:d7:13:ea:06:37:cb:0b:2a:bd:18:b6:
db:a1:7a:80:a2:af:94:5a:bb:33:99:c4:3f:15:4d:
3d:6d:3c:e2:e2:d2:81:69:de:60:ac:07:b4:3c:74:
10:90:dc:96:cf:f8:7a:d3:c7:17:93:0d:18:12:d6:
82:31:4d:4b:10:e5:d6:ea:42:4f:78:8c:02:87:ca:
b6:66:ee:7f:85:19:85:ed:83:00:5e:9b:9e:3d:78:
f8:a6:01:cd:49:b2:cb:ec:ec:e2:98:e6:ff:3a:3e:
2d:5e:07:9c:25:4c:31:82:3b:74:b1:48:4a:75:30:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:C5:E3:E1:63:24:E1:2D:EC:3F:16:8F:12:83:43:7F:72:86:A3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ffd::/48
Signature Algorithm: sha256WithRSAEncryption
1d:3a:d0:2f:a5:89:38:56:57:33:ce:69:fc:36:72:7a:c1:7a:
a0:81:fd:5b:37:30:8a:11:f1:9c:3d:fe:77:bf:02:75:57:cb:
72:48:00:11:98:4d:b9:2f:8d:53:d4:7c:dc:6b:16:89:0a:33:
fe:81:fc:4a:a3:28:9d:54:2a:7e:8b:91:63:a5:53:27:16:cb:
f7:97:11:19:9e:39:90:53:55:02:b2:e3:b3:82:75:37:f7:3b:
8a:13:bb:34:9f:f3:ee:28:07:5a:80:99:1e:0e:fe:90:3c:0d:
03:70:59:89:68:14:03:ee:e7:b7:e8:ff:8c:a3:ec:d2:8b:27:
a3:05:e5:b0:ad:21:32:6f:07:44:c5:30:5b:71:6a:9c:c3:92:
f8:8d:99:a1:a5:f5:1a:32:7c:19:97:fd:bb:23:62:2c:4a:8e:
67:32:f5:61:7a:11:9a:e4:aa:80:3a:83:41:ff:fd:b9:6d:32:
24:32:0a:d9:c2:52:b6:fa:30:5c:c2:fb:7c:bc:ed:58:45:99:
e4:29:54:e7:22:93:de:e9:ba:29:c0:58:49:1c:11:da:36:d9:
b8:9f:5b:23:53:62:55:88:72:8a:e6:68:df:71:2d:83:8c:b2:
1b:53:5c:c0:79:82:fc:a1:3e:aa:de:d1:4b:28:b6:63:62:9a:
38:07:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:08 2026 by rpki-client