Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215780.roa
File: AS215780.roa (raw, json)
Hash identifier: KXZNEhuP5qVZAnxQ/3axqB7PCllC1d3HZmolC4AbrUc=
Subject key identifier: 70:17:2C:81:47:1A:6D:6D:33:41:6D:30:D3:3A:AD:A6:F6:08:C9:9E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 692F2742EBF3A8264E4656A6DE5AC4DB488B55DB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215780.roa
Signing time: Sun 23 Aug 2026 04:28:11 +0000
ROA not before: Sun 23 Aug 2026 04:23:11 +0000
ROA not after: Sun 22 Aug 2027 04:28:11 +0000
asID: 215780
IP address blocks: 2a14:7584:d001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2f:27:42:eb:f3:a8:26:4e:46:56:a6:de:5a:c4:db:48:8b:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 23 04:23:11 2026 GMT
Not After : Aug 22 04:28:11 2027 GMT
Subject: CN=70172C81471A6D6D33416D30D33AADA6F608C99E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e4:36:c2:90:cc:9c:01:d2:8e:02:cf:be:d6:
62:09:cf:1d:2c:96:e7:c1:8c:6b:39:50:33:84:08:
17:1e:1c:67:4b:1e:84:c3:91:93:6c:62:48:d8:b7:
95:a4:76:ed:ff:99:97:49:1b:86:3f:4d:bf:44:3d:
c3:8e:21:34:45:98:7e:fa:e9:26:87:42:f6:3d:53:
9b:a5:4e:c0:eb:cc:18:6c:ac:51:bf:6b:29:a4:1c:
69:99:73:cc:eb:e9:29:69:4a:07:ab:85:b0:94:55:
e3:f3:20:51:ef:44:31:58:87:3e:77:ea:c7:68:6d:
2b:d0:cd:2e:6a:fe:be:dd:81:24:dd:14:91:8c:00:
2b:e6:44:65:32:12:32:f1:e8:0b:57:06:4c:ff:e7:
8f:cc:65:a2:bc:da:a2:8b:74:b9:24:45:f2:8a:fb:
99:d2:ef:5b:11:c5:9f:a2:d5:76:13:92:a6:f5:c3:
cf:e1:39:d4:05:4f:78:09:d3:46:18:56:48:d3:0d:
4a:54:01:34:82:e4:c6:ef:4e:ee:40:f3:6d:3b:12:
2f:e1:02:24:48:55:11:a8:ad:73:87:f5:10:a6:de:
36:2e:92:65:21:58:dd:3d:b7:38:b8:42:2b:70:7b:
b1:d6:5c:35:15:d2:38:9c:7e:b0:71:89:95:c6:42:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:2C:81:47:1A:6D:6D:33:41:6D:30:D3:3A:AD:A6:F6:08:C9:9E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:d001::/48
Signature Algorithm: sha256WithRSAEncryption
87:43:cf:47:fa:7c:5d:77:ce:9d:0e:18:96:5f:77:42:1a:64:
05:8d:f6:cd:46:2d:c2:59:3d:24:0a:7c:1a:70:b2:c1:f4:44:
c1:3c:96:c4:3c:00:45:64:d4:51:e1:fe:db:e8:02:fd:63:9b:
a4:46:bc:67:5b:7d:d5:d3:bb:c1:56:87:05:7c:2e:96:96:b1:
6f:b9:7b:00:95:22:87:34:21:7e:c4:f7:2b:e4:d2:9a:be:a9:
28:7f:24:fa:35:df:7a:53:39:eb:a2:fc:91:50:0d:fb:0f:43:
e8:25:e6:6e:77:ea:ac:58:36:b0:6a:5a:8f:ef:24:82:07:31:
3a:d0:e8:75:f1:1f:2c:ac:d1:ea:21:9e:b6:05:b2:af:64:d3:
fe:32:91:48:d3:69:29:cb:de:cd:ea:e3:ae:79:c7:ec:69:08:
7f:28:cf:3d:96:3b:0b:a5:2e:ad:6c:03:c7:8f:9f:93:94:1c:
7a:97:38:aa:b4:ff:22:04:5b:56:8e:df:47:bb:46:55:74:a9:
cb:1b:39:19:0f:f6:65:19:1e:44:9a:ed:1c:35:47:3d:ed:68:
93:62:f5:57:77:8f:6f:19:8d:f5:78:01:90:75:e9:90:a9:64:
af:0b:93:c5:16:cc:90:cc:ea:37:7c:13:c5:c2:a8:37:ad:b5:
c0:90:28:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUaS8nQuvzqCZORlam3lrE20iLVdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA4MjMwNDIzMTFaFw0yNzA4MjIwNDI4MTFaMDMxMTAvBgNV
BAMTKDcwMTcyQzgxNDcxQTZENkQzMzQxNkQzMEQzM0FBREE2RjYwOEM5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu5DbCkMycAdKOAs++1mIJzx0s
lufBjGs5UDOECBceHGdLHoTDkZNsYkjYt5Wkdu3/mZdJG4Y/Tb9EPcOOITRFmH76
6SaHQvY9U5ulTsDrzBhsrFG/aymkHGmZc8zr6SlpSgerhbCUVePzIFHvRDFYhz53
6sdobSvQzS5q/r7dgSTdFJGMACvmRGUyEjLx6AtXBkz/54/MZaK82qKLdLkkRfKK
+5nS71sRxZ+i1XYTkqb1w8/hOdQFT3gJ00YYVkjTDUpUATSC5MbvTu5A8207Ei/h
AiRIVRGorXOH9RCm3jYukmUhWN09tzi4Qitwe7HWXDUV0jicfrBxiZXGQhaxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUcBcsgUcabW0zQW0w0zqtpvYIyZ4wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1NzgwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
hNABMA0GCSqGSIb3DQEBCwUAA4IBAQCHQ89H+nxdd86dDhiWX3dCGmQFjfbNRi3C
WT0kCnwacLLB9ETBPJbEPABFZNRR4f7b6AL9Y5ukRrxnW33V07vBVocFfC6WlrFv
uXsAlSKHNCF+xPcr5NKavqkofyT6Nd96UznrovyRUA37D0PoJeZud+qsWDawalqP
7ySCBzE60Oh18R8srNHqIZ62BbKvZNP+MpFI02kpy97N6uOuecfsaQh/KM89ljsL
pS6tbAPHj5+TlBx6lziqtP8iBFtWjt9Hu0ZVdKnLGzkZD/ZlGR5Emu0cNUc97WiT
YvVXd49vGY31eAGQdemQqWSvC5PFFsyQzOo3fBPFwqg3rbXAkChj
-----END CERTIFICATE-----
Generated at Fri Sep 4 19:09:33 2026 by rpki-client