Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
File: AS215849.roa (raw, json)
Hash identifier: DnELibBMD5iulrSwqcbhpYzeBBayRDiJcJPtyKGRHIc=
Subject key identifier: 4C:F5:34:33:29:69:10:9D:AE:6B:E6:4B:C7:18:BD:C0:5C:20:8C:3E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6CE06159C4F7741E3CBFD1B9D65728A0E2F97AE4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
Signing time: Fri 15 May 2026 10:55:29 +0000
ROA not before: Fri 15 May 2026 10:50:29 +0000
ROA not after: Fri 14 May 2027 10:55:29 +0000
asID: 215849
IP address blocks: 2a14:7585:6000::/36 maxlen: 36
2a14:7587:5000::/36 maxlen: 36
2a14:7587:6000::/36 maxlen: 36
2a14:7587:7000::/36 maxlen: 36
2a14:7587:8000::/36 maxlen: 36
2a14:7587:9000::/36 maxlen: 36
2a14:7587:e000::/36 maxlen: 36
2a14:7587:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e0:61:59:c4:f7:74:1e:3c:bf:d1:b9:d6:57:28:a0:e2:f9:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 15 10:50:29 2026 GMT
Not After : May 14 10:55:29 2027 GMT
Subject: CN=4CF534332969109DAE6BE64BC718BDC05C208C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:bb:3f:9f:91:ad:43:00:4b:b6:53:78:b3:
45:ee:0e:5f:f0:1f:7d:f0:7a:44:c6:95:9c:9c:cf:
d0:20:e0:fc:50:e0:9e:0c:65:8b:79:5a:78:1f:26:
64:06:f6:9e:2c:de:43:c7:90:05:b3:09:2a:19:5c:
e2:ae:91:b1:54:52:5c:5e:49:58:a6:2c:b7:34:2b:
ef:d3:f0:02:dd:38:6b:69:c4:9c:ac:82:87:e5:e9:
bf:17:85:66:78:b1:8c:ca:6c:71:f0:b6:09:fd:14:
4b:89:17:14:02:3d:05:af:fe:64:3d:58:eb:11:ab:
15:75:43:30:d0:32:f0:73:6b:45:c6:87:37:ed:94:
f1:3f:e3:30:a8:38:49:3e:dc:a1:4a:e3:79:99:a1:
ae:ed:ef:b0:e6:ae:1d:59:b0:fb:1e:5c:e6:c2:e2:
e2:2f:b7:18:7b:78:4b:f0:3b:0a:c8:4c:47:ee:fe:
e9:62:0f:d1:48:42:b2:0d:8d:02:d1:2c:a6:ee:ca:
46:8d:31:99:0c:9f:27:ce:34:f1:12:55:c7:8c:e8:
7c:92:8b:0a:35:7b:36:34:0e:31:9c:e6:74:e0:14:
78:f2:ad:bf:64:8e:2e:55:4a:63:1c:06:3a:d0:30:
ae:02:3c:0f:a0:b6:70:13:29:84:ad:1e:11:f0:6d:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F5:34:33:29:69:10:9D:AE:6B:E6:4B:C7:18:BD:C0:5C:20:8C:3E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585:6000::/36
2a14:7587:5000::-2a14:7587:9fff:ffff:ffff:ffff:ffff:ffff
2a14:7587:e000::/35
Signature Algorithm: sha256WithRSAEncryption
18:2d:5a:7e:39:4f:ba:3b:39:b0:42:f3:48:c5:ec:a8:dc:ef:
a3:dd:f7:e3:8b:0d:4b:8a:6f:12:77:57:03:4c:a9:49:d8:58:
80:14:09:6a:9a:fa:09:f5:b8:f3:02:6d:d3:a4:cc:c1:04:77:
e1:6a:a2:68:4f:11:36:08:d5:3e:fa:be:25:4d:18:c8:6b:e6:
09:4e:fe:80:a4:6e:21:5f:2b:3a:75:05:4c:e3:29:3d:75:07:
58:52:f6:ae:8e:6a:23:e3:f9:49:a3:f7:77:65:f6:ae:82:81:
55:e9:b6:c4:6b:d8:a3:44:5e:3b:6a:b3:79:cf:3f:9c:5b:66:
07:6e:d6:d1:c8:d1:c4:22:f3:39:48:2a:a9:bb:58:99:be:1e:
db:79:c3:fd:8d:1f:42:1d:67:79:13:f3:9c:f6:0b:8c:56:fc:
64:16:2c:99:7d:73:6b:86:44:e6:6e:34:ab:93:b6:99:8f:89:
7a:ce:88:d8:06:87:d7:26:62:55:c4:09:b3:c2:5b:79:13:f1:
79:9f:08:34:6f:a3:ab:86:ec:d9:96:a6:ba:9e:5a:5d:4a:04:
84:a2:3e:1f:9a:51:79:7a:4d:84:7f:ee:2d:1d:95:d1:08:19:
d3:15:04:e4:8b:9d:9d:e6:99:51:dc:89:76:53:b8:bf:79:25:
08:ee:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:41:11 2026 by rpki-client