Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215262.roa
File: AS215262.roa (raw, json)
Hash identifier: iUxw9GGAmhPWy3fr+9niq8J9J6qfjVcoR5iuhCu6fd8=
Subject key identifier: F5:75:86:03:34:C5:56:BE:EE:5A:10:C6:A1:41:85:3B:50:F4:66:9A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7D27230D37CB8B9B3E6E89CB930E46512AEF120B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215262.roa
Signing time: Tue 02 Jun 2026 19:41:51 +0000
ROA not before: Tue 02 Jun 2026 19:36:51 +0000
ROA not after: Tue 01 Jun 2027 19:41:51 +0000
asID: 215262
IP address blocks: 188.220.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:27:23:0d:37:cb:8b:9b:3e:6e:89:cb:93:0e:46:51:2a:ef:12:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 2 19:36:51 2026 GMT
Not After : Jun 1 19:41:51 2027 GMT
Subject: CN=F575860334C556BEEE5A10C6A141853B50F4669A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:40:bb:ac:d0:6d:b4:2a:8f:57:38:64:fa:
82:0e:b7:98:bb:9c:fd:5f:02:c0:53:a9:cb:d8:03:
7f:c6:c2:a3:d9:c5:84:11:58:34:c7:7f:e5:10:ff:
7b:d8:4a:0b:19:e6:d1:26:00:79:84:8e:47:5c:fe:
57:3e:f5:1b:50:f7:0f:cd:6a:da:46:04:e2:b8:4f:
60:4e:46:d3:4c:b5:35:d3:3e:2b:42:48:ee:d4:4a:
93:2a:28:1e:7b:e4:10:d0:f2:7e:35:3e:c5:28:7b:
34:f6:5e:1b:97:d0:9b:8a:83:0e:58:12:0e:3d:bf:
f6:14:48:9d:fc:db:03:bf:a0:55:99:ff:d3:cf:b1:
59:ce:88:ad:39:b0:2a:43:6e:32:b8:71:25:7d:70:
f2:7f:fb:26:dc:db:31:cf:0a:6b:d9:b0:0b:6c:62:
91:58:eb:f4:cf:23:21:68:34:dc:3c:f7:a4:9d:3c:
c9:aa:43:fd:5f:e6:d1:31:da:b4:47:92:76:68:e4:
0b:83:32:11:6d:13:2e:dc:18:38:a8:49:99:ec:d4:
25:c0:7c:68:ac:2c:be:75:4a:15:29:2f:cb:c2:e6:
eb:87:aa:24:95:6b:ad:d1:83:3a:c2:06:36:07:d0:
93:a9:bb:b6:b9:26:8d:11:8d:b5:61:d8:8d:96:ba:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:75:86:03:34:C5:56:BE:EE:5A:10:C6:A1:41:85:3B:50:F4:66:9A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.220.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e7:39:d9:e4:d4:b3:91:f4:d1:f0:fd:44:44:f8:fd:5c:7b:
5a:e6:fe:c1:94:4d:d8:3f:83:0f:2b:2b:92:e6:63:d8:17:09:
2c:e5:45:75:3e:3f:d8:c7:36:94:ea:d6:c2:62:a7:17:5e:a3:
8e:09:2d:20:f3:30:54:b2:8a:56:51:fd:d1:05:bc:07:0f:db:
ce:b5:45:9b:1e:ad:94:61:b6:31:07:96:f3:ab:d7:8a:2b:41:
25:52:4c:ae:9b:2d:bb:cd:42:1e:8a:19:3f:29:fe:5f:04:45:
ba:04:6e:d2:7c:21:94:29:60:b2:0a:e4:ad:a1:a7:35:56:7d:
6b:b9:2b:a3:39:ab:84:92:eb:16:d4:af:99:41:10:fc:8f:b6:
54:ad:82:7d:58:81:9d:37:24:a9:07:c1:25:98:e7:1a:b8:5c:
d4:74:b5:55:f4:0d:16:86:d7:11:af:2b:ce:d8:98:19:08:71:
4b:48:b4:0b:6c:c2:20:61:8c:ff:7c:f0:c2:09:07:63:fe:a7:
e3:12:a0:f8:20:d8:83:9b:d4:aa:e6:92:3d:a2:7c:2d:94:51:
f0:24:6d:96:08:cf:3c:12:06:c8:43:7e:4b:4b:91:86:fc:2e:
26:c5:b2:f1:06:e1:31:5c:56:b6:a5:57:a8:0a:5d:3a:0c:db:
05:fb:a8:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfScjDTfLi5s+bonLkw5GUSrvEgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MDIxOTM2NTFaFw0yNzA2MDExOTQxNTFaMDMxMTAvBgNV
BAMTKEY1NzU4NjAzMzRDNTU2QkVFRTVBMTBDNkExNDE4NTNCNTBGNDY2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqO0C7rNBttCqPVzhk+oIOt5i7
nP1fAsBTqcvYA3/GwqPZxYQRWDTHf+UQ/3vYSgsZ5tEmAHmEjkdc/lc+9RtQ9w/N
atpGBOK4T2BORtNMtTXTPitCSO7USpMqKB575BDQ8n41PsUoezT2XhuX0JuKgw5Y
Eg49v/YUSJ382wO/oFWZ/9PPsVnOiK05sCpDbjK4cSV9cPJ/+ybc2zHPCmvZsAts
YpFY6/TPIyFoNNw896SdPMmqQ/1f5tEx2rRHknZo5AuDMhFtEy7cGDioSZns1CXA
fGisLL51ShUpL8vC5uuHqiSVa63RgzrCBjYH0JOpu7a5Jo0RjbVh2I2WulxJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU9XWGAzTFVr7uWhDGoUGFO1D0ZpowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1MjYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNzc
MA0GCSqGSIb3DQEBCwUAA4IBAQBg5znZ5NSzkfTR8P1ERPj9XHta5v7BlE3YP4MP
KyuS5mPYFwks5UV1Pj/YxzaU6tbCYqcXXqOOCS0g8zBUsopWUf3RBbwHD9vOtUWb
Hq2UYbYxB5bzq9eKK0ElUkyumy27zUIeihk/Kf5fBEW6BG7SfCGUKWCyCuStoac1
Vn1ruSujOauEkusW1K+ZQRD8j7ZUrYJ9WIGdNySpB8ElmOcauFzUdLVV9A0WhtcR
ryvO2JgZCHFLSLQLbMIgYYz/fPDCCQdj/qfjEqD4INiDm9Sq5pI9onwtlFHwJG2W
CM88EgbIQ35LS5GG/C4mxbLxBuExXFa2pVeoCl06DNsF+6iu
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:12 2026 by rpki-client