Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215595.roa
File: AS215595.roa (raw, json)
Hash identifier: tGGwedvBBNXohl6nmcUzhv+dAqCSQXpr3lRBKeMCfzs=
Subject key identifier: 99:BD:E0:8C:1A:52:0D:F2:5C:21:CC:38:57:40:97:AF:03:31:0E:BF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 095A903BAACB208DC66E79683BF44BD202FDF9BF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215595.roa
Signing time: Wed 01 Jul 2026 12:52:59 +0000
ROA not before: Wed 01 Jul 2026 12:47:59 +0000
ROA not after: Wed 30 Jun 2027 12:52:59 +0000
asID: 215595
IP address blocks: 51.241.217.0/24 maxlen: 24
51.241.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 14:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5a:90:3b:aa:cb:20:8d:c6:6e:79:68:3b:f4:4b:d2:02:fd:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 1 12:47:59 2026 GMT
Not After : Jun 30 12:52:59 2027 GMT
Subject: CN=99BDE08C1A520DF25C21CC38574097AF03310EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:88:b1:16:6c:0f:d1:4c:4f:03:e2:ff:47:
e4:e5:e1:5d:7d:de:ec:1b:dc:0c:7e:8d:cf:55:9b:
e9:a2:fd:13:13:bb:ac:84:ab:76:4c:5d:44:8d:9d:
af:71:f9:b7:0e:49:e6:02:e4:2a:b1:cd:40:2a:f4:
d4:6a:e5:92:76:aa:49:21:50:2d:33:74:0c:04:7e:
41:bd:71:0a:3b:ec:d7:ee:da:7d:82:dc:40:d1:7d:
c1:12:e7:60:f7:89:ac:02:b3:4d:12:1f:ec:5a:90:
ea:9d:80:0d:6a:80:21:70:0a:5f:7d:f4:96:3d:b3:
61:75:7b:e1:11:d6:6a:4a:2c:5d:af:13:c4:cd:de:
5e:fe:00:53:23:90:79:f5:a1:43:27:80:e0:3f:e6:
b9:dd:5f:f3:38:9e:85:32:f0:b7:c0:ae:50:1a:77:
97:2f:37:66:4e:17:a9:1d:1f:df:26:65:9b:90:ca:
5e:5b:2a:cd:13:07:ad:12:cf:62:f7:bd:89:57:5c:
b7:1b:49:24:01:b2:b4:74:be:69:5a:49:50:c5:45:
36:25:50:79:32:be:8b:c8:c2:04:3e:02:0e:f2:9c:
cd:66:ce:d3:0e:2b:d6:09:91:93:57:13:9d:bc:ce:
00:b4:b0:4b:5d:31:8a:07:8e:53:7a:97:9c:59:79:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:E0:8C:1A:52:0D:F2:5C:21:CC:38:57:40:97:AF:03:31:0E:BF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215595.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.217.0/24
51.241.235.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2c:f7:41:6d:24:78:34:8d:6a:31:ad:bd:c5:bc:50:b1:c8:
a2:57:56:ec:64:fd:b9:13:cb:0d:53:ff:2c:ef:ac:2e:95:48:
86:9b:d8:2d:61:56:a5:db:f6:9a:6f:9e:db:03:e6:a4:59:a2:
55:ad:20:d4:5c:97:2a:7a:54:c7:eb:db:80:2b:3b:16:d5:91:
6d:d9:d8:a6:7e:bc:9c:fe:2c:02:43:e4:16:37:58:a3:8d:c5:
e3:12:d5:e5:c1:f5:c3:37:88:47:be:66:3d:a6:55:24:d2:d2:
4d:ea:88:26:69:dc:96:9b:12:7e:bf:5f:39:26:d8:50:5f:bc:
31:be:48:95:ee:c3:0b:18:fa:bb:3f:05:66:ab:49:4d:ae:21:
be:47:d9:2a:fb:fe:5c:36:25:37:56:62:d0:92:c5:19:64:53:
7d:81:6d:8a:a9:8e:66:03:b3:06:e6:73:7d:d0:f3:8b:1d:b2:
cf:5d:38:d6:74:25:4b:8d:14:ec:d1:54:5e:f6:41:73:b9:ed:
3b:83:19:36:ff:bf:7a:8c:a7:5e:e2:8d:e7:50:be:c9:66:bc:
a1:8a:de:c9:4b:14:dd:9d:4d:3c:f2:e1:5d:01:9b:c9:66:c2:
ec:a8:43:ac:2a:16:ed:c1:f8:60:d4:78:b4:8a:c7:f3:99:99:
94:34:52:51
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUCVqQO6rLII3GbnloO/RL0gL9+b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MDExMjQ3NTlaFw0yNzA2MzAxMjUyNTlaMDMxMTAvBgNV
BAMTKDk5QkRFMDhDMUE1MjBERjI1QzIxQ0MzODU3NDA5N0FGMDMzMTBFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5YixFmwP0UxPA+L/R+Tl4V19
3uwb3Ax+jc9Vm+mi/RMTu6yEq3ZMXUSNna9x+bcOSeYC5CqxzUAq9NRq5ZJ2qkkh
UC0zdAwEfkG9cQo77Nfu2n2C3EDRfcES52D3iawCs00SH+xakOqdgA1qgCFwCl99
9JY9s2F1e+ER1mpKLF2vE8TN3l7+AFMjkHn1oUMngOA/5rndX/M4noUy8LfArlAa
d5cvN2ZOF6kdH98mZZuQyl5bKs0TB60Sz2L3vYlXXLcbSSQBsrR0vmlaSVDFRTYl
UHkyvovIwgQ+Ag7ynM1mztMOK9YJkZNXE528zgC0sEtdMYoHjlN6l5xZeTC1AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUmb3gjBpSDfJcIcw4V0CXrwMxDr8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1NTk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM/HZ
AwQAM/HrMA0GCSqGSIb3DQEBCwUAA4IBAQA5LPdBbSR4NI1qMa29xbxQsciiV1bs
ZP25E8sNU/8s76wulUiGm9gtYVal2/aab57bA+akWaJVrSDUXJcqelTH69uAKzsW
1ZFt2dimfryc/iwCQ+QWN1ijjcXjEtXlwfXDN4hHvmY9plUk0tJN6ogmadyWmxJ+
v185JthQX7wxvkiV7sMLGPq7PwVmq0lNriG+R9kq+/5cNiU3VmLQksUZZFN9gW2K
qY5mA7MG5nN90POLHbLPXTjWdCVLjRTs0VRe9kFzue07gxk2/796jKde4o3nUL7J
Zryhit7JSxTdnU088uFdAZvJZsLsqEOsKhbtwfhg1Hi0isfzmZmUNFJR
-----END CERTIFICATE-----
Generated at Tue Jul 14 17:11:24 2026 by rpki-client