Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: bwMBeIzmUDHb05guYGdi2QZ6clwKCxkHQJX5pxeS2tw=
Subject key identifier: BC:9D:89:98:31:FA:3E:E1:3B:ED:37:3C:9F:A5:01:82:84:F4:60:58
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3A08D5A922F531263CF906E8A5ACEF94F0AC3B96
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
Signing time: Wed 08 Jul 2026 20:48:21 +0000
ROA not before: Wed 08 Jul 2026 20:43:21 +0000
ROA not after: Wed 07 Jul 2027 20:48:21 +0000
asID: 215607
IP address blocks: 51.241.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:08:d5:a9:22:f5:31:26:3c:f9:06:e8:a5:ac:ef:94:f0:ac:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 8 20:43:21 2026 GMT
Not After : Jul 7 20:48:21 2027 GMT
Subject: CN=BC9D899831FA3EE13BED373C9FA5018284F46058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:7c:8d:09:c2:04:17:38:39:ba:cc:73:ab:
cc:ef:b0:9f:bc:ce:0b:bd:0f:c8:d4:71:4d:2f:91:
93:86:c8:10:67:5c:1b:f7:31:11:6d:06:9a:13:e0:
df:bd:87:51:78:c3:b3:6a:aa:6e:7b:b7:84:db:90:
40:34:79:79:b3:90:6b:84:3b:26:37:8e:82:4d:17:
f4:fa:82:1e:b6:08:0e:2c:14:7e:1c:ce:1f:21:1f:
dd:03:0a:38:ee:3d:b4:26:75:75:17:80:74:5d:24:
9a:38:7d:43:f3:7d:78:23:85:78:52:99:44:38:17:
c2:5d:9c:31:ed:bf:a0:6e:c9:03:2c:a1:97:27:ee:
23:ad:61:ba:bd:08:b5:58:eb:d8:b4:2d:be:28:1f:
a5:f5:5c:b2:2b:2c:f0:ae:6d:ee:01:79:cd:c8:61:
35:94:d9:65:cd:54:a1:cd:ce:6a:ea:3e:a4:86:e6:
4c:58:6d:ef:4e:7d:9e:1e:45:7f:66:04:e3:1a:00:
9f:56:e5:b2:5e:9b:bc:6a:38:c6:72:c5:89:d0:1d:
5b:fb:76:4c:61:4c:31:58:1b:2e:f1:7e:03:15:74:
09:2c:24:18:b2:39:5b:4b:e2:50:69:cd:b1:65:0e:
83:9c:2c:65:f3:c9:04:a0:bf:66:bc:27:fe:34:dd:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:89:98:31:FA:3E:E1:3B:ED:37:3C:9F:A5:01:82:84:F4:60:58
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.188.0/24
Signature Algorithm: sha256WithRSAEncryption
75:17:47:b2:76:d5:be:e9:9c:5f:af:cb:c9:e0:fa:f2:44:da:
86:16:6b:1a:0d:66:ea:e9:94:46:82:d4:61:4e:d9:de:2e:1d:
37:cc:f7:dc:6c:43:ab:bc:23:15:8c:20:f6:2c:15:82:37:5a:
b9:bd:be:27:af:64:cb:f5:f7:62:c9:70:af:66:67:78:0f:3b:
27:11:59:a7:16:17:7f:65:c5:4a:15:dd:de:ab:66:5c:8b:16:
64:0a:b5:b2:87:e7:78:7f:ba:0e:c4:1a:2f:e9:b4:e7:a4:01:
91:d9:21:50:63:e9:e8:70:5b:ec:bc:36:23:85:ab:a1:bc:ac:
6f:25:cb:82:e7:37:06:50:93:f2:0c:42:57:8b:e3:02:0b:95:
62:ef:17:6c:0c:4c:1d:96:39:61:41:7f:8a:4e:1c:31:58:9e:
c3:5a:5b:45:e9:de:88:b1:84:91:a2:13:4e:3f:4c:88:95:3f:
f5:4a:d2:f8:d5:9a:e4:2b:a8:c2:60:f9:08:67:63:08:26:0d:
98:55:9c:ee:83:fa:06:a9:db:03:98:39:e2:3b:c1:9e:1d:d0:
b1:03:88:aa:a1:c4:ff:59:5e:a2:9c:2e:1f:5a:3a:11:a0:26:
07:62:19:b6:3a:b6:8c:d2:79:62:03:15:f3:ad:c9:84:38:b3:
6c:00:d8:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOgjVqSL1MSY8+QbopazvlPCsO5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MDgyMDQzMjFaFw0yNzA3MDcyMDQ4MjFaMDMxMTAvBgNV
BAMTKEJDOUQ4OTk4MzFGQTNFRTEzQkVEMzczQzlGQTUwMTgyODRGNDYwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqnyNCcIEFzg5usxzq8zvsJ+8
zgu9D8jUcU0vkZOGyBBnXBv3MRFtBpoT4N+9h1F4w7Nqqm57t4TbkEA0eXmzkGuE
OyY3joJNF/T6gh62CA4sFH4czh8hH90DCjjuPbQmdXUXgHRdJJo4fUPzfXgjhXhS
mUQ4F8JdnDHtv6BuyQMsoZcn7iOtYbq9CLVY69i0Lb4oH6X1XLIrLPCube4Bec3I
YTWU2WXNVKHNzmrqPqSG5kxYbe9OfZ4eRX9mBOMaAJ9W5bJem7xqOMZyxYnQHVv7
dkxhTDFYGy7xfgMVdAksJBiyOVtL4lBpzbFlDoOcLGXzyQSgv2a8J/403ZYfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvJ2JmDH6PuE77Tc8n6UBgoT0YFgwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1NjA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM/G8
MA0GCSqGSIb3DQEBCwUAA4IBAQB1F0eydtW+6Zxfr8vJ4PryRNqGFmsaDWbq6ZRG
gtRhTtneLh03zPfcbEOrvCMVjCD2LBWCN1q5vb4nr2TL9fdiyXCvZmd4DzsnEVmn
Fhd/ZcVKFd3eq2ZcixZkCrWyh+d4f7oOxBov6bTnpAGR2SFQY+nocFvsvDYjhauh
vKxvJcuC5zcGUJPyDEJXi+MCC5Vi7xdsDEwdljlhQX+KThwxWJ7DWltF6d6IsYSR
ohNOP0yIlT/1StL41ZrkK6jCYPkIZ2MIJg2YVZzug/oGqdsDmDniO8GeHdCxA4iq
ocT/WV6inC4fWjoRoCYHYhm2OraM0nliAxXzrcmEOLNsANiD
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:30 2026 by rpki-client