Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215786.roa
File: AS215786.roa (raw, json)
Hash identifier: lbw2s/Ob/UM5ULdZNWNqlJSQZjuZwqOAHMxkkWu2wto=
Subject key identifier: 78:21:AC:58:02:18:32:90:70:CE:B3:59:DC:6E:92:CD:E3:02:4A:A0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 475E2B04E4264D3C0A134BB330E8A705CACA5AF4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215786.roa
Signing time: Mon 24 Aug 2026 09:17:17 +0000
ROA not before: Mon 24 Aug 2026 09:12:17 +0000
ROA not after: Mon 23 Aug 2027 09:17:17 +0000
asID: 215786
IP address blocks: 188.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5e:2b:04:e4:26:4d:3c:0a:13:4b:b3:30:e8:a7:05:ca:ca:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 09:12:17 2026 GMT
Not After : Aug 23 09:17:17 2027 GMT
Subject: CN=7821AC580218329070CEB359DC6E92CDE3024AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:57:29:7c:f5:ea:d0:eb:99:83:59:50:cf:
c8:0b:6f:6b:ef:63:3a:8f:5a:cc:d9:97:43:4c:c2:
e8:9f:cc:6d:19:23:96:2e:ea:e8:b2:98:3a:28:cf:
b1:8e:6c:85:aa:9c:d2:c9:11:7d:82:da:98:26:c8:
b3:4c:fc:2b:d9:ab:8b:7b:72:86:5a:63:4c:4a:ef:
a4:04:aa:5f:73:2f:3f:13:fb:ee:ab:8e:66:b3:90:
bd:24:a8:f7:44:ee:47:3d:2e:0f:2b:70:51:f4:21:
43:fe:06:bb:6a:1a:91:25:27:85:c6:eb:04:38:d4:
5d:f2:bc:8f:17:b4:bc:58:53:75:59:8b:6d:76:a8:
6a:6b:71:45:5b:98:6c:b3:f6:3b:91:b9:44:3a:74:
aa:93:b0:db:96:3a:55:8b:1f:06:f5:5a:00:1d:23:
09:bc:ae:0f:1a:d0:7b:ef:4b:e8:1f:55:46:17:33:
9a:df:2f:6c:3d:55:b8:f8:65:94:92:10:27:f3:8d:
5d:ab:a9:60:f7:21:e8:4b:92:e9:f1:d1:d0:7c:8a:
18:e6:e0:77:ab:84:5a:00:6f:a3:4a:c6:d6:75:80:
6d:29:d0:8e:d6:c0:47:ba:75:97:ef:b1:33:83:ed:
97:93:cb:52:03:e0:a7:ea:f9:7c:eb:ec:e7:4c:16:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:AC:58:02:18:32:90:70:CE:B3:59:DC:6E:92:CD:E3:02:4A:A0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:14:29:49:62:6c:9a:49:0c:f3:48:0a:e2:61:58:c8:ba:21:
95:fd:8c:58:2a:36:10:82:c5:a6:bf:47:61:08:a4:8d:8e:86:
98:e0:ee:99:15:5c:ed:ad:08:9a:1f:42:b0:68:70:4a:da:95:
e8:e4:83:0d:46:5c:4d:ac:e0:30:9d:70:44:b9:8e:b1:fd:d0:
3e:f0:a6:f1:1c:1a:80:ba:f9:64:c5:45:13:78:b8:f1:7a:9b:
41:23:92:5a:ef:8c:8f:26:d7:69:d9:f5:41:7a:fb:29:ea:6f:
a4:1b:4d:b1:34:50:c4:8e:9f:97:21:6e:fc:0c:0b:e0:ef:68:
dd:7e:b7:59:66:cc:9a:32:8b:b9:e0:f2:8b:ff:e6:07:98:6d:
83:ef:14:57:17:93:b6:9d:30:30:c1:64:da:4d:bb:13:c0:9f:
e9:d5:ba:af:47:7c:a8:4d:14:0f:b5:4f:96:9a:ba:df:13:5e:
38:d1:c6:ef:24:9d:4f:2c:46:03:6a:07:ea:e8:a5:8f:7a:51:
a5:c8:35:64:91:52:23:61:98:2d:23:7f:06:3e:68:30:82:e5:
8e:c8:ad:6d:5e:7f:d0:5e:f0:e0:92:77:cc:df:37:dd:c3:14:
70:df:a8:37:1d:d7:c7:45:b0:33:c7:86:a0:80:47:44:6b:2d:
3c:50:81:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUR14rBOQmTTwKE0uzMOinBcrKWvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjQwOTEyMTdaFw0yNzA4MjMwOTE3MTdaMDMxMTAvBgNV
BAMTKDc4MjFBQzU4MDIxODMyOTA3MENFQjM1OURDNkU5MkNERTMwMjRBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJVcpfPXq0OuZg1lQz8gLb2vv
YzqPWszZl0NMwuifzG0ZI5Yu6uiymDooz7GObIWqnNLJEX2C2pgmyLNM/CvZq4t7
coZaY0xK76QEql9zLz8T++6rjmazkL0kqPdE7kc9Lg8rcFH0IUP+BrtqGpElJ4XG
6wQ41F3yvI8XtLxYU3VZi212qGprcUVbmGyz9juRuUQ6dKqTsNuWOlWLHwb1WgAd
Iwm8rg8a0HvvS+gfVUYXM5rfL2w9Vbj4ZZSSECfzjV2rqWD3IehLkunx0dB8ihjm
4HerhFoAb6NKxtZ1gG0p0I7WwEe6dZfvsTOD7ZeTy1ID4Kfq+Xzr7OdMFktvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUeCGsWAIYMpBwzrNZ3G6SzeMCSqAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1Nzg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNw+
MA0GCSqGSIb3DQEBCwUAA4IBAQBCFClJYmyaSQzzSAriYVjIuiGV/YxYKjYQgsWm
v0dhCKSNjoaY4O6ZFVztrQiaH0KwaHBK2pXo5IMNRlxNrOAwnXBEuY6x/dA+8Kbx
HBqAuvlkxUUTeLjxeptBI5Ja74yPJtdp2fVBevsp6m+kG02xNFDEjp+XIW78DAvg
72jdfrdZZsyaMou54PKL/+YHmG2D7xRXF5O2nTAwwWTaTbsTwJ/p1bqvR3yoTRQP
tU+WmrrfE1440cbvJJ1PLEYDagfq6KWPelGlyDVkkVIjYZgtI38GPmgwguWOyK1t
Xn/QXvDgknfM3zfdwxRw36g3HdfHRbAzx4aggEdEay08UIHm
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:54 2026 by rpki-client