Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215817.roa
File: AS215817.roa (raw, json)
Hash identifier: QSryEOyNKk7NvjKEVSdOGIYv6+msPRdSCAo+SE2thrc=
Subject key identifier: D2:8C:E4:C2:3D:82:36:96:CD:09:DB:0C:B0:81:FE:02:A8:37:23:E5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EBC87A25DEF65C3CEEB69DF523BE47651A921FE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215817.roa
Signing time: Tue 15 Sep 2026 12:02:11 +0000
ROA not before: Tue 15 Sep 2026 11:57:11 +0000
ROA not after: Tue 14 Sep 2027 12:02:11 +0000
asID: 215817
IP address blocks: 51.146.38.0/24 maxlen: 24
188.220.8.0/24 maxlen: 24
188.221.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bc:87:a2:5d:ef:65:c3:ce:eb:69:df:52:3b:e4:76:51:a9:21:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 15 11:57:11 2026 GMT
Not After : Sep 14 12:02:11 2027 GMT
Subject: CN=D28CE4C23D823696CD09DB0CB081FE02A83723E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:e7:8c:58:24:06:70:88:6c:cf:ca:ed:8e:
9c:b8:67:d4:7a:0f:66:f9:60:3e:e6:e2:73:47:4a:
ec:ee:82:54:0c:d4:87:34:2b:f7:da:ff:20:69:6f:
4c:9b:50:a7:e4:3e:3e:57:37:b5:13:67:6e:9e:51:
e1:32:29:32:5a:e8:db:c1:bb:1d:a9:0f:93:b0:21:
f7:bc:3e:aa:16:be:dc:ae:10:5f:20:5a:2a:01:c6:
2e:fd:72:8d:37:7a:b9:08:aa:4b:23:3c:7c:3c:ca:
0b:ba:64:dd:40:ea:4d:3b:3f:eb:59:44:4f:54:8a:
9c:72:05:b0:d8:9e:e2:9a:b0:40:19:74:8f:93:65:
0d:3b:03:7c:77:7b:c3:03:28:92:52:0d:c2:1a:f2:
95:e8:30:7d:6b:e2:76:c4:3a:4f:29:40:1e:b1:b4:
48:c6:60:09:86:2a:42:89:19:5b:82:cb:7e:e7:99:
12:10:04:cb:f6:5f:b1:56:d6:aa:f7:f9:ee:71:e7:
86:e0:a6:a4:5d:f1:0f:e2:2b:f1:68:94:9a:be:e4:
f0:c9:0f:c8:d3:d6:ad:14:cc:20:93:4c:e5:f3:12:
0f:ce:bf:28:1f:ac:73:ca:c5:74:47:ac:1d:f9:40:
ca:76:b3:c2:3e:d3:8b:5a:1a:0b:35:a9:a3:62:b9:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8C:E4:C2:3D:82:36:96:CD:09:DB:0C:B0:81:FE:02:A8:37:23:E5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.38.0/24
188.220.8.0/24
188.221.157.0/24
Signature Algorithm: sha256WithRSAEncryption
52:95:5d:3b:75:db:48:b2:1a:17:78:4e:55:f8:b1:ec:cc:62:
da:e6:63:f7:b5:0f:71:b0:65:03:79:5a:51:ed:c0:ec:70:5b:
93:a2:4f:bc:a5:9e:95:cc:a5:4e:b2:1c:f1:f2:55:1c:e5:5b:
cd:e6:35:16:72:30:bb:4b:65:e0:99:52:28:06:c7:70:71:da:
38:16:37:23:ee:98:49:18:b5:7d:95:3b:66:47:48:b6:ab:22:
ec:a8:4c:26:fe:72:02:ef:dd:b1:0b:34:5f:7d:47:f7:c3:20:
8f:ad:66:65:a4:cb:b3:97:c2:d7:6a:37:85:4a:eb:4d:93:70:
b4:61:cc:68:e6:fa:69:a6:d0:1a:c3:8e:8e:5d:42:9a:27:ed:
f6:6f:22:8f:7d:14:f3:9a:2e:39:21:c1:5e:2a:72:a1:ea:5d:
f6:fb:28:89:98:6a:95:87:01:60:70:66:5a:43:69:04:a9:b2:
d2:82:7f:7a:64:87:76:31:53:01:4f:84:a3:45:8c:dc:c7:9a:
fd:9e:ba:49:17:7e:58:f2:4d:3b:3f:78:b2:16:87:35:f6:7e:
04:af:da:6f:e1:7a:f6:15:5a:f9:8e:f8:49:4f:72:70:df:ef:
26:ee:70:51:be:7c:4c:43:2e:81:12:be:ac:16:fc:de:fa:82:
9c:96:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:09 2026 by rpki-client