Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215097.roa
File: AS215097.roa (raw, json)
Hash identifier: /uiZGbGsU1cNlmZzvv4BZoiiGlgWdb9SuqElg5m/XZQ=
Subject key identifier: AF:10:C7:BA:35:07:1B:0A:E6:8D:BB:5D:C0:AA:DB:A3:8A:35:8E:AC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: DB6CDA1DFAC3F4B1BA7B88B7C6CAA2E4E83CD7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215097.roa
Signing time: Thu 04 Jun 2026 11:47:29 +0000
ROA not before: Thu 04 Jun 2026 11:42:29 +0000
ROA not after: Thu 03 Jun 2027 11:47:29 +0000
asID: 215097
IP address blocks: 141.11.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
db:6c:da:1d:fa:c3:f4:b1:ba:7b:88:b7:c6:ca:a2:e4:e8:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 4 11:42:29 2026 GMT
Not After : Jun 3 11:47:29 2027 GMT
Subject: CN=AF10C7BA35071B0AE68DBB5DC0AADBA38A358EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:ba:07:f5:7f:06:b1:15:84:00:7a:fe:e2:
7b:4e:57:d0:13:2d:d9:79:c8:4d:9d:1a:5e:f3:97:
7d:26:3f:c8:28:c8:ec:09:ea:ac:11:a4:8b:aa:e9:
30:72:b2:95:56:69:35:87:8a:48:b3:a9:c2:67:1c:
ee:fb:b3:92:4d:3e:f4:9e:f7:7c:e6:48:72:0e:bb:
69:83:16:12:0a:cc:fb:af:5d:e5:18:ca:cd:9b:2c:
01:ed:bf:d1:fc:c2:5f:dc:9c:09:9d:bf:b9:3d:88:
2d:1b:7e:b8:8e:73:d7:dc:68:47:35:1a:41:9e:a6:
68:fc:16:67:69:91:06:c8:ba:a0:c1:7a:66:20:5e:
92:a3:62:bb:09:91:6c:07:8b:bf:98:73:e2:57:0c:
f8:46:ee:45:bc:ba:19:07:05:6c:a4:b1:43:87:dd:
66:18:0d:cb:4a:44:e4:0a:c1:04:b8:c8:fe:df:95:
7a:13:33:24:2e:9c:b7:00:0e:3a:e8:9a:a6:38:26:
62:a3:51:43:9c:85:e3:d9:e5:05:3d:15:dc:0d:e7:
9a:1d:99:83:b3:a9:be:85:fc:e1:87:a2:63:9e:bc:
77:81:9d:a1:cd:4a:67:65:f2:ab:86:f5:20:ec:59:
c9:1c:51:81:ae:3d:25:b9:88:84:63:9c:a2:e0:70:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:C7:BA:35:07:1B:0A:E6:8D:BB:5D:C0:AA:DB:A3:8A:35:8E:AC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.69.0/24
Signature Algorithm: sha256WithRSAEncryption
50:37:27:0e:12:09:ac:72:5d:a3:5d:84:fc:3f:1b:64:bf:15:
78:b8:59:80:b5:15:28:c7:15:d7:f5:53:ff:b1:4f:21:62:63:
6a:20:6a:bd:a9:ac:be:43:0e:77:6e:39:5f:6a:35:9e:45:65:
09:6d:b6:4c:ab:13:9f:89:e4:30:33:89:cc:3e:80:e0:04:7c:
fa:33:a5:2a:e8:66:ab:0c:ca:05:c0:16:91:e3:26:ee:fb:ca:
49:05:c9:52:c2:f8:9a:bc:0d:ca:d4:0f:74:32:4f:89:87:1f:
8d:67:71:05:6b:6d:82:8d:25:68:2c:fe:c9:a8:c6:e7:20:03:
3d:c1:de:1e:db:ee:bc:0d:12:a8:58:e1:e7:9e:6a:53:18:fb:
31:b7:40:07:f7:53:07:16:c0:80:06:8a:26:a1:1e:8f:57:b7:
60:10:c8:78:f4:e3:bd:c7:1a:e1:c8:e4:81:17:38:f5:bf:60:
e6:bc:48:3e:1d:76:fe:cb:83:e1:2e:9b:10:87:f4:48:a1:1b:
97:5a:5c:a9:0a:6a:51:a2:84:bc:eb:69:75:c7:94:f2:83:c8:
63:28:7b:25:1f:ae:c1:96:76:b6:46:d0:c4:80:62:8c:ad:9f:
e7:02:73:39:32:25:98:bc:45:8d:74:2e:a7:7d:fe:63:23:36:
4b:11:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:07:38 2026 by rpki-client