Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: kXF6Tq2RxyAVrV53UhcZlWmiGRgXxrWE5zcx7ky0vL0=
Subject key identifier: 9F:E3:28:93:C0:84:80:16:4D:70:8A:FB:04:43:77:58:43:1D:FA:DD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 083B307264E6E856B6D07731DCBD0CA942D24FD4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
Signing time: Fri 14 Aug 2026 12:49:28 +0000
ROA not before: Fri 14 Aug 2026 12:44:28 +0000
ROA not after: Fri 13 Aug 2027 12:49:28 +0000
asID: 215114
IP address blocks: 141.11.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3b:30:72:64:e6:e8:56:b6:d0:77:31:dc:bd:0c:a9:42:d2:4f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 14 12:44:28 2026 GMT
Not After : Aug 13 12:49:28 2027 GMT
Subject: CN=9FE32893C08480164D708AFB04437758431DFADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:84:e9:a3:8a:61:0f:80:57:00:a8:cb:0f:
e7:4e:4c:ba:bb:a4:80:56:5d:7a:bb:37:c3:58:2e:
1f:83:da:1e:1b:64:7a:65:2a:f9:45:c0:9e:ef:de:
46:4b:9b:bd:53:bf:da:7d:fe:95:54:47:cf:36:13:
72:e9:de:a7:cf:22:eb:15:4c:fb:ce:e2:2a:23:63:
d5:b4:b0:d4:a9:8d:13:47:e4:6d:58:10:3c:d0:ff:
d7:87:46:2d:96:3a:a2:73:c0:dc:b5:5a:90:3d:03:
8a:c0:1c:61:ea:58:1c:5f:da:f5:04:16:eb:bd:7d:
3a:04:37:a2:8a:06:c1:8e:96:1f:f6:28:2f:c4:81:
44:20:dc:07:f9:02:1a:d6:fe:65:51:8b:5f:10:ea:
6a:dd:de:47:61:a0:28:f7:52:86:53:fc:98:9d:bc:
fd:d5:d5:ce:4d:cc:ec:5e:da:0c:4d:65:01:70:e8:
8f:a3:c3:fd:f5:41:57:da:3e:95:ba:05:1b:25:c4:
25:ff:a8:29:31:24:16:09:82:8b:82:6c:e4:70:7d:
6f:e7:18:5f:f1:a6:4a:0c:ed:7f:4d:15:2c:89:cb:
d2:7a:65:96:51:f0:45:d2:63:d7:8c:59:10:0d:c7:
ae:cf:a8:55:d1:aa:9d:29:bc:1f:63:22:86:02:fd:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:28:93:C0:84:80:16:4D:70:8A:FB:04:43:77:58:43:1D:FA:DD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:a8:43:62:21:5b:97:8c:98:f0:b8:71:6e:a9:c1:93:b0:
f9:70:80:c4:14:e8:3e:49:92:de:b2:01:f1:ee:dc:d8:74:10:
5a:0a:e7:02:50:ec:e2:91:1c:58:40:17:3f:98:94:c7:6d:f4:
d5:49:2f:d8:c8:67:26:44:95:fd:7a:89:69:d8:25:48:5f:cc:
28:36:19:4f:0f:1b:c6:b9:02:d5:35:d7:b4:31:9c:00:52:57:
da:6e:9f:91:40:37:a4:59:16:9f:2a:76:03:d8:eb:e3:5b:02:
aa:74:4a:ab:87:5e:d7:d1:34:18:7a:f9:40:0c:47:9b:18:fd:
20:a5:e7:c9:9d:02:55:00:9d:7a:b7:15:ca:55:1d:24:81:fc:
9e:ae:e7:d8:b3:5e:db:7d:03:7f:02:bd:f8:06:fd:bc:73:aa:
0a:a3:a2:7b:4a:93:18:ec:6f:9d:d0:e4:d6:b6:39:02:bf:07:
96:66:cf:38:2f:e7:54:a4:cc:f8:7b:9b:1e:3c:fe:2d:ad:2d:
c1:5b:c7:e0:ee:3c:44:cd:88:75:b9:c0:1e:0e:71:4b:ed:75:
bf:c2:32:77:6f:c0:cc:3e:e0:7a:93:1e:ef:df:5d:bd:f2:cb:
25:32:32:3c:8d:68:5a:12:70:31:86:36:4e:9b:79:3d:0b:0c:
9e:31:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:01:09 2026 by rpki-client