Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215311.roa
File: AS215311.roa (raw, json)
Hash identifier: G1Hy5XwFjaJbDlQ76OxPuatYngzjtCDeF2m2m7hCAEE=
Subject key identifier: 76:3E:07:3B:08:21:BE:4B:FC:BD:47:0B:A0:4E:58:23:62:AF:BD:A0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7AC33162888637FF4C32A8992C75C6071D7D6490
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215311.roa
Signing time: Thu 26 Mar 2026 00:46:55 +0000
ROA not before: Thu 26 Mar 2026 00:41:55 +0000
ROA not after: Thu 25 Mar 2027 00:46:55 +0000
asID: 215311
IP address blocks: 145.223.68.0/22 maxlen: 22
146.103.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c3:31:62:88:86:37:ff:4c:32:a8:99:2c:75:c6:07:1d:7d:64:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 00:41:55 2026 GMT
Not After : Mar 25 00:46:55 2027 GMT
Subject: CN=763E073B0821BE4BFCBD470BA04E582362AFBDA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:0f:0e:c0:e2:25:35:9b:5d:80:4d:ed:cd:
00:18:76:c8:b0:5e:4d:1f:3d:6b:d1:f9:d6:d0:63:
2f:c7:85:13:ea:15:9a:84:b2:b9:6a:6f:c7:8c:e1:
7d:7a:2c:42:14:f0:cf:34:ba:06:07:46:f5:07:cf:
2f:c6:33:f0:47:f5:ee:73:73:12:0a:62:43:0f:3c:
47:63:49:d6:65:2f:ec:1f:b1:69:c9:01:6d:d1:9e:
53:e1:33:97:dd:9c:4e:e1:64:10:38:4e:d2:8a:15:
20:7b:57:ae:17:ad:df:3c:bb:70:3e:64:a4:c8:0c:
dd:08:81:f8:df:ab:b3:83:e7:1d:64:66:92:48:90:
91:61:ba:ea:16:96:7c:32:69:6e:05:6c:85:cb:a3:
a5:9b:5d:96:61:16:4b:61:8a:a3:76:29:53:82:30:
c9:d2:dc:cf:d6:c6:88:7d:4e:4b:fc:e2:4f:ae:e9:
f2:5f:b5:96:b4:df:31:a2:d9:0d:e1:a9:bb:35:e7:
10:f7:e0:9c:58:b6:71:57:f5:aa:16:a6:a2:30:39:
65:28:3d:a4:87:6e:ea:0e:fd:5f:77:f8:ca:25:ab:
91:ee:17:aa:14:85:b8:b9:a4:19:e2:4a:ef:b9:da:
04:80:d7:96:4b:a6:ac:3d:d2:76:dd:8f:18:b9:7f:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:07:3B:08:21:BE:4B:FC:BD:47:0B:A0:4E:58:23:62:AF:BD:A0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.68.0/22
146.103.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:0c:d5:ba:29:80:8f:75:47:8a:01:7a:e7:46:b1:f3:06:d7:
01:33:aa:e4:bc:2b:ee:4d:01:20:65:23:ab:4b:00:36:ce:70:
2e:26:70:44:c9:3d:3f:b3:47:a4:e4:ed:6f:6c:3d:ed:c5:b0:
6a:9d:be:cd:1b:0f:6d:75:fc:11:95:8f:5a:4e:0b:9e:ee:91:
4f:ec:a3:2c:3e:ef:6a:77:21:ad:53:87:95:40:be:c6:f9:bf:
d6:b0:13:3a:45:73:f2:81:8a:9b:77:50:71:e1:ab:09:c8:e3:
e7:b7:69:a8:aa:b2:18:0e:77:63:c9:71:55:54:b9:90:44:17:
a4:f7:6b:4b:9d:a3:bb:2e:0f:15:67:60:4f:b6:64:40:73:ec:
3a:08:9e:80:30:34:5c:7c:94:19:06:b9:7d:01:e2:83:29:3b:
83:47:d3:53:b4:f7:6f:a3:32:a5:a5:7e:ae:10:f1:8b:32:78:
e1:1e:0e:10:f5:4a:45:eb:ee:c3:ac:0a:be:f9:f1:46:3d:7b:
e7:b3:af:cd:6d:2e:29:a3:45:57:64:ae:c1:2e:3d:f0:74:a8:
8b:9a:f6:71:c7:7f:08:3f:ce:02:e7:8c:68:a1:53:97:74:e2:
bd:f8:9a:d0:7f:56:c7:82:88:3c:22:92:b1:fa:60:24:2d:84:
e9:3b:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:52 2026 by rpki-client