Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: v5HPCLAVnCvimsH3D7e3j0De3XyPW7L6agKDvd5NEQk=
Subject key identifier: A9:30:0A:50:6F:7C:E2:90:0F:D8:BF:63:6C:AC:C5:35:6E:59:6B:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2292F97382208C0DAAAB81F5177D1E875F8249C3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
Signing time: Thu 12 Nov 2026 00:00:34 +0000
ROA not before: Wed 11 Nov 2026 23:55:34 +0000
ROA not after: Thu 11 Nov 2027 00:00:34 +0000
asID: 215607
IP address blocks: 148.135.255.0/24 maxlen: 24
167.148.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:92:f9:73:82:20:8c:0d:aa:ab:81:f5:17:7d:1e:87:5f:82:49:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 11 23:55:34 2026 GMT
Not After : Nov 11 00:00:34 2027 GMT
Subject: CN=A9300A506F7CE2900FD8BF636CACC5356E596B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:02:ff:4d:1d:fb:e6:ca:3b:1e:6e:40:84:
df:26:c5:50:fe:f8:82:cb:33:45:8a:4c:5e:d5:c2:
c2:6b:90:0e:3e:21:bb:cf:05:ce:6a:bf:7c:d0:b9:
eb:ab:bd:66:37:1a:9e:55:7e:94:86:ac:30:d2:42:
98:8b:30:26:38:84:3d:be:7f:3a:46:b1:8d:93:31:
be:36:0e:f6:6f:b4:20:0c:f7:12:cc:d4:fc:4b:c6:
1f:3c:8d:8b:8c:41:0a:e5:cc:e7:9c:b9:57:52:e4:
e0:28:2f:08:7f:b0:d5:5e:46:1a:14:26:38:0d:0e:
b6:2c:cd:bd:de:1e:7f:87:fe:27:67:4b:c5:b0:79:
ca:6a:72:e3:27:20:32:62:9d:0c:2b:26:2c:bf:05:
d8:7f:6c:16:eb:fa:86:68:3c:c3:be:04:54:74:67:
5b:b8:df:7f:73:dd:11:b1:cb:5b:5a:11:cf:df:c8:
f3:b6:bb:f2:89:b3:26:96:58:84:05:04:eb:78:77:
b6:2f:d1:91:72:c5:b4:5f:ad:43:70:35:73:f9:e8:
53:c1:84:fc:e8:80:52:10:14:d4:7d:e6:be:21:63:
56:0b:52:00:37:76:a5:73:20:33:2b:dd:1b:a4:af:
a2:ab:ed:1b:9f:30:be:05:6e:d7:e4:c4:f5:0a:8b:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:0A:50:6F:7C:E2:90:0F:D8:BF:63:6C:AC:C5:35:6E:59:6B:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.255.0/24
167.148.248.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ed:8d:4d:44:9a:f4:a5:9a:e2:75:be:39:62:c4:d4:2a:bd:
93:34:15:a0:5c:45:8d:d5:68:b2:ca:4b:05:10:f6:47:0f:7b:
45:fe:89:b8:86:1b:0d:5f:5a:78:74:10:6e:e5:2f:44:0e:17:
51:99:fc:d0:a3:01:68:82:25:64:84:63:40:de:18:5d:46:ee:
c6:28:b4:b6:23:80:d1:aa:27:99:ce:42:e3:34:fc:2d:06:1d:
21:7f:eb:a6:aa:fc:c2:52:91:9c:81:22:77:97:e4:40:c8:11:
d8:f6:fa:51:de:af:89:97:8c:f8:a9:fc:27:bd:b9:ae:8d:0a:
d4:bf:de:bf:60:89:7f:35:eb:5d:2b:b3:22:b2:99:7f:7f:c7:
2c:16:fb:a1:c2:55:95:f7:43:cd:71:0f:ac:fd:07:45:74:2a:
e6:93:48:89:1a:93:dc:94:c8:4b:c5:5e:67:ff:26:58:0a:77:
6f:12:8f:78:33:6d:61:42:90:62:d6:a2:5a:44:ed:bf:9a:eb:
9d:b7:e4:05:3f:a8:2e:3d:7b:8e:1b:d4:3b:81:7c:74:fa:a1:
1d:3b:86:6d:46:14:3d:74:2d:78:5c:8f:96:c1:d0:d7:ad:b4:
85:c8:f8:2f:fc:23:2f:ac:3d:fd:b7:a9:26:7a:73:e6:c0:2a:
3b:39:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:43:48 2026 by rpki-client