Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: 4IDG6/vTspQ4Pr97PC+Y+mSJ1TTPw5VdJyraN+38Sco=
Subject key identifier: 13:88:3C:02:2C:96:BD:1C:4E:71:3D:15:11:1E:AA:A3:B0:73:43:90
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 06FACB8642B83E41E540D71BBB2BAEF259C964FB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
Signing time: Sun 12 Jul 2026 14:07:53 +0000
ROA not before: Sun 12 Jul 2026 14:02:53 +0000
ROA not after: Sun 11 Jul 2027 14:07:53 +0000
asID: 215607
IP address blocks: 143.14.20.0/24 maxlen: 24
148.135.255.0/24 maxlen: 24
162.141.179.0/24 maxlen: 24
162.141.183.0/24 maxlen: 24
167.148.214.0/24 maxlen: 24
168.222.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fa:cb:86:42:b8:3e:41:e5:40:d7:1b:bb:2b:ae:f2:59:c9:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 12 14:02:53 2026 GMT
Not After : Jul 11 14:07:53 2027 GMT
Subject: CN=13883C022C96BD1C4E713D15111EAAA3B0734390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:77:7c:2f:d7:88:fc:f5:27:49:96:89:86:
94:9c:f7:0e:d9:97:20:fb:5a:d5:3c:80:11:65:92:
84:a6:20:8b:36:0e:e5:ab:8c:e5:ef:d9:90:07:e2:
b1:d8:02:ec:e2:e8:85:f0:8b:f4:f3:d2:07:ed:18:
3f:fb:ee:92:5b:81:21:a0:09:40:5a:4f:4c:dd:74:
7e:fb:0f:80:49:99:b8:58:a9:ef:63:df:14:ef:d7:
cc:42:aa:4f:1b:3f:e3:1f:9e:14:19:dd:ea:2c:27:
f8:a7:b2:6d:27:82:c3:ac:20:fc:87:6c:37:70:a8:
ac:86:f2:f5:8f:c8:e6:71:bf:d2:e8:92:95:4a:46:
05:79:28:9f:ef:3f:bd:51:5c:6f:c6:2a:c3:a2:24:
38:6a:f6:9a:98:6e:b2:d6:c3:77:e5:3d:51:c4:8f:
db:eb:f9:91:9e:78:cd:92:70:2e:05:22:ed:e4:9e:
dc:64:49:07:5e:74:af:a4:dc:11:29:16:70:2b:75:
a9:7c:dc:06:57:17:40:c3:e1:33:15:0a:23:bd:89:
80:f8:67:f5:fa:9b:b9:e0:18:30:0b:46:e4:d5:49:
57:c8:f1:04:71:ac:54:7f:d3:96:df:1a:75:be:d1:
6d:1c:18:fb:cd:0a:5b:4c:d9:a4:9d:60:c5:a2:7a:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:3C:02:2C:96:BD:1C:4E:71:3D:15:11:1E:AA:A3:B0:73:43:90
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.20.0/24
148.135.255.0/24
162.141.179.0/24
162.141.183.0/24
167.148.214.0/24
168.222.5.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3e:61:f4:25:b4:0a:9f:54:94:a8:d9:e5:2d:30:f2:fe:21:
d7:60:51:bb:2b:8f:d5:11:85:56:06:5f:d8:8e:ba:04:7d:96:
83:be:17:e8:cd:10:77:86:a3:49:df:e6:1f:9e:93:de:f8:5e:
95:8a:48:51:17:d5:4c:6c:69:3b:fb:ce:d8:4a:04:27:3d:b8:
e6:5e:fc:e3:49:74:05:60:e2:cb:43:2d:09:e8:f2:94:5c:6f:
a0:09:e2:23:ac:e9:a9:df:5e:cd:6a:f5:e9:59:17:f5:c8:07:
97:71:0b:d9:77:1e:4b:aa:83:19:bb:2c:d5:ae:d2:cb:08:55:
15:14:8f:1f:bc:bb:b2:28:5f:f6:64:7a:2b:35:0b:31:43:b5:
b0:7f:dd:70:7c:e5:2b:c4:dd:31:55:2d:71:45:9a:61:1e:51:
f8:a2:5c:03:50:6c:b4:b9:8a:a3:83:05:61:fc:16:b1:e4:9c:
97:a9:5e:bd:11:34:a9:a4:dc:95:66:aa:e0:c2:fd:22:69:71:
d2:69:38:64:f3:c7:27:29:a8:65:0e:2b:a6:25:a6:c6:06:81:
4c:73:d6:a4:1e:dc:d7:f8:95:fe:55:24:9d:d0:cd:87:81:12:
31:89:25:12:00:5c:cf:6c:02:59:3b:ef:8f:6a:94:13:be:06:
be:9e:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:31 2026 by rpki-client