Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215741.roa
File: AS215741.roa (raw, json)
Hash identifier: ZDyg2mZp8kEkI8nxrn6yFdi5eggDW6CruhfNEUewDlc=
Subject key identifier: D4:C7:82:E2:B6:AD:8A:4A:C2:19:01:88:E6:2A:94:B0:67:56:F6:C0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 01C8055020D63A70FB04BC6F848DE73A03361CAD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215741.roa
Signing time: Wed 23 Sep 2026 15:49:35 +0000
ROA not before: Wed 23 Sep 2026 15:44:35 +0000
ROA not after: Wed 22 Sep 2027 15:49:35 +0000
asID: 215741
IP address blocks: 143.14.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c8:05:50:20:d6:3a:70:fb:04:bc:6f:84:8d:e7:3a:03:36:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 23 15:44:35 2026 GMT
Not After : Sep 22 15:49:35 2027 GMT
Subject: CN=D4C782E2B6AD8A4AC2190188E62A94B06756F6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:a9:35:f8:34:04:51:b0:b0:f5:54:cd:97:
01:55:4f:7b:50:e5:46:a6:1e:b3:0d:45:c9:4c:93:
8a:1a:c2:9b:70:3b:00:bb:0d:36:99:0c:05:7e:1f:
5e:2b:5e:87:c2:59:72:0f:a6:75:27:df:a4:4f:70:
f3:c5:41:3e:ae:82:da:ec:fa:5f:b0:57:bb:f3:16:
99:aa:3f:d0:3a:df:a1:d0:f6:31:8b:8e:e3:ce:23:
e0:56:af:33:12:17:da:28:17:f3:70:00:81:f6:c2:
44:22:26:28:0b:13:7e:cf:64:40:eb:56:11:d9:e0:
73:9b:7d:ba:74:22:8c:d9:77:2b:10:f6:53:03:bb:
e4:22:25:71:a4:ac:ee:ee:10:6f:99:0f:f6:bc:00:
0b:aa:36:ac:6c:9e:da:5c:ea:cf:8c:ff:a6:00:04:
ae:dc:1c:41:b8:87:08:d5:68:05:20:54:6c:ad:5d:
35:7b:a8:8e:48:bd:48:97:f2:92:43:09:53:3b:d0:
7e:41:d5:fd:e1:79:f8:4a:96:66:56:4a:b8:32:40:
27:a0:2c:24:11:22:0c:69:fd:ac:78:47:03:eb:7c:
c2:d9:df:d9:10:a1:70:f0:4d:c7:e4:be:36:9d:c5:
ec:6e:ca:07:37:15:62:fe:5a:7d:d2:67:31:db:92:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:82:E2:B6:AD:8A:4A:C2:19:01:88:E6:2A:94:B0:67:56:F6:C0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.141.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f2:66:16:a5:82:10:b4:a1:3a:69:79:ec:b9:11:9c:61:04:
f2:6f:61:33:3c:db:a0:6a:18:40:d5:11:fb:4c:1f:b0:0d:57:
bb:89:99:a4:4a:d6:fc:51:f2:29:98:e8:44:a5:72:39:38:d7:
46:ef:a4:12:72:40:ea:09:2a:d6:c8:61:b7:1d:86:e2:32:1d:
9b:b7:9f:ab:6d:ce:c3:7b:d3:11:50:f0:88:28:09:27:b2:81:
e0:f9:24:fa:1c:90:dd:b4:d8:03:22:eb:7d:65:53:13:e0:38:
96:ae:be:3d:e1:8b:8c:06:c9:9e:e7:34:48:c4:68:04:4e:90:
1d:e7:e2:cf:2b:14:a7:ab:aa:56:ad:e0:5a:69:a5:90:bc:e9:
d6:bb:00:13:0a:f1:e0:6f:6c:27:c5:6a:2f:15:e0:92:7e:e8:
d2:70:b3:50:0b:a5:bb:b1:05:a5:d8:91:1c:fc:ce:16:96:69:
cc:ec:62:27:e1:78:85:82:2d:72:30:dc:61:c1:62:41:3a:e1:
45:c1:4e:f8:74:51:d4:36:e0:95:1a:69:c8:1a:9c:c1:70:61:
9e:b2:1d:6f:a9:3c:1e:8f:9b:d5:1f:8a:61:82:36:ce:ac:51:
ea:a5:33:09:d4:44:96:9e:64:ad:e0:e6:89:cc:d3:a3:ac:b0:
d3:28:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:49:55 2026 by rpki-client