Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215748.roa
File: AS215748.roa (raw, json)
Hash identifier: JYzwTJruYDDV0SDzgPTXkrnup57hPBR9jN2urCjL/W8=
Subject key identifier: CA:07:D4:F4:AF:4A:62:E5:AF:35:AD:2B:75:0A:0F:91:65:DE:7D:B0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55C15B6CC43C8FFCDC5EDFDBC7F0A21BE6323A48
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215748.roa
Signing time: Mon 09 Mar 2026 09:52:37 +0000
ROA not before: Mon 09 Mar 2026 09:47:37 +0000
ROA not after: Mon 08 Mar 2027 09:52:37 +0000
asID: 215748
IP address blocks: 96.62.35.0/24 maxlen: 24
96.62.36.0/24 maxlen: 24
96.62.64.0/24 maxlen: 24
96.62.65.0/24 maxlen: 24
96.62.66.0/24 maxlen: 24
96.62.110.0/24 maxlen: 24
96.62.123.0/24 maxlen: 24
96.62.142.0/24 maxlen: 24
96.62.213.0/24 maxlen: 24
96.62.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c1:5b:6c:c4:3c:8f:fc:dc:5e:df:db:c7:f0:a2:1b:e6:32:3a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 9 09:47:37 2026 GMT
Not After : Mar 8 09:52:37 2027 GMT
Subject: CN=CA07D4F4AF4A62E5AF35AD2B750A0F9165DE7DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:d3:81:cc:39:a2:e8:4e:c3:4c:70:dc:30:
be:9a:d8:20:0c:ae:6d:61:95:1b:a3:b4:7a:b1:ff:
19:96:bc:d7:3b:08:d4:ad:09:9e:27:a0:27:09:cf:
aa:ed:fa:74:b7:63:f3:61:8e:13:46:80:9a:5f:1c:
83:8a:73:79:2f:5c:18:3d:89:13:1e:9f:55:dd:ce:
3f:5a:01:f6:97:15:27:14:79:63:f0:ea:95:80:d3:
62:b3:7d:87:25:a3:3b:de:1b:35:32:d5:b7:e6:b8:
66:29:37:8c:72:f0:c7:59:5e:93:1a:f6:31:7e:7f:
c7:3b:8b:95:fd:2d:b0:2b:72:15:5a:f7:43:b8:85:
25:51:49:56:20:a9:46:d6:4a:6e:9b:c9:52:54:41:
3d:95:0a:57:0a:2e:39:db:2b:5c:d9:50:9c:36:ff:
d1:e8:a3:a4:f9:c9:d5:d4:b0:49:82:87:cb:58:3d:
fb:95:fd:12:3c:ca:62:6c:5f:33:00:db:17:3b:88:
60:c5:b7:4a:90:bd:c1:d9:58:38:c4:31:90:23:f0:
0a:ca:d5:f9:cf:9d:f9:b4:c8:78:07:4c:d2:af:14:
6e:8d:21:cc:9e:78:b0:bd:d5:f7:a5:3b:48:2e:13:
a6:a4:e5:dc:9b:03:6f:df:16:07:c8:0a:66:da:de:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:D4:F4:AF:4A:62:E5:AF:35:AD:2B:75:0A:0F:91:65:DE:7D:B0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.35.0-96.62.36.255
96.62.64.0-96.62.66.255
96.62.110.0/24
96.62.123.0/24
96.62.142.0/24
96.62.213.0/24
96.62.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:76:f4:da:47:bc:17:89:31:ce:92:dc:10:48:8d:cb:6e:4b:
fb:47:13:de:8d:84:f2:00:00:3c:b4:21:f1:37:90:d3:a8:92:
38:21:02:c9:b3:b7:67:94:10:45:1e:1a:bd:8b:14:ad:6d:00:
c6:2c:16:a2:ef:7f:b6:8c:df:12:82:8b:75:0c:93:7a:80:48:
a5:43:70:6e:44:0b:e9:40:f0:10:a2:56:a7:48:d2:d0:f4:20:
8a:b6:c8:87:ee:92:02:28:13:3c:36:90:47:cd:1e:5d:2f:89:
2a:ea:43:a9:b8:c1:9f:a5:b3:93:64:dd:11:fb:27:a3:8d:35:
9f:c0:07:c3:2c:32:08:e7:97:b9:c1:af:71:ac:ba:0b:03:89:
4b:29:a9:ef:6e:ff:5f:59:41:6e:40:f0:65:89:14:1a:cd:bd:
da:df:b7:4a:42:d0:5b:2d:4e:77:ab:91:92:64:d4:df:d2:7e:
73:6e:a8:60:91:bf:49:56:a0:98:d2:6e:cd:ea:f2:1c:94:52:
88:4c:8f:22:fa:ea:66:eb:84:0c:f7:37:f3:ea:73:c8:53:dd:
1b:ca:27:1e:f3:f2:b1:dc:07:c4:28:73:2d:b0:1f:cb:f8:81:
54:7f:7b:1b:8a:ff:56:aa:53:38:7e:19:da:c7:9f:91:27:79:
f8:00:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:31 2026 by rpki-client