Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: 0qQRh9VN8yM2Ghg5YUP9wbJf2KMgLVqoXON6rQKG62o=
Subject key identifier: 11:5F:7A:5F:FD:07:E2:BE:7F:8A:7E:53:35:B2:CE:00:39:5E:9F:3C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6CD3EBEDCF1D7454CBA8261B9ACA765432119043
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS215728.roa
Signing time: Wed 14 Oct 2026 18:22:00 +0000
ROA not before: Wed 14 Oct 2026 18:17:00 +0000
ROA not after: Wed 13 Oct 2027 18:22:00 +0000
asID: 215728
IP address blocks: 5.199.22.0/24 maxlen: 24
185.169.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d3:eb:ed:cf:1d:74:54:cb:a8:26:1b:9a:ca:76:54:32:11:90:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 14 18:17:00 2026 GMT
Not After : Oct 13 18:22:00 2027 GMT
Subject: CN=115F7A5FFD07E2BE7F8A7E5335B2CE00395E9F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:9a:ad:1f:42:ac:eb:6c:c1:17:41:ac:13:
8c:c5:e1:33:a0:40:99:6f:03:26:05:20:20:d9:4d:
8e:e4:4c:88:13:a8:05:af:b8:ee:b9:f3:0b:23:21:
60:ae:92:0e:05:39:1a:8c:3d:fb:51:ac:22:df:ad:
a0:a2:69:6a:b1:5d:66:21:90:1b:dc:30:18:6a:53:
dc:cf:b1:42:aa:71:09:4e:f9:31:57:67:22:77:c2:
aa:b3:21:03:58:8d:93:04:9c:8c:e4:28:b6:6d:e5:
46:98:a8:ef:0a:94:5f:81:1b:d7:22:be:0a:f0:29:
34:87:a3:a6:9a:a5:26:0c:8a:e8:3a:ce:f0:b0:a4:
2c:f1:e6:a2:5a:38:b3:92:01:fa:c1:b9:ef:d3:d1:
cf:74:e1:ea:d9:a8:db:2e:30:57:b9:e6:e4:db:77:
18:e0:6c:4d:8e:c3:92:8f:c8:cd:a6:60:b4:db:81:
32:0d:49:09:60:58:25:72:cf:c7:2a:a0:5b:a2:80:
01:3f:93:68:9c:4c:02:ee:a8:1a:40:20:cb:d9:ef:
c7:2b:0b:4a:b5:c1:ac:44:a9:f1:0e:ac:50:68:d3:
86:4d:d5:9f:75:15:37:4f:7e:73:32:29:39:bd:3d:
1a:e4:ba:25:e1:a1:f8:13:92:4b:3e:8c:46:19:ff:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:7A:5F:FD:07:E2:BE:7F:8A:7E:53:35:B2:CE:00:39:5E:9F:3C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.22.0/24
185.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:4a:2d:87:5a:a5:c4:2e:46:0e:f7:64:6f:11:b4:a1:a2:18:
dd:88:7e:3c:12:43:47:49:fd:da:e1:66:05:81:a6:ab:0d:6a:
0c:f2:59:d8:9c:f4:40:29:83:72:ae:07:bc:78:35:69:60:10:
17:3c:44:6a:ba:a1:2d:37:98:71:d9:b2:65:2f:c8:1b:09:dc:
d7:f5:79:82:34:3e:04:06:2f:52:8e:9b:08:3a:8f:e9:ea:25:
be:9c:41:6f:5f:a2:1e:0a:f8:dc:00:78:ad:a3:bf:bb:eb:05:
6e:fe:35:0a:a7:ee:63:db:f3:2c:88:4a:fe:92:59:3c:37:27:
cd:c8:54:76:26:36:0a:35:18:4d:c9:e6:6f:27:d3:d5:26:f1:
25:bb:e7:c8:16:3e:55:82:1d:d8:69:5b:dc:1f:de:4b:4f:82:
b6:a4:45:11:12:0d:14:c0:d8:be:e7:8d:c1:44:d4:9c:6a:0d:
c7:72:84:8c:22:b2:23:58:4f:3a:b1:6d:66:02:2c:a7:be:cb:
04:29:be:b8:ef:b8:91:69:a2:50:3c:52:6f:ee:97:22:fa:ab:
36:18:b2:16:07:5e:6c:42:43:ad:81:84:4d:56:02:45:57:0a:
19:fe:cd:c7:06:23:83:9d:3b:36:d5:8b:48:e1:00:70:0c:1d:
1b:68:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:13 2026 by rpki-client