Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS215748.roa
File: AS215748.roa (raw, json)
Hash identifier: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=
Subject key identifier: 3E:30:0D:A7:0F:4D:D9:7D:90:D9:27:50:7D:02:DF:9F:72:F7:A0:3D
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4B4A469345C6253721D33AB0AE6F0E7975695544
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS215748.roa
Signing time: Mon 09 Mar 2026 09:52:28 +0000
ROA not before: Mon 09 Mar 2026 09:47:28 +0000
ROA not after: Mon 08 Mar 2027 09:52:28 +0000
asID: 215748
IP address blocks: 46.236.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4a:46:93:45:c6:25:37:21:d3:3a:b0:ae:6f:0e:79:75:69:55:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Mar 9 09:47:28 2026 GMT
Not After : Mar 8 09:52:28 2027 GMT
Subject: CN=3E300DA70F4DD97D90D927507D02DF9F72F7A03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:42:6d:16:da:3b:14:66:32:c2:ce:a6:69:
4b:6f:06:0b:36:6e:7b:a1:1f:e2:ae:b1:bd:9b:85:
16:ec:fd:bd:77:27:a4:9f:00:a0:86:f5:b8:8a:52:
99:d7:14:0b:37:ae:85:e0:4e:94:7d:ea:ad:31:4d:
e4:e7:84:0e:76:91:c8:13:a5:37:4c:c4:21:e4:21:
fe:54:a4:2c:9b:45:5c:91:1a:21:fc:e9:a6:3d:72:
1f:7a:8d:80:e4:3b:e3:ac:59:f8:b8:30:bb:a5:33:
fa:ae:07:86:26:5b:b1:87:97:49:94:e6:f2:e5:88:
d8:ff:29:b1:0e:3c:e2:b3:9a:dc:32:1b:8e:13:25:
f0:57:7d:d9:20:9e:f7:98:93:70:45:66:ee:5a:66:
74:1c:36:13:5b:dd:e6:d6:b7:20:e3:02:9e:99:a6:
ae:e4:3f:37:7c:b4:c1:d8:fe:db:a5:ad:0d:9a:bf:
e9:46:37:20:e9:14:4e:65:b4:e0:f3:23:f3:08:f3:
d4:9e:70:d6:2a:6b:de:81:36:b3:db:0d:1f:76:b7:
4b:88:81:57:74:56:e7:6d:d3:43:5e:5f:1f:19:7f:
a6:d6:67:4e:98:5b:2d:28:b4:85:34:ab:e7:e6:05:
fd:c0:76:dd:c9:e4:8a:23:be:b0:17:e0:a5:c8:e2:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:0D:A7:0F:4D:D9:7D:90:D9:27:50:7D:02:DF:9F:72:F7:A0:3D
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS215748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.199.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f4:b4:15:69:5e:32:f2:c6:cc:bc:be:05:15:2a:26:30:fc:
94:42:a3:d3:1d:69:07:1c:70:91:f5:86:1e:79:37:10:5f:a8:
6c:96:88:17:7c:6e:9c:5d:c4:60:d9:87:8d:01:46:58:f1:1c:
3a:63:95:f2:3f:27:27:8f:89:11:ab:d7:8c:66:aa:42:68:3e:
0e:ce:b3:63:94:3f:84:39:cf:0a:37:d3:ce:04:19:37:b4:b9:
8f:0b:1a:5a:f6:c7:2a:ce:4a:ff:fc:b5:59:4e:db:8c:43:1c:
09:63:8c:14:24:c0:64:8c:c6:77:2f:76:41:42:0a:e2:cf:4f:
51:66:6e:e6:d6:b2:f8:8e:0f:54:7c:3d:22:63:49:40:63:f5:
f0:2e:26:24:0f:69:75:12:34:96:53:78:fa:e3:21:7f:bb:56:
00:86:10:03:02:32:a3:4f:01:4d:b3:6a:bd:11:da:ac:d5:04:
91:9e:fa:c2:ec:a1:1a:72:01:0b:90:71:13:8d:77:e5:e2:b3:
30:15:7d:91:72:f7:1e:8a:3b:5b:b7:24:bb:f0:ea:3f:06:a5:
78:32:ee:15:11:e2:8f:7f:a4:a4:a9:87:35:c4:52:6a:a2:24:
7d:7f:ea:3f:9b:99:68:e5:8e:58:e3:ea:ad:a1:d7:0c:0c:a3:
ab:7e:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:41:37 2026 by rpki-client