Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215348.roa
File: AS215348.roa (raw, json)
Hash identifier: SlupYsgfHa1s3tKsbBjrGsnRTCv+/5aD781E0WQYLC0=
Subject key identifier: 2E:88:86:EC:E6:1D:CF:2F:58:60:BE:FE:3D:F6:E4:DE:99:F6:25:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 22A27ACD6132E72A3C6D8E086E9440C5A0CD8DD6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215348.roa
Signing time: Sat 20 Sep 2025 06:55:07 +0000
ROA not before: Sat 20 Sep 2025 06:50:07 +0000
ROA not after: Sat 19 Sep 2026 06:55:07 +0000
asID: 215348
IP address blocks: 179.61.254.0/24 maxlen: 24
191.96.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a2:7a:cd:61:32:e7:2a:3c:6d:8e:08:6e:94:40:c5:a0:cd:8d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 20 06:50:07 2025 GMT
Not After : Sep 19 06:55:07 2026 GMT
Subject: CN=2E8886ECE61DCF2F5860BEFE3DF6E4DE99F62580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:47:62:28:f1:52:c0:e7:60:6e:19:37:02:
c6:13:a0:51:90:8c:e6:a3:45:3f:d9:e0:04:f9:d9:
76:d1:9f:90:23:92:6b:ae:0d:66:f4:eb:f4:1b:1e:
80:6e:4b:8b:db:86:97:56:eb:5b:be:b4:f9:a2:1e:
ef:b4:21:b9:06:c6:a4:16:e2:c9:98:ca:ca:9d:e7:
3e:53:5e:af:d8:9a:c3:3b:87:b8:cc:46:72:26:bb:
07:95:4e:e6:5e:f2:60:6c:c5:ab:4f:e9:64:54:a4:
38:2b:a9:3a:f3:0f:86:c8:22:1a:63:cc:05:53:a4:
f9:e6:53:54:2e:e4:7c:0d:38:fa:3a:03:85:bb:46:
75:47:06:8f:cf:a8:36:09:84:c3:96:a8:8d:b0:67:
52:a8:df:e6:cb:c0:d8:d9:9a:b4:de:06:44:ce:89:
84:79:05:f9:bf:c8:53:5d:ec:80:8e:5d:9e:38:cb:
cb:c6:6d:62:7a:84:53:d2:ff:82:02:b7:b6:40:a1:
d3:63:07:a2:28:9f:5a:8b:2a:65:57:ef:cc:fb:a1:
0d:90:e2:df:92:2d:f6:d6:d1:cc:09:3a:7b:06:40:
2e:d4:1f:bb:2a:0c:63:24:0a:7c:b2:81:52:8b:9b:
d9:18:4c:e4:20:eb:57:df:96:88:34:59:d4:4d:90:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:86:EC:E6:1D:CF:2F:58:60:BE:FE:3D:F6:E4:DE:99:F6:25:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215348.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.254.0/24
191.96.169.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1d:53:9b:eb:d2:81:3b:e4:71:69:25:ff:1b:c8:b5:b3:fb:
42:3d:2d:7d:83:c1:d8:96:2d:a2:74:2f:5a:c1:13:76:f1:ad:
93:7a:b6:2c:ee:41:3f:8e:8b:38:1f:6a:36:bf:b8:f0:f6:ca:
12:ea:fa:6b:d3:a2:fc:68:9e:70:a6:84:ae:13:9f:7e:d2:2a:
83:d9:89:1f:9e:da:39:3f:16:2d:3f:d5:52:36:71:51:2b:bf:
53:c9:db:28:94:12:b8:3f:1f:aa:78:e9:91:1e:a7:92:d4:9a:
0c:ee:16:7a:67:f0:91:1e:0f:3a:c8:98:4c:41:74:7c:b9:cf:
07:fb:e5:85:5f:cc:4e:2f:c7:ed:b1:39:c7:f0:03:7d:f2:c5:
fb:79:13:38:86:a8:53:f6:de:95:14:3e:7d:14:08:99:51:ef:
4f:6c:37:6c:35:00:c6:d1:3e:b1:23:97:74:6d:bf:91:f1:9a:
97:85:92:aa:c0:4c:55:ae:e9:a0:7f:54:a3:12:ae:14:17:0a:
9d:f0:aa:34:ac:70:de:39:d3:7b:c0:7e:6a:c5:bf:45:e4:70:
97:04:98:1d:97:b6:90:5c:94:4a:40:a3:9d:db:88:4f:1a:1f:
39:fd:c9:41:f1:30:5c:c4:2e:bf:ec:ad:2b:25:62:8a:e0:6d:
e5:ba:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:18 2025 by rpki-client