Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215703.roa
File: AS215703.roa (raw, json)
Hash identifier: wyyr6YAQkAqyvKhN/7ieE5j0nJzvGVW/7XgAFHimRdw=
Subject key identifier: DF:3D:18:3C:63:2B:8A:0D:E3:08:C5:0D:87:E9:54:07:D4:F7:16:D7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 792D35A08FCF023237D4D2FE629779619BE28AB8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215703.roa
Signing time: Mon 04 May 2026 20:51:04 +0000
ROA not before: Mon 04 May 2026 20:46:04 +0000
ROA not after: Mon 03 May 2027 20:51:04 +0000
asID: 215703
IP address blocks: 179.61.132.0/24 maxlen: 24
185.137.93.0/24 maxlen: 24
191.96.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2d:35:a0:8f:cf:02:32:37:d4:d2:fe:62:97:79:61:9b:e2:8a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 4 20:46:04 2026 GMT
Not After : May 3 20:51:04 2027 GMT
Subject: CN=DF3D183C632B8A0DE308C50D87E95407D4F716D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:da:f7:62:ee:e1:c1:e3:31:96:14:e8:b6:
df:54:4c:d5:3e:3a:7d:58:25:95:6b:37:1a:06:79:
3a:89:53:c7:97:80:b0:fd:ad:7e:b2:b8:84:82:f5:
2b:7a:9a:0a:93:1e:97:95:b2:a4:15:f7:45:fa:c0:
74:fb:97:ef:7d:61:bc:bc:f9:88:7b:e6:c3:a9:11:
d4:5b:b9:c2:2d:c7:dc:a7:09:ee:9f:0d:d1:24:55:
e8:5f:71:07:e8:94:69:08:92:83:21:bb:ed:4e:cc:
11:5f:75:2f:e7:37:73:2c:98:69:64:0b:22:28:65:
7a:a1:06:6a:84:b8:44:6a:47:8d:d6:f7:18:ed:1f:
51:91:20:bd:86:23:43:64:d3:02:be:61:e7:c6:49:
74:5d:15:fc:b8:88:7e:11:ff:29:6c:bd:06:5b:7d:
43:99:d5:6e:95:8f:70:f2:80:de:89:85:5f:c0:b1:
2f:63:69:3c:d1:93:42:45:a3:f2:35:e1:04:65:4a:
cc:41:c5:3f:46:87:b5:43:82:e7:a5:be:f1:e8:39:
ba:a0:17:0d:df:9c:c9:de:04:a6:a5:16:81:c9:7f:
0b:45:46:b6:2e:4b:83:43:d3:8c:df:fa:f0:40:7c:
d2:0d:b0:76:a5:62:8b:b9:cf:d4:39:a1:af:d2:5e:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:18:3C:63:2B:8A:0D:E3:08:C5:0D:87:E9:54:07:D4:F7:16:D7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.132.0/24
185.137.93.0/24
191.96.94.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a9:45:8e:0c:e9:28:33:da:b7:67:ab:23:76:d6:60:80:f8:
86:89:eb:d6:49:04:1b:72:02:e9:60:46:a1:b2:ee:6b:51:a2:
22:c7:f4:af:fb:96:44:92:5b:b0:9d:f4:67:77:38:41:5b:99:
de:1f:ed:f3:fe:54:c2:c3:0a:64:20:22:9a:be:ad:a8:a8:40:
7a:97:17:3b:93:d8:43:a7:1b:0c:1e:1c:92:d4:d2:5f:f3:98:
59:d9:0f:8b:9d:cd:e4:21:44:cb:07:30:ae:b3:85:20:29:8e:
60:05:ae:75:01:5c:5c:52:fd:20:00:11:35:b8:41:47:c0:8a:
0e:ff:3f:8c:32:47:09:c5:0b:c4:ad:89:b9:0e:57:9a:d1:0e:
24:88:3a:38:8c:69:a7:37:e8:57:3f:1e:22:17:98:bb:f3:d6:
e7:21:ae:3f:66:dd:c6:98:d9:f7:3d:16:9c:8f:54:3a:e1:16:
76:63:6a:0c:71:49:74:bb:b0:8a:a6:04:c0:2c:32:dc:b2:7c:
cb:98:41:53:8a:d6:e7:73:ce:71:80:1c:28:d4:7b:2c:64:05:
48:04:3f:53:7d:c1:44:6b:b4:85:12:c5:eb:9f:8b:81:3a:f2:
63:11:5f:43:26:96:8b:5e:70:71:6e:7a:c9:36:c0:c0:5e:1d:
30:58:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:09:20 2026 by rpki-client