Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
File: AS215813.roa (raw, json)
Hash identifier: ZsIcPRLwR5lowdp81YpdoX9LOb2VXX3q8KAvZEL64Ok=
Subject key identifier: 42:8E:7E:66:25:22:EE:6D:29:28:CB:F9:85:49:F0:4E:E7:A0:B8:A4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 70546B244D310A8689AFC6F2C507B238E894304A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
Signing time: Wed 28 Oct 2026 22:49:39 +0000
ROA not before: Wed 28 Oct 2026 22:44:39 +0000
ROA not after: Wed 27 Oct 2027 22:49:39 +0000
asID: 215813
IP address blocks: 179.61.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:54:6b:24:4d:31:0a:86:89:af:c6:f2:c5:07:b2:38:e8:94:30:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 28 22:44:39 2026 GMT
Not After : Oct 27 22:49:39 2027 GMT
Subject: CN=428E7E662522EE6D2928CBF98549F04EE7A0B8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:0d:84:b9:79:f5:b3:04:70:b9:eb:75:f2:
a9:c2:b3:26:09:80:6d:fd:36:09:19:a5:30:96:fd:
aa:a8:3a:74:d6:1c:a6:45:e3:c7:1a:d2:a7:1d:51:
28:d9:67:6b:a7:47:2f:c6:08:45:1d:a1:5f:d4:cb:
20:a0:a7:f9:c8:95:57:d4:cf:05:a2:22:1d:e9:43:
55:86:66:e2:d8:22:2e:46:94:82:38:b7:8d:77:f5:
0a:39:cd:82:da:ff:a4:ba:d8:71:d0:47:c5:fd:e6:
a6:0f:0d:8d:80:3e:e2:9c:cb:9b:3c:f3:c0:10:58:
05:c0:2d:da:5b:43:00:ff:5a:07:d0:46:ef:3e:d4:
1e:88:eb:36:8e:21:a2:80:9f:2f:74:c8:d3:97:a1:
fc:27:17:4b:1d:17:f8:ed:67:75:62:df:12:9c:06:
9a:e9:80:9b:bf:d4:89:87:39:8b:18:84:15:c1:8d:
c9:86:de:50:c4:4d:ff:33:4f:53:46:23:59:2f:dc:
85:05:c1:a9:a8:fb:a2:8e:70:57:4d:a7:41:84:0b:
82:c6:b4:bc:89:9c:ee:43:95:00:ce:d0:92:c6:be:
a1:7e:5c:e2:e1:1e:ce:e0:93:69:24:a3:97:1f:31:
c6:85:ae:69:a5:90:d7:2c:b0:92:ad:e6:9d:ab:5b:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:7E:66:25:22:EE:6D:29:28:CB:F9:85:49:F0:4E:E7:A0:B8:A4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.190.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8b:cd:21:94:e8:4e:b2:0b:0e:c6:85:3d:c3:a1:07:62:b5:
f4:a3:36:40:60:bf:c2:70:cc:09:8a:98:eb:25:41:f1:fa:35:
19:c6:da:fe:d6:c4:21:66:7c:23:8d:c3:65:9d:35:ab:0c:ec:
8e:52:d9:eb:12:0a:8a:22:f1:29:e0:70:24:32:e8:ca:ac:92:
d9:8c:e3:4f:74:33:6f:3a:89:a7:05:e0:ad:b8:04:8d:60:4d:
64:b1:33:8e:c6:ec:d8:f0:1b:39:e2:ab:83:a6:80:d0:2f:a8:
a3:2f:19:aa:53:d1:bd:5d:4b:43:4d:75:40:25:8b:1e:03:2f:
f1:48:97:44:96:b8:eb:ec:29:ef:21:6b:2f:97:e1:46:3e:4e:
60:28:00:07:de:e8:b7:05:87:c0:77:f3:24:61:82:9f:78:ce:
c0:9c:82:73:1b:9c:fd:f2:e9:6b:eb:f9:15:86:ef:cc:26:88:
1f:e0:1e:14:41:2c:52:24:7a:14:cb:64:2b:9b:2b:33:be:64:
20:0b:ed:95:34:55:a0:6b:da:ac:ae:f5:95:f4:c5:37:16:c9:
2a:17:b5:7a:5c:26:0a:50:ca:5c:4d:f2:c6:6c:e8:af:c1:d8:
ef:06:12:3c:7e:68:72:e4:4e:9c:60:7f:22:dd:cd:fb:26:d2:
22:8c:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:19 2026 by rpki-client