Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215540.roa
File: AS215540.roa (raw, json)
Hash identifier: rV4oJwcI7knflX4s2o8ThS5eEeHMk+CDmXSa51SAnfI=
Subject key identifier: 12:F3:0E:78:BC:BA:08:BF:4F:13:93:4B:93:99:8A:FA:B8:91:17:A0
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 6ADABA581811CD6BBECF6124A16F22BC93E7B4F2
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215540.roa
Signing time: Fri 17 Jul 2026 11:23:22 +0000
ROA not before: Fri 17 Jul 2026 11:18:22 +0000
ROA not after: Fri 16 Jul 2027 11:23:22 +0000
asID: 215540
IP address blocks: 139.28.240.0/24 maxlen: 24
139.28.241.0/24 maxlen: 24
194.93.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:da:ba:58:18:11:cd:6b:be:cf:61:24:a1:6f:22:bc:93:e7:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 17 11:18:22 2026 GMT
Not After : Jul 16 11:23:22 2027 GMT
Subject: CN=12F30E78BCBA08BF4F13934B93998AFAB89117A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:a1:9e:b5:ba:40:35:31:87:5a:e0:cb:1c:
cc:0c:8a:10:71:99:3e:76:3e:e2:07:80:79:b3:59:
05:e8:4e:27:c9:40:4b:0a:16:09:5a:0c:d8:41:11:
55:b2:19:18:21:dd:8f:19:08:1f:b8:ec:13:41:4d:
85:db:04:25:f9:2d:19:5e:64:84:46:b1:2f:80:7b:
73:82:df:44:5d:72:ba:a1:29:2b:60:ee:90:79:24:
65:1b:86:8b:5d:51:1f:99:c6:0c:dd:b9:53:21:17:
78:ab:d9:65:17:c6:ad:5b:cb:42:a6:a8:bb:94:f1:
88:3c:76:6f:4c:df:30:4c:05:8a:83:38:f7:07:3f:
41:1c:14:48:03:c6:bb:0b:6f:b9:82:e8:62:d7:c0:
b2:5d:51:12:da:73:75:02:ac:14:61:32:b7:42:76:
62:fb:5f:04:60:89:9a:af:1b:9c:9d:72:05:8d:93:
97:c2:aa:49:8c:3c:01:50:da:a3:54:89:55:d2:b7:
57:06:71:71:46:77:52:18:a9:1c:19:34:e4:d3:66:
b2:97:48:b4:ae:3f:44:52:6a:88:2c:98:b3:c9:19:
90:bc:3d:c6:37:09:2e:67:0e:cf:80:3d:43:9d:a8:
a9:ac:9d:46:07:1e:7f:c2:fb:8b:2c:35:2c:4c:82:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:0E:78:BC:BA:08:BF:4F:13:93:4B:93:99:8A:FA:B8:91:17:A0
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.240.0/23
194.93.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ea:b1:06:0d:6c:69:92:b8:36:51:e4:61:da:05:0e:ad:42:
bc:14:ee:b0:ef:c3:30:48:7e:eb:62:dd:d6:1f:e0:e0:64:70:
0c:af:e5:66:ec:a6:d6:7c:43:04:bc:96:41:22:f3:51:2b:6b:
35:0c:6b:95:35:6a:47:fc:76:e9:f9:a7:01:78:0a:55:9a:a8:
59:89:e0:f5:45:c9:92:29:39:46:74:ee:14:4a:2f:29:1f:1e:
a1:f2:79:3d:31:00:93:10:2b:31:4e:d6:ae:df:70:61:52:96:
09:f2:6e:21:ca:97:ea:cc:89:90:ed:3d:db:a9:3c:57:cf:d6:
74:67:58:7d:e3:c4:e6:08:2c:93:61:f1:df:91:ec:76:72:d3:
c1:e8:21:3e:3e:07:e8:03:1c:88:44:6a:18:a0:62:66:8f:45:
6d:99:ee:8d:99:95:c5:7a:8b:2c:9a:f5:8b:f9:5c:c4:88:e8:
11:dc:91:e2:9d:73:c1:71:97:8e:fb:8a:6b:00:66:0f:63:21:
a2:98:56:be:e0:3c:f8:d2:a3:76:fd:b6:f0:49:bb:7b:d5:e4:
f1:50:45:00:e2:43:de:69:8d:6c:3c:d8:12:fa:3a:e7:ed:73:
d2:f2:f8:b5:2a:51:b8:01:47:c9:39:a7:e0:5d:b7:6b:3b:e8:
c2:de:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:17 2026 by rpki-client