Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215505.roa
File: AS215505.roa (raw, json)
Hash identifier: XtyOcv8lwPxmqGhZ4IzZ/Mu5YBKFGScWt0tTrEOJe/k=
Subject key identifier: 11:97:D4:0E:4C:D9:16:F2:2C:68:05:81:5D:05:2E:C1:C7:A2:A3:14
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 604CC362CC265080E89915D55E48940433E9C41C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215505.roa
Signing time: Wed 04 Nov 2026 20:32:53 +0000
ROA not before: Wed 04 Nov 2026 20:27:53 +0000
ROA not after: Wed 03 Nov 2027 20:32:53 +0000
asID: 215505
IP address blocks: 2a0e:8f02:f066::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4c:c3:62:cc:26:50:80:e8:99:15:d5:5e:48:94:04:33:e9:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:53 2026 GMT
Not After : Nov 3 20:32:53 2027 GMT
Subject: CN=1197D40E4CD916F22C6805815D052EC1C7A2A314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:b5:6f:74:06:be:6b:d1:fa:2a:31:49:69:
5b:93:d1:c3:ff:b1:20:3e:67:3b:12:07:52:b5:7c:
c5:f8:2c:5b:97:8a:7a:d8:a9:a6:b3:c6:e3:81:1b:
e4:33:6d:eb:8b:63:b5:27:4f:5a:15:d1:6d:81:d8:
ec:d8:88:d7:b0:96:3f:a5:35:5c:57:a8:f1:2f:7c:
81:53:47:81:19:f3:cb:98:8c:2c:fe:24:b4:83:5c:
50:e2:eb:b7:91:c8:aa:e9:cd:38:16:10:ea:7c:80:
74:9e:0e:0e:c3:63:b2:9b:e9:13:ff:0d:9d:ba:f6:
49:4c:15:29:a6:fb:ca:89:bb:4c:15:af:1c:b1:7b:
41:8e:bb:66:4d:30:72:49:a6:b6:bd:56:3c:53:9e:
2d:4a:bd:28:7c:f0:b5:16:ed:17:19:eb:ca:fa:2c:
e0:54:51:2b:62:db:6c:e0:d2:8d:8f:b8:b0:c0:81:
9a:33:c5:64:b0:2b:69:5b:8d:1d:24:c3:6d:d2:18:
75:fb:80:c7:e8:9a:72:a0:61:37:cf:17:33:c1:23:
d9:6c:89:48:4e:3e:33:d4:96:43:aa:14:7e:38:a9:
5e:01:2f:cf:e5:92:b8:8c:73:77:51:62:cc:52:3a:
cb:20:8f:af:b8:33:ca:d3:32:5f:45:6d:20:0d:ee:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:D4:0E:4C:D9:16:F2:2C:68:05:81:5D:05:2E:C1:C7:A2:A3:14
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f066::/48
Signature Algorithm: sha256WithRSAEncryption
46:3d:ce:84:1b:cd:7e:15:76:3f:c7:dd:b5:f4:9c:7d:56:57:
a3:5e:02:d6:08:10:64:2d:4c:a3:69:6a:89:fb:5f:60:5d:c3:
27:d6:f5:c7:ce:fe:cd:4c:bd:08:72:06:fc:1c:5a:8d:e2:05:
c8:21:e3:37:14:2d:c2:89:f7:38:e2:6e:78:18:2b:c8:30:76:
09:1b:32:a8:9f:06:81:b8:f6:cc:3c:12:3e:e0:1d:13:86:47:
af:95:da:51:b0:35:69:18:7e:b5:8c:aa:ac:92:e8:40:13:9b:
17:86:26:94:ea:a7:f0:1a:cb:2c:50:d4:d9:00:95:62:de:c5:
88:57:bf:ae:86:5d:63:cb:63:0d:53:56:a6:34:5f:31:2f:ae:
ad:21:49:47:24:19:d5:f7:f9:37:9a:a2:b7:22:b7:8d:72:70:
69:46:39:58:76:80:c0:a1:6d:32:b3:50:1c:6b:9b:cc:c5:42:
74:6f:a7:b7:96:e8:85:f5:28:63:b1:a0:e5:58:ee:8a:d9:e1:
31:9f:32:68:b8:b1:ae:56:03:1d:d5:41:28:e7:5c:4d:6d:ba:
2f:da:ab:69:4c:21:80:55:11:1f:b2:15:86:e6:b0:2f:4d:80:
a1:f1:9e:7e:12:09:a2:d9:e3:16:19:30:4c:b3:bf:2e:29:61:
e8:5e:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:21:24 2026 by rpki-client