Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215152.roa
File: AS215152.roa (raw, json)
Hash identifier: xrp/uSedv53NcofyDugj6h8usBzabwRcQS3dNd2n34I=
Subject key identifier: 4E:2F:47:B6:DD:1D:83:02:91:0B:3E:26:33:53:3C:7A:D5:A3:3B:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1911F197C4B7ED593B459B1533513BA810CD3C4F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215152.roa
Signing time: Sat 18 Jul 2026 08:02:58 +0000
ROA not before: Sat 18 Jul 2026 07:57:58 +0000
ROA not after: Sat 17 Jul 2027 08:02:58 +0000
asID: 215152
IP address blocks: 82.24.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:11:f1:97:c4:b7:ed:59:3b:45:9b:15:33:51:3b:a8:10:cd:3c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 18 07:57:58 2026 GMT
Not After : Jul 17 08:02:58 2027 GMT
Subject: CN=4E2F47B6DD1D8302910B3E2633533C7AD5A33B6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:b6:bf:32:b7:49:84:3d:7e:8b:58:8f:bf:
0e:17:7f:4b:28:77:8e:3d:d0:87:d5:90:7e:d3:b3:
55:ba:e5:96:65:6c:79:0d:23:21:08:73:1b:80:57:
c9:66:27:1e:65:55:61:e8:56:59:6c:d7:22:9d:0b:
ce:88:7b:06:46:30:0c:7b:76:2c:f1:8a:b7:85:c4:
f8:69:e7:77:fb:24:f8:b5:6c:f9:a3:f8:57:f8:cc:
b2:cf:82:f6:40:d4:99:ca:a2:08:7c:b8:78:b9:68:
a2:3a:dd:23:df:6c:c1:ec:07:75:69:a3:55:9b:e4:
90:93:c9:cf:36:93:6e:06:a7:a7:32:b1:2f:57:4d:
b7:95:6b:22:64:08:65:48:25:68:3a:6c:db:2d:9d:
96:98:37:24:11:44:b5:4d:22:e4:8e:15:a2:17:12:
57:48:ed:b4:6b:c1:55:54:31:df:32:f6:f0:a6:c1:
93:09:3e:70:3a:43:af:72:c7:5c:76:4e:2d:2e:e6:
d4:0b:c9:20:84:95:06:35:9f:bd:88:64:02:a5:95:
cb:28:e4:fd:5a:2f:3f:bd:8b:66:95:92:18:df:26:
96:17:f5:66:70:52:b9:82:a0:92:8c:ff:64:bc:09:
53:e9:ec:94:5f:62:73:0c:9a:3c:d0:bf:c3:83:ff:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2F:47:B6:DD:1D:83:02:91:0B:3E:26:33:53:3C:7A:D5:A3:3B:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:13:a2:bf:50:16:16:cc:54:80:de:4f:ae:8e:b2:c2:a8:54:
34:d5:58:ea:1b:10:e0:1d:59:9b:63:7a:39:9e:04:00:17:16:
b6:13:13:ce:97:fb:07:db:fd:0f:db:fd:b5:eb:de:8d:65:0c:
97:f0:8c:d1:bd:f8:1b:dc:7e:08:62:11:9d:f3:49:03:f8:2e:
61:59:36:09:b4:3c:54:47:8f:b5:86:99:68:1f:f3:73:5f:5f:
36:46:8d:c0:62:0c:bc:1e:e5:15:09:b2:d0:64:84:37:3c:e9:
a3:a1:d9:da:0c:e4:c4:d3:05:71:fc:62:d1:5f:08:8e:b1:e5:
65:18:eb:13:49:2a:cb:45:27:a5:55:8c:2c:e5:87:f8:3a:db:
3c:5b:44:cd:dd:26:86:3b:60:99:4e:86:57:48:ff:03:51:57:
60:c5:9d:20:69:43:30:ae:91:81:e7:5e:d6:f1:d6:f9:a3:31:
b9:41:59:45:3f:8d:39:53:5a:d6:ab:af:6b:eb:4c:a1:4a:e4:
5a:c6:39:0b:cb:b1:e3:b9:c3:2e:7d:d5:1b:c2:a1:e7:70:2b:
f0:a2:b9:e8:ae:ec:7e:d8:ca:35:11:b2:65:74:73:86:04:da:
35:95:19:8d:d3:0b:9c:16:e4:98:5b:d2:a8:96:e7:c8:69:80:
d7:82:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:56 2026 by rpki-client