Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215238.roa
File: AS215238.roa (raw, json)
Hash identifier: Lpe4JePM4C9sBHH9Ie3lbTEwNrnPLRyrakVSdDYY4k8=
Subject key identifier: F4:6E:7E:10:B4:A1:E0:BB:ED:1B:3B:56:31:12:24:68:6F:1B:8C:1A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 76039418AFA4112CAF87050E5A5DAAC54CFBE8AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215238.roa
Signing time: Fri 08 May 2026 12:49:24 +0000
ROA not before: Fri 08 May 2026 12:44:24 +0000
ROA not after: Fri 07 May 2027 12:49:24 +0000
asID: 215238
IP address blocks: 2a13:9500:171::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:03:94:18:af:a4:11:2c:af:87:05:0e:5a:5d:aa:c5:4c:fb:e8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 12:44:24 2026 GMT
Not After : May 7 12:49:24 2027 GMT
Subject: CN=F46E7E10B4A1E0BBED1B3B56311224686F1B8C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:4e:15:eb:5b:8d:a0:82:21:39:d7:1f:8e:
e4:e7:49:1a:9a:1f:32:6d:4d:71:24:d9:22:27:94:
b4:e3:ff:10:b7:99:33:09:32:25:07:cc:fd:2b:06:
70:2c:91:33:9b:a8:8d:17:dd:8a:f1:4f:6a:ec:19:
b0:93:e1:f5:6f:33:99:e3:52:f9:27:e9:08:73:a8:
a1:c9:93:6a:5e:11:e3:0a:3c:9e:7e:30:ee:c8:72:
16:57:75:d2:1a:78:d1:b6:60:8a:81:c0:5f:40:05:
45:37:0c:14:1e:88:42:e7:e2:c6:cb:2b:05:a7:39:
99:16:51:2f:8d:e6:11:31:0e:c8:ef:ca:c6:6d:e2:
c4:4e:52:4a:97:33:9f:54:90:c5:dd:ac:4f:f6:ae:
ed:53:c6:5a:64:66:a0:bc:52:ff:2e:c9:4c:69:dc:
03:21:9d:7a:a9:e4:67:fe:ac:b1:30:1d:39:3b:14:
b0:d0:ac:66:bb:32:ce:54:61:85:06:de:cb:7c:5c:
9e:10:78:23:38:da:0f:d0:1f:c1:b8:f2:e4:60:cc:
c3:3e:da:a5:b0:11:2c:f1:99:7b:0e:6c:58:03:be:
87:2e:cb:ec:a5:00:3e:7e:68:64:29:3b:fd:d6:e1:
84:b1:9a:1f:ee:3f:9e:e0:38:48:df:37:04:12:bf:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:7E:10:B4:A1:E0:BB:ED:1B:3B:56:31:12:24:68:6F:1B:8C:1A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:171::/48
Signature Algorithm: sha256WithRSAEncryption
88:26:12:e6:52:b6:77:c0:91:17:fc:36:47:c6:26:73:28:42:
0c:c0:63:e1:75:90:17:9c:fb:7f:23:f5:24:08:4e:f8:b5:30:
14:f7:89:02:f4:d6:29:cf:99:34:df:0a:8c:4b:e0:6a:fb:6b:
91:d1:be:91:ac:9d:c1:ce:c5:56:02:c4:fe:fb:8a:b6:ef:47:
93:6a:1f:70:96:9b:13:e2:c2:0c:f2:56:df:52:b1:91:ca:aa:
4b:18:48:af:be:72:46:53:04:39:00:09:89:96:70:5b:92:a2:
18:cf:85:f4:ed:36:e9:5a:54:c2:d8:ab:e2:38:4d:0f:3a:09:
87:b3:d6:2b:d4:e5:6d:92:27:bf:c8:80:6d:db:a8:d3:cb:60:
5b:c7:e7:d1:af:a2:31:e0:b5:01:61:d7:18:08:75:8c:bb:d5:
71:5c:21:b5:e5:62:7a:92:57:9d:5a:a5:57:be:b6:2d:1e:28:
f2:13:3a:2e:24:3d:ee:e2:8b:99:1a:60:7c:1d:c7:ae:0e:04:
41:ec:ed:d6:cd:9c:2c:31:4d:32:07:e9:4e:42:f9:9e:ec:e6:
de:8b:ce:59:69:58:1e:fb:1a:d7:23:2e:24:ca:11:86:fa:ba:
99:07:c4:25:7b:b9:b4:5c:32:2d:87:7e:f7:5b:ae:9f:af:d1:
7c:c0:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:26 2026 by rpki-client