Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215262.roa
File: AS215262.roa (raw, json)
Hash identifier: NjZPIBbDfE5Nm7bujaSCXEMuq9uJAm/JifHgzGvFFNw=
Subject key identifier: 20:04:85:AA:35:6A:26:3F:D2:12:D9:C9:D2:9A:03:4D:66:3C:F2:2F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1DED54BDBE5079E17E8063CAD08F5E2A72F00AD5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215262.roa
Signing time: Fri 13 Nov 2026 00:05:08 +0000
ROA not before: Fri 13 Nov 2026 00:00:08 +0000
ROA not after: Fri 12 Nov 2027 00:05:08 +0000
asID: 215262
IP address blocks: 82.25.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ed:54:bd:be:50:79:e1:7e:80:63:ca:d0:8f:5e:2a:72:f0:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 13 00:00:08 2026 GMT
Not After : Nov 12 00:05:08 2027 GMT
Subject: CN=200485AA356A263FD212D9C9D29A034D663CF22F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:75:28:41:2b:5e:cd:0e:9d:0c:59:48:c0:
c4:7b:71:72:9b:a5:a3:9f:b6:92:61:8d:4f:64:5d:
28:4a:3f:c2:f5:59:24:6b:72:74:07:6b:4f:40:72:
fe:e3:76:bb:d8:be:e2:0c:59:f2:44:a6:30:d2:9a:
17:cf:1a:ae:13:69:b5:15:33:2f:97:3e:21:bb:7a:
98:17:22:ac:50:a6:fb:a5:2f:d7:ea:a0:fa:69:0a:
0a:86:0d:fb:15:38:1c:81:78:32:70:1d:a4:69:47:
ec:e3:65:b8:fc:af:5f:b2:89:af:d1:86:5c:c8:a7:
08:7d:25:c7:e9:55:fc:3c:5d:a2:45:09:bf:d1:72:
9e:60:c3:8c:b4:4d:b2:7d:e8:30:b3:f5:9b:c1:3e:
dd:a6:40:96:e4:e5:30:d3:31:87:9d:bd:93:9a:2c:
29:63:d0:4a:81:4c:02:99:bb:9d:d9:5e:13:65:60:
ae:0c:f7:d9:cf:31:ee:b1:0e:11:23:d6:f8:7c:92:
69:16:1e:4e:cd:81:d0:9c:3a:d8:83:9e:f5:8a:4d:
cc:ef:5c:da:24:20:8e:2d:89:e2:18:22:ce:31:4c:
73:15:6f:6b:35:71:b0:f6:13:ad:b3:a7:03:6d:27:
ec:41:a5:55:39:15:09:29:c3:13:07:38:02:fd:e2:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:85:AA:35:6A:26:3F:D2:12:D9:C9:D2:9A:03:4D:66:3C:F2:2F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.150.0/23
Signature Algorithm: sha256WithRSAEncryption
39:ec:a6:76:62:d0:3c:63:19:91:d7:55:db:8f:85:5a:9b:8a:
9b:89:ea:09:2c:a2:03:cd:e6:9c:16:1d:ef:f2:87:af:9c:87:
42:13:35:03:34:36:e5:fe:6c:bf:ba:a5:2c:f7:6e:5c:96:8b:
70:0b:34:a9:f0:66:71:d1:ea:ff:60:4d:79:2b:ec:a9:fd:7b:
ce:dd:db:7f:98:04:46:c6:55:b3:cc:c3:f7:38:fc:c7:0d:eb:
8e:da:5c:2d:f5:6f:ec:2d:0a:32:0e:62:62:c6:72:9d:42:97:
80:93:2f:a9:5c:ee:67:16:30:94:54:a3:b9:13:3a:45:1d:72:
a6:b4:6e:94:7c:a4:87:00:8c:b5:3a:b2:03:72:ed:47:e9:95:
4e:75:01:b3:59:1d:00:77:40:5e:ee:c2:0f:6d:d2:52:1e:33:
81:f0:6a:d8:f1:a8:7b:ae:58:cf:5f:80:d4:32:3e:5b:05:e5:
5f:e1:47:1b:28:ea:44:f9:24:67:8c:d3:b8:3a:79:88:84:04:
b9:00:a1:49:ef:df:c3:e9:8f:bf:dd:86:c7:7f:66:11:ff:7b:
68:b0:a0:33:4e:b2:c9:30:94:eb:e3:95:32:7f:21:eb:ff:7f:
ee:18:08:c6:cb:77:1b:b1:c8:d7:2c:05:b7:3e:52:02:22:4b:
59:e7:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:34 2026 by rpki-client