Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: 079c5PT4hvGkHrGP7wi8Bcm+KMH9wAw1FjkaigbvK/4=
Subject key identifier: B2:80:8A:73:C3:4D:4C:0F:C0:5B:A4:B6:4C:0D:9A:35:0E:FE:8C:4E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0DA5ADB43CAEBA7DA8CA2C10CC3A984CF4700513
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215287.roa
Signing time: Sun 05 Jul 2026 12:58:46 +0000
ROA not before: Sun 05 Jul 2026 12:53:46 +0000
ROA not after: Sun 04 Jul 2027 12:58:46 +0000
asID: 215287
IP address blocks: 82.29.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a5:ad:b4:3c:ae:ba:7d:a8:ca:2c:10:cc:3a:98:4c:f4:70:05:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 5 12:53:46 2026 GMT
Not After : Jul 4 12:58:46 2027 GMT
Subject: CN=B2808A73C34D4C0FC05BA4B64C0D9A350EFE8C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:48:32:c1:22:b3:b8:02:57:37:b4:67:a8:
c1:16:7e:09:22:17:f2:8c:b8:af:fb:c9:bd:75:b5:
3a:1a:b1:a7:d8:11:b8:c0:e8:1d:df:3b:79:70:f0:
95:68:e4:02:a5:4a:a2:63:5a:44:0f:c6:63:f6:74:
23:64:cf:ea:11:ef:d5:2f:e1:5b:c9:9b:8d:25:89:
cd:ae:cd:fe:fc:e7:a9:2b:56:2e:53:b7:76:0c:4b:
d1:0f:50:f4:68:90:78:98:fd:4c:d3:b1:26:eb:2f:
d0:a7:4d:77:67:ee:5a:20:0e:71:2a:14:88:e5:e7:
0f:44:08:07:fd:bd:9c:fd:e3:46:40:79:6f:e7:5d:
15:6a:2f:a4:29:e7:07:ec:0d:ae:8f:a6:79:a1:8d:
a9:e1:c6:73:0b:8b:1f:6e:e3:1c:89:e6:09:c2:9c:
c2:12:f2:5c:f2:24:bc:0f:b6:34:01:a0:61:d0:43:
8a:d6:ba:7d:3b:97:2a:74:fa:a8:ed:41:11:87:7c:
07:66:0b:f6:b1:ef:4a:8b:29:14:9f:fe:9e:28:74:
47:a4:d8:b1:bd:44:eb:46:68:23:a1:c8:4e:1a:d3:
38:84:77:8f:f5:a2:f6:a6:54:05:2d:b6:70:c6:94:
95:ea:51:9d:77:12:ac:e7:d7:69:84:53:72:6a:2b:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:8A:73:C3:4D:4C:0F:C0:5B:A4:B6:4C:0D:9A:35:0E:FE:8C:4E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.70.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:35:fa:8c:c7:95:42:ff:05:c0:39:69:96:93:6d:2b:22:5d:
3f:29:8a:b5:43:d8:e4:c2:84:4d:6e:e3:0f:4a:5c:db:0f:b8:
c6:65:e9:16:a8:04:c9:4e:7e:5f:01:cb:85:4e:c1:e0:c5:16:
df:a6:95:cb:c7:b8:34:2b:11:48:ad:b7:a2:c3:5e:87:bf:27:
9c:cf:86:0a:60:9c:59:0c:3a:98:0f:b1:f8:0d:48:f8:fc:3b:
10:c0:cd:e0:28:0c:40:76:b7:da:2a:54:ef:6d:76:2e:0e:43:
2b:65:60:f1:9e:b0:aa:9b:cf:51:c2:05:92:d1:ad:d5:59:f9:
86:72:e5:e8:b8:e3:21:71:3e:ab:27:f3:29:25:e1:e4:d3:88:
bc:4e:ab:3e:5d:47:29:c3:43:43:6d:4a:11:2d:a2:0e:ec:50:
8a:d9:ff:09:4c:27:16:39:ae:02:11:0b:16:f9:2b:d3:f3:68:
44:d1:ac:6e:32:76:a8:9f:b2:5d:36:39:40:79:77:15:b7:60:
2e:c7:bc:1b:ad:32:4a:0f:ba:56:5d:ed:1b:0c:ec:88:fe:7f:
50:d4:a3:dd:39:7d:be:10:a8:26:0c:ec:fe:c1:c6:1b:68:39:
ce:de:1a:84:fa:25:8d:2b:49:a2:b8:15:40:2b:c5:3c:48:45:
c4:b1:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:18:08 2026 by rpki-client