Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: y+U27GyQpuThmMO/Ap6/4jdBHdIJwedZRd+C2dd59po=
Subject key identifier: A2:CA:3C:3F:52:FB:4A:8D:6D:75:F3:08:0B:30:C4:74:8B:72:B8:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01F2DC88233EAC997835306DE453F057D85E27C4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
Signing time: Wed 25 Mar 2026 17:41:54 +0000
ROA not before: Wed 25 Mar 2026 17:36:54 +0000
ROA not after: Wed 24 Mar 2027 17:41:54 +0000
asID: 215607
IP address blocks: 84.75.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f2:dc:88:23:3e:ac:99:78:35:30:6d:e4:53:f0:57:d8:5e:27:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 25 17:36:54 2026 GMT
Not After : Mar 24 17:41:54 2027 GMT
Subject: CN=A2CA3C3F52FB4A8D6D75F3080B30C4748B72B8CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:e2:6f:0d:83:27:95:e5:78:3c:7e:ba:14:
03:98:f4:d6:94:43:82:48:a7:c3:8c:ba:3b:8f:22:
49:00:3b:cc:36:49:8d:e1:70:f8:15:b7:0f:55:40:
5c:e7:a1:38:a3:40:c5:ea:ed:ce:c8:c7:8e:a7:76:
61:01:c9:f2:07:2c:12:79:ec:b6:66:48:5d:7a:92:
e2:0b:c9:6a:90:cf:5e:dc:30:93:11:ec:ed:aa:aa:
b9:c1:34:e0:ed:fe:e6:b6:f5:e2:81:b6:03:75:db:
3a:eb:f8:07:49:7b:d0:bb:18:06:7a:bd:31:b7:98:
5e:3e:c5:00:4d:9d:0d:61:7c:c7:fe:dd:e7:6d:04:
d4:ce:0e:03:71:b8:e5:d4:70:5d:3c:f1:13:93:e3:
af:b1:8b:49:d9:d0:5b:5b:a4:bd:c6:0c:2f:37:cf:
0f:b8:21:cf:77:09:74:e9:55:2f:79:29:b7:83:27:
a8:81:c3:c8:26:45:26:b2:2f:f0:9c:84:9c:a9:48:
d2:20:07:4f:e8:01:53:b4:d3:23:fc:4d:55:64:bd:
a0:64:93:e8:d7:82:91:e9:71:28:f2:e5:99:02:c1:
99:54:ce:c4:0d:a9:4c:ed:75:f1:bb:41:2d:c7:0c:
cc:33:4f:52:77:4c:16:81:33:af:49:96:ba:f8:1d:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:3C:3F:52:FB:4A:8D:6D:75:F3:08:0B:30:C4:74:8B:72:B8:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:88:30:18:71:5f:c2:78:1a:61:25:5e:5b:2c:54:f6:b6:b7:
8c:32:82:02:57:d2:d9:3e:ff:c1:f3:27:d6:c2:00:4a:d3:32:
cf:fd:2a:32:78:c9:cd:42:40:2d:22:e2:ea:39:51:52:39:24:
8c:2c:78:41:e6:97:dd:1c:8c:a4:7a:15:dc:e6:eb:cd:f6:de:
bf:06:83:41:21:11:3f:ba:01:89:05:06:58:0d:ea:3e:f1:df:
c6:bd:1b:59:a1:cf:fb:02:3f:e3:53:fc:10:11:59:a7:35:d9:
da:13:94:da:c7:ab:a4:8a:b8:12:5f:44:dc:11:58:35:a3:c4:
64:db:06:36:a2:48:08:31:26:47:27:6c:36:29:73:2b:b8:93:
69:7c:83:f3:3a:62:88:d1:76:06:c0:77:51:da:cb:f5:cb:d5:
89:f9:08:e8:42:75:91:c0:ce:c3:15:e8:ec:f7:51:10:02:67:
3f:b1:0b:40:54:19:32:4f:fa:64:24:d4:1e:f9:80:42:ba:a4:
1f:b9:06:7d:03:a8:59:13:51:7b:81:32:9d:54:bf:ca:3c:83:
ae:cf:0c:0d:53:44:b0:7b:a1:dd:14:35:50:52:c2:ef:96:bf:
f7:52:b7:2d:d2:93:84:de:63:a5:21:80:50:25:4f:1a:e9:55:
dd:0b:45:1b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAfLciCM+rJl4NTBt5FPwV9heJ8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjUxNzM2NTRaFw0yNzAzMjQxNzQxNTRaMDMxMTAvBgNV
BAMTKEEyQ0EzQzNGNTJGQjRBOEQ2RDc1RjMwODBCMzBDNDc0OEI3MkI4Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgDOJvDYMnleV4PH66FAOY9NaU
Q4JIp8OMujuPIkkAO8w2SY3hcPgVtw9VQFznoTijQMXq7c7Ix46ndmEByfIHLBJ5
7LZmSF16kuILyWqQz17cMJMR7O2qqrnBNODt/ua29eKBtgN12zrr+AdJe9C7GAZ6
vTG3mF4+xQBNnQ1hfMf+3edtBNTODgNxuOXUcF088ROT46+xi0nZ0FtbpL3GDC83
zw+4Ic93CXTpVS95KbeDJ6iBw8gmRSayL/CchJypSNIgB0/oAVO00yP8TVVkvaBk
k+jXgpHpcSjy5ZkCwZlUzsQNqUztdfG7QS3HDMwzT1J3TBaBM69Jlrr4HVrZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUoso8P1L7So1tdfMICzDEdItyuMswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NjA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVEtM
MA0GCSqGSIb3DQEBCwUAA4IBAQCmiDAYcV/CeBphJV5bLFT2treMMoICV9LZPv/B
8yfWwgBK0zLP/SoyeMnNQkAtIuLqOVFSOSSMLHhB5pfdHIykehXc5uvN9t6/BoNB
IRE/ugGJBQZYDeo+8d/GvRtZoc/7Aj/jU/wQEVmnNdnaE5Tax6ukirgSX0TcEVg1
o8Rk2wY2okgIMSZHJ2w2KXMruJNpfIPzOmKI0XYGwHdR2sv1y9WJ+QjoQnWRwM7D
Fejs91EQAmc/sQtAVBkyT/pkJNQe+YBCuqQfuQZ9A6hZE1F7gTKdVL/KPIOuzwwN
U0Swe6HdFDVQUsLvlr/3Urct0pOE3mOlIYBQJU8a6VXdC0Ub
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:42 2026 by rpki-client