Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
File: AS215693.roa (raw, json)
Hash identifier: MvZxgy9Ik2HpU1wwLcESdmv+bJi8QuJcXMuvcvbyLSc=
Subject key identifier: 99:AE:D1:6F:4C:D6:24:FA:71:4E:EF:5D:1C:CA:49:2C:B3:EE:5B:87
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1F0CC4A87A814DEE2A637B5CE2C86C4A2EE625A2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
Signing time: Sat 18 Jul 2026 10:49:13 +0000
ROA not before: Sat 18 Jul 2026 10:44:13 +0000
ROA not after: Sat 17 Jul 2027 10:49:13 +0000
asID: 215693
IP address blocks: 82.21.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0c:c4:a8:7a:81:4d:ee:2a:63:7b:5c:e2:c8:6c:4a:2e:e6:25:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 18 10:44:13 2026 GMT
Not After : Jul 17 10:49:13 2027 GMT
Subject: CN=99AED16F4CD624FA714EEF5D1CCA492CB3EE5B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:5f:67:03:48:9d:52:73:4b:85:9d:8c:00:
b3:c2:97:34:14:ce:3f:bc:d6:a2:e9:d6:ae:96:b8:
dd:91:fd:04:d1:29:88:e8:df:fd:bb:32:07:9f:53:
c2:94:50:5b:a7:eb:05:96:62:b1:4b:fe:a7:42:7d:
d0:20:34:a2:a5:fc:3a:ad:cf:cd:6c:cc:e9:91:61:
7e:54:77:33:7f:26:1e:3b:cd:01:e4:7c:9f:ce:b5:
20:cd:0a:97:f2:8d:1e:3b:5c:04:5a:7e:c1:92:17:
fd:87:ab:4a:34:06:98:fc:f7:1e:e8:6d:05:33:02:
c5:2a:5b:86:2e:da:ba:d1:43:f0:b3:48:01:ce:18:
05:2e:dc:7a:55:f3:fb:a8:88:1d:d7:fa:0c:d0:ab:
e0:f6:8b:ab:ca:aa:e7:cd:38:2e:06:e6:3c:5e:53:
4f:6e:b2:26:e8:fd:b0:4c:13:fc:19:6e:9e:c3:a6:
7e:09:cf:f7:0b:ea:af:c2:da:55:c8:a3:56:7f:41:
8f:ee:01:79:32:0f:74:a4:63:60:00:2f:e8:a4:a7:
e7:2b:5d:9b:cd:aa:11:08:3b:20:a0:98:18:0e:33:
90:d2:1e:b8:b7:d1:41:19:ef:d3:e7:42:c1:ae:34:
e5:de:39:05:0e:61:11:1b:a5:f3:40:7c:93:51:fd:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:D1:6F:4C:D6:24:FA:71:4E:EF:5D:1C:CA:49:2C:B3:EE:5B:87
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.6.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5d:56:d9:e7:9b:ee:e8:3b:f0:89:c5:4f:e9:77:4c:fb:db:
3b:b2:16:58:34:26:52:a0:06:ac:0a:7d:eb:94:02:31:bd:12:
f9:90:65:05:94:8d:2e:59:df:bf:e8:3d:02:3e:ad:28:85:7b:
82:47:11:58:3f:2a:5c:ba:80:35:25:56:87:0c:d3:d0:e9:e2:
fb:db:d3:fd:8b:16:7a:90:47:06:4f:07:36:54:9a:17:b3:71:
f6:67:31:7f:66:34:27:01:f3:ba:43:d2:0f:d2:a7:53:2f:2a:
83:f7:ec:44:94:fc:ff:a6:a2:58:11:0d:ca:06:a5:4e:cb:22:
9a:b0:97:11:ad:02:e1:19:21:e7:e0:2a:7c:00:0f:60:47:d0:
2f:9d:02:ec:fd:82:bf:45:57:bd:ed:b1:b8:ba:8c:a8:27:81:
c2:9f:e8:4c:5c:8f:8a:e3:eb:6a:01:b7:ad:c7:53:5c:7a:7e:
14:a7:c2:61:da:ff:ec:17:63:2e:b0:e3:b5:da:d1:d5:4f:e9:
45:58:30:45:7d:29:9a:d8:5c:d4:f9:96:c5:5d:28:6d:ab:ba:
a7:e6:00:c7:8c:5f:de:80:95:81:21:41:5a:87:eb:c4:31:e3:
22:b5:d2:3d:99:a6:1c:2c:23:14:12:f7:dd:93:5d:89:4a:96:
bc:dc:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:23:54 2026 by rpki-client