Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
File: AS215693.roa (raw, json)
Hash identifier: eIikw1mXUTK97oWUU0aLUpm3SizWxLNpO4uJ1eZ08zA=
Subject key identifier: BA:8B:35:2F:F7:9B:19:1D:1C:75:2E:6C:F6:8F:74:6B:F1:EB:97:B7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B45ADEF27B22F0FD258745E6A3D106FFB7970E6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
Signing time: Sat 16 Aug 2025 10:20:27 +0000
ROA not before: Sat 16 Aug 2025 10:15:27 +0000
ROA not after: Sat 15 Aug 2026 10:20:27 +0000
asID: 215693
IP address blocks: 82.21.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:45:ad:ef:27:b2:2f:0f:d2:58:74:5e:6a:3d:10:6f:fb:79:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 16 10:15:27 2025 GMT
Not After : Aug 15 10:20:27 2026 GMT
Subject: CN=BA8B352FF79B191D1C752E6CF68F746BF1EB97B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:60:ee:c1:65:fb:2e:e1:d0:84:82:42:ee:
93:1b:d3:b7:30:25:87:88:25:11:0d:76:70:e6:b5:
0d:ec:9c:c4:22:06:bc:37:43:0b:31:ae:53:27:5d:
aa:d7:73:0b:2a:62:01:cc:e7:3c:9f:b1:0b:be:b1:
50:09:e2:c3:44:81:de:2d:fa:c0:92:32:89:2f:ad:
22:5b:2b:6c:99:2a:a9:64:5f:1d:c8:9a:4c:3c:96:
ba:b7:89:fb:33:0b:bc:4d:63:07:f7:52:70:60:4d:
a6:8c:ea:4f:a0:6b:ae:f2:ca:7e:bf:de:30:18:d9:
8e:5d:f6:63:d6:30:14:90:a5:22:96:66:c5:66:af:
9c:0a:90:be:9e:1b:9d:9c:aa:28:c7:f0:34:88:24:
69:49:b1:6e:9e:be:76:10:ed:95:38:1d:e5:99:68:
c9:fb:99:ea:c5:0d:d6:19:e9:eb:fb:a1:c2:1f:c8:
e4:04:08:d2:5d:ff:27:3d:a7:62:89:38:30:5e:0b:
6f:d0:f4:5e:9c:2d:0c:67:7e:65:83:14:dc:f5:49:
15:a6:21:1c:2a:53:79:e5:44:ad:79:27:0e:e5:86:
c3:37:78:50:b4:b6:ea:02:86:a7:f9:49:db:bc:3c:
77:a1:cf:36:4c:10:5d:6f:9b:f0:52:0d:2e:63:cc:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:35:2F:F7:9B:19:1D:1C:75:2E:6C:F6:8F:74:6B:F1:EB:97:B7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.6.0/24
Signature Algorithm: sha256WithRSAEncryption
18:14:b8:43:17:6f:6c:d2:8e:f5:83:21:24:3e:8d:e7:e3:e5:
bf:51:4d:16:41:72:4c:a2:11:8a:12:ad:69:d4:bf:92:0d:49:
c1:23:fc:08:36:ec:a5:c1:14:d4:0d:80:a2:36:27:40:73:89:
27:40:45:ab:be:6a:76:a8:14:bf:92:6a:55:d8:b9:cd:d2:1d:
ec:09:d9:13:ef:01:b1:d4:2f:44:95:8e:cd:47:0d:6e:40:ed:
04:c7:2b:23:5b:6c:ab:da:37:68:d0:ef:9a:57:22:cf:9c:45:
88:95:ac:50:97:4f:27:82:9d:94:55:7b:f9:47:55:45:16:e5:
9a:01:85:87:85:f0:fb:08:c1:5d:1b:bc:2e:39:d8:be:1c:f1:
3b:0a:29:f7:fc:6b:1a:e7:cc:49:51:3a:f9:9c:b1:fb:a3:6d:
60:1d:1c:2e:51:36:f7:a5:73:2a:12:36:10:29:c1:17:4e:c3:
31:52:86:87:99:39:81:a3:34:84:aa:f7:e7:1e:bd:b1:d4:a3:
cf:06:b6:75:8d:d8:9d:7d:ac:ce:39:34:ee:52:48:4c:49:44:
7f:bb:6b:75:fc:37:d0:0f:71:36:e7:cf:5c:6b:b6:92:10:32:
2e:04:29:df:6b:23:f4:b8:55:63:58:92:82:2b:4d:48:a8:9c:
4b:71:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:42 2025 by rpki-client