Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: ihzyN/MsxwGLQGkKVmf+4aoQpP8faU9Xa8jWkuE+Xec=
Subject key identifier: D9:1F:9D:2C:C9:F5:4C:B7:55:A0:C1:B8:1C:16:70:D4:C8:E0:25:04
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4C800F410A4268F8653EA02700527074085B4AA2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215728.roa
Signing time: Thu 05 Nov 2026 17:31:08 +0000
ROA not before: Thu 05 Nov 2026 17:26:08 +0000
ROA not after: Thu 04 Nov 2027 17:31:08 +0000
asID: 215728
IP address blocks: 2a13:9500:1ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:80:0f:41:0a:42:68:f8:65:3e:a0:27:00:52:70:74:08:5b:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 5 17:26:08 2026 GMT
Not After : Nov 4 17:31:08 2027 GMT
Subject: CN=D91F9D2CC9F54CB755A0C1B81C1670D4C8E02504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:9b:99:b8:08:f9:70:0a:44:02:c4:5f:2b:
c8:db:dc:c5:48:b2:81:c2:4e:4c:67:4f:66:92:8b:
53:fc:1a:aa:37:f2:d6:09:47:80:99:46:5d:14:05:
5b:c9:2c:58:80:85:e9:5b:50:4e:35:7d:2c:20:a5:
db:ac:65:87:83:b4:62:9f:3b:34:5f:62:2b:99:e5:
63:94:35:ed:70:46:4e:cd:05:c4:08:19:a3:86:fc:
2c:41:41:2d:2a:4e:77:14:13:ee:96:d7:93:75:75:
49:cc:c2:6b:87:1c:f9:7e:45:d0:77:ad:eb:f4:78:
2a:67:18:14:f9:eb:9f:77:bb:e7:9e:f4:01:25:f9:
c2:18:82:37:d9:85:ba:1d:3d:8a:f6:36:3f:45:16:
d0:18:59:55:c1:f3:b2:f4:01:22:e5:f5:63:b3:57:
9a:b8:4f:ca:78:d6:cc:32:9a:cb:6b:91:4a:c3:7c:
2c:47:66:65:5d:7c:6d:e0:3b:9e:bd:92:aa:55:5d:
f5:89:cb:6b:5a:7a:2e:a4:29:d3:bb:ed:4d:e9:d0:
69:a6:4b:25:f8:4b:5c:bc:bf:3b:2c:5f:f3:c3:bc:
78:bf:92:54:7a:5c:8b:a1:87:8c:bd:52:a0:52:25:
40:e6:e0:c2:e3:a1:4b:34:0f:ee:6e:f0:aa:27:09:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:9D:2C:C9:F5:4C:B7:55:A0:C1:B8:1C:16:70:D4:C8:E0:25:04
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ff::/48
Signature Algorithm: sha256WithRSAEncryption
45:23:70:61:1e:8a:93:b5:bf:7f:78:83:5e:a7:26:c1:7c:89:
95:55:d9:91:37:50:5d:2c:0f:87:ba:77:7f:b8:17:e9:0e:6c:
71:1c:ce:bb:8c:8f:42:2f:15:c4:db:11:c6:ea:2c:99:c0:ff:
79:cf:a7:a8:3f:36:e6:42:68:7c:22:f2:e6:91:8f:26:70:94:
30:56:1f:5d:74:d1:6e:28:e2:11:d5:01:5e:e0:c3:5e:c1:0a:
31:19:77:1c:ff:1b:54:8f:7c:30:5e:d6:c5:ad:00:8e:f2:9c:
77:84:b7:64:2f:05:e3:78:a6:4d:d8:5f:e9:79:18:e8:9e:ee:
4d:6e:76:a8:98:8d:b3:8c:11:3c:1c:4e:09:a2:ad:4c:8a:a8:
0d:62:70:d4:da:9e:5e:d2:ec:55:46:90:74:6a:a4:d2:12:16:
a1:4a:ba:a9:f5:fc:79:13:32:91:f5:c5:eb:d8:81:a7:74:fd:
14:97:09:a4:6d:a0:96:66:f5:d3:a5:05:6a:55:cd:b4:8a:16:
bb:39:7b:f5:a9:45:b4:dd:49:bc:6e:46:6a:b8:73:91:44:92:
e0:d5:a9:ed:da:d4:db:bd:c6:f1:0a:f2:26:45:5c:8e:2a:9e:
84:6f:78:ad:cf:57:bd:8f:f4:3b:c5:c0:62:f4:71:b7:42:fc:
df:1d:74:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUTIAPQQpCaPhlPqAnAFJwdAhbSqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDUxNzI2MDhaFw0yNzExMDQxNzMxMDhaMDMxMTAvBgNV
BAMTKEQ5MUY5RDJDQzlGNTRDQjc1NUEwQzFCODFDMTY3MEQ0QzhFMDI1MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/JuZuAj5cApEAsRfK8jb3MVI
soHCTkxnT2aSi1P8Gqo38tYJR4CZRl0UBVvJLFiAhelbUE41fSwgpdusZYeDtGKf
OzRfYiuZ5WOUNe1wRk7NBcQIGaOG/CxBQS0qTncUE+6W15N1dUnMwmuHHPl+RdB3
rev0eCpnGBT56593u+ee9AEl+cIYgjfZhbodPYr2Nj9FFtAYWVXB87L0ASLl9WOz
V5q4T8p41swymstrkUrDfCxHZmVdfG3gO569kqpVXfWJy2taei6kKdO77U3p0Gmm
SyX4S1y8vzssX/PDvHi/klR6XIuhh4y9UqBSJUDm4MLjoUs0D+5u8KonCevZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU2R+dLMn1TLdVoMG4HBZw1MjgJQQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NzI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAH/MA0GCSqGSIb3DQEBCwUAA4IBAQBFI3BhHoqTtb9/eINepybBfImVVdmRN1Bd
LA+Hund/uBfpDmxxHM67jI9CLxXE2xHG6iyZwP95z6eoPzbmQmh8IvLmkY8mcJQw
Vh9ddNFuKOIR1QFe4MNewQoxGXcc/xtUj3wwXtbFrQCO8px3hLdkLwXjeKZN2F/p
eRjonu5NbnaomI2zjBE8HE4Joq1MiqgNYnDU2p5e0uxVRpB0aqTSEhahSrqp9fx5
EzKR9cXr2IGndP0UlwmkbaCWZvXTpQVqVc20iha7OXv1qUW03Um8bkZquHORRJLg
1ant2tTbvcbxCvImRVyOKp6Eb3itz1e9j/Q7xcBi9HG3QvzfHXQe
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:22 2026 by rpki-client