Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215772.roa
File: AS215772.roa (raw, json)
Hash identifier: f1WzXnQ4zXR4ZmbjQerp4OtI/fFUwUj2j8Zl8hD/uIw=
Subject key identifier: F2:DC:FA:A4:1A:61:0D:F4:AB:8F:A1:22:35:23:1B:45:94:74:11:89
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3E82C12E8CACCDB3DC6F17D2AE7514AFC1074689
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215772.roa
Signing time: Tue 28 Apr 2026 15:47:07 +0000
ROA not before: Tue 28 Apr 2026 15:42:07 +0000
ROA not after: Tue 27 Apr 2027 15:47:07 +0000
asID: 215772
IP address blocks: 2a13:9500:6a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:82:c1:2e:8c:ac:cd:b3:dc:6f:17:d2:ae:75:14:af:c1:07:46:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 28 15:42:07 2026 GMT
Not After : Apr 27 15:47:07 2027 GMT
Subject: CN=F2DCFAA41A610DF4AB8FA12235231B4594741189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:2e:a3:d5:9a:4e:15:ba:df:d4:de:8f:a0:
76:8f:4b:37:55:6f:3e:d7:33:19:c1:84:de:fa:63:
8b:fd:f3:b2:a6:0a:69:92:5b:df:37:c8:25:2a:8c:
e2:82:40:fb:a4:c5:5b:af:20:21:62:c1:9e:db:a2:
53:a9:f5:3c:20:c3:f1:b9:bb:20:16:a6:df:7e:03:
be:45:32:29:0d:01:5f:4a:d8:dc:4d:55:61:70:10:
f0:4f:fe:f4:5b:a8:f8:aa:7f:25:c2:07:0a:1b:43:
19:2c:a6:78:0b:91:ea:bb:4d:50:10:61:50:cb:92:
82:44:31:ae:fa:e7:7e:7c:79:b3:5a:04:32:79:3e:
66:91:64:5c:46:f3:ba:16:de:77:16:ae:df:fd:a9:
12:bf:84:b9:e6:36:06:18:bd:ff:99:d1:22:db:fd:
04:b7:c4:c8:1f:a9:07:35:16:29:b8:9c:74:99:68:
7b:03:9f:e9:e5:34:22:18:3d:5d:e5:69:76:1e:8c:
d9:78:2d:a9:6c:9c:2d:e8:e0:11:2f:83:a2:b8:a9:
ea:b4:4e:ef:09:76:81:b1:e2:df:03:b8:12:ee:e2:
d4:ed:2f:df:85:4e:cb:19:06:84:11:30:98:63:bf:
b3:15:84:79:a3:0f:08:0b:fd:20:64:eb:4d:d6:0e:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:FA:A4:1A:61:0D:F4:AB:8F:A1:22:35:23:1B:45:94:74:11:89
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6a::/48
Signature Algorithm: sha256WithRSAEncryption
1f:45:d2:f0:16:a5:b2:6b:df:7d:8a:50:c1:8f:2a:24:5d:c9:
35:5e:ce:a5:14:da:46:1b:48:72:8e:5f:9d:98:2b:97:53:f6:
bd:42:20:37:36:85:33:74:2a:37:ab:d1:e5:33:2b:ba:ae:fa:
63:1f:9a:ad:9d:59:b0:bb:45:a4:54:9a:4c:16:96:5c:8c:84:
40:f5:75:fc:7b:b7:40:a5:6a:7d:e6:8b:76:0e:68:d5:8e:1d:
21:b7:c9:fc:18:67:e8:09:dc:f1:42:8a:3d:a0:a2:6f:c5:06:
7c:04:d3:a0:30:6b:b5:c3:5e:94:75:6b:a8:76:5c:82:38:b9:
ca:92:49:e1:54:48:4a:22:b8:cb:9f:94:d8:21:fd:ec:c4:17:
84:5e:4f:0c:a6:39:5e:6e:cd:b0:d8:a7:41:21:c4:31:25:ab:
d6:1e:02:c7:f2:5e:34:f7:30:40:2b:f6:2c:d9:97:10:9b:0a:
d5:95:f4:a2:13:30:64:35:d5:eb:13:c3:53:8b:0a:6f:b5:ca:
3d:97:55:ae:a7:2c:12:57:c5:18:9d:10:ef:d0:31:fb:7c:e8:
d9:e6:ad:b3:d1:67:9b:cc:0f:a4:ae:90:da:85:f2:a3:53:6f:
a6:68:4a:eb:d8:ba:a1:76:25:19:ee:41:66:26:d2:c7:ef:a9:
f9:ff:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:57 2026 by rpki-client