Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64515.roa
File: AS64515.roa (raw, json)
Hash identifier: JfvGd2r5hCzN7xbo5lVRKGAHnYW5osvkjIG2aGXcu74=
Subject key identifier: D9:2D:FC:61:09:1E:2F:0C:63:B0:7F:B0:1A:62:D7:36:13:3E:1C:B1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A36B0A26091A98412324EBA3FEF18494A0F8A78
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64515.roa
Signing time: Mon 20 Jul 2026 06:17:55 +0000
ROA not before: Mon 20 Jul 2026 06:12:55 +0000
ROA not after: Mon 19 Jul 2027 06:17:55 +0000
asID: 64515
IP address blocks: 2a13:9500:37::/48 maxlen: 48
2a13:9500:e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:36:b0:a2:60:91:a9:84:12:32:4e:ba:3f:ef:18:49:4a:0f:8a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 20 06:12:55 2026 GMT
Not After : Jul 19 06:17:55 2027 GMT
Subject: CN=D92DFC61091E2F0C63B07FB01A62D736133E1CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:86:da:95:94:c1:17:aa:a0:08:02:5f:6f:
02:ef:fb:9e:66:c0:d9:9d:3e:16:47:40:47:c6:3f:
f3:03:82:61:d7:58:64:75:7f:12:9a:f7:87:5c:c0:
3a:33:65:cd:98:3b:b4:33:f6:16:6e:63:86:9b:f8:
1e:94:03:cc:fd:15:76:34:45:27:e2:6e:6a:0f:8e:
44:92:6f:a1:e1:fb:cb:40:ed:ad:18:08:01:01:97:
20:22:6a:d0:1c:2c:de:a6:50:2a:d5:d4:85:e5:ec:
70:15:af:81:58:35:bf:41:00:95:df:04:10:20:3a:
08:a5:82:dd:63:a9:ae:4f:85:0f:a7:79:7e:f5:81:
bc:be:d6:b9:a7:a9:2f:6f:f3:5a:80:69:38:9d:53:
50:a4:5d:28:b8:52:3a:12:40:30:70:13:65:d3:91:
7c:53:a4:61:22:5d:8a:63:e8:35:11:5b:89:a3:c7:
42:13:cf:f1:54:52:db:4a:7a:6a:b3:57:f6:19:f0:
31:5d:10:a0:13:af:79:0f:32:32:c3:52:69:66:9a:
8f:5a:e1:8d:aa:e4:88:0d:ab:e0:07:9c:89:1b:d0:
98:47:65:cb:36:29:f0:cb:6c:f7:0d:b0:85:d2:4a:
ef:7d:4a:fc:20:ae:1f:9a:7f:a8:93:20:b1:54:3c:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:FC:61:09:1E:2F:0C:63:B0:7F:B0:1A:62:D7:36:13:3E:1C:B1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:37::/48
2a13:9500:e3::/48
Signature Algorithm: sha256WithRSAEncryption
94:18:da:f8:9e:ef:6b:05:f9:69:c0:bd:11:20:ff:df:f4:b3:
b7:93:85:81:05:ad:f2:ed:4a:a1:5a:71:14:d4:d3:92:ee:82:
2c:f3:a8:84:77:2f:af:58:2e:71:47:dc:52:d8:45:3a:c6:79:
69:db:33:78:b6:4b:30:e6:13:6b:95:62:f3:88:b6:2d:2a:c9:
b5:4c:25:f3:12:f2:46:1b:37:79:2e:3c:9b:9c:bc:e5:d0:af:
0c:8a:64:1a:ba:81:2c:3c:f1:4d:aa:c4:44:18:8e:0c:5e:9c:
bb:1a:78:09:31:d6:9d:02:61:48:3d:4c:3e:e6:96:62:cb:6e:
7d:19:3d:79:ad:6c:ec:d2:49:58:ba:97:30:1a:f1:30:01:57:
8c:47:a5:c6:55:f0:e5:b9:55:b2:f2:e8:19:52:20:27:92:33:
09:02:79:4b:ca:ed:fb:68:77:4e:db:7c:f4:2f:e0:98:79:5c:
8f:6e:5b:af:d0:09:43:70:8a:b2:44:3f:ba:5e:d1:2d:da:87:
a8:d3:ee:e8:33:a8:f6:0f:a6:ec:43:e8:3c:70:a8:55:dc:5f:
65:b5:c9:41:9c:af:98:f5:2a:f1:de:0b:dd:31:56:e9:8a:bd:
b8:e9:d5:17:34:df:56:2b:00:9e:43:ce:d4:4c:bf:bd:63:9b:
c0:aa:ff:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:41 2026 by rpki-client