Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215017.roa
File: AS215017.roa (raw, json)
Hash identifier: fbEO4iuVOzoG3iDy5YntXMhxCTWBd88/H1MtClxclhQ=
Subject key identifier: DF:0E:45:CE:25:C8:C4:F0:9B:1E:AF:3B:4C:9F:65:53:46:F1:FD:DE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 07D3CDCD6DFFD90CA511550212BBA54921F1426C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215017.roa
Signing time: Tue 16 Sep 2025 20:28:23 +0000
ROA not before: Tue 16 Sep 2025 20:23:23 +0000
ROA not after: Tue 15 Sep 2026 20:28:23 +0000
asID: 215017
IP address blocks: 2a0f:85c1:ce7::/48 maxlen: 48
2a0f:85c1:d50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d3:cd:cd:6d:ff:d9:0c:a5:11:55:02:12:bb:a5:49:21:f1:42:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 16 20:23:23 2025 GMT
Not After : Sep 15 20:28:23 2026 GMT
Subject: CN=DF0E45CE25C8C4F09B1EAF3B4C9F655346F1FDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:01:d7:66:c8:4a:45:4e:6a:a9:64:47:13:
71:93:66:ed:97:1e:cc:70:b6:4e:cd:44:05:e0:89:
18:41:91:74:46:43:73:21:60:87:13:2b:32:4e:56:
26:05:50:a1:82:b2:a1:23:52:f1:42:61:17:17:14:
9c:73:d0:5f:ef:66:1e:ce:2d:a2:12:75:c8:8e:64:
bc:c0:b7:25:5c:47:c4:c5:92:0c:af:2a:de:b0:94:
64:9c:f0:9e:d4:ae:ac:09:fc:bd:38:2b:97:0b:77:
00:6d:69:0a:49:63:06:4d:94:1b:b3:ba:cc:75:38:
c2:0f:57:8d:1f:f0:6e:95:43:18:f2:9b:4a:75:21:
7f:fe:91:b8:a0:30:d5:6b:dd:65:0b:c6:0e:a0:67:
16:46:d8:35:75:46:d8:b7:d6:6b:d5:11:7d:a5:82:
c1:54:ff:3a:16:91:86:20:03:aa:35:7e:b0:4f:05:
3e:42:41:a5:9a:1b:cb:69:6f:51:25:9b:ca:3e:a7:
00:e7:7d:96:a3:dc:5d:4c:9d:f4:69:2e:91:70:2e:
8d:6c:a5:c2:a1:5a:7b:00:f7:54:0a:47:ab:d9:c2:
02:d8:18:19:64:88:45:d9:8a:26:51:34:6d:fb:13:
19:53:03:e1:d5:d0:27:c2:16:30:19:18:50:85:44:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:45:CE:25:C8:C4:F0:9B:1E:AF:3B:4C:9F:65:53:46:F1:FD:DE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce7::/48
2a0f:85c1:d50::/44
Signature Algorithm: sha256WithRSAEncryption
6c:08:2a:8c:9a:e0:01:0b:d5:91:5e:fc:91:41:fc:d8:d2:fd:
87:1f:3b:0d:94:e8:52:68:7c:eb:33:22:e4:35:21:12:f9:c1:
2b:44:a8:bb:cc:ed:0a:dc:64:8f:94:41:a8:f1:e7:07:22:cf:
7b:2a:8a:e0:56:dd:58:8b:65:45:19:d7:52:e8:89:95:d3:b1:
7f:66:c0:11:db:f5:a3:e0:ff:0f:c3:e9:02:36:6d:ea:2e:82:
01:1a:af:06:e3:36:82:8f:8a:83:10:96:07:b6:74:78:78:c1:
4d:00:1f:af:11:c3:3f:1a:77:69:ac:ea:89:8e:65:a9:eb:22:
ba:84:13:a2:ca:bb:52:53:7a:c8:78:86:4a:66:c3:7a:fc:f5:
ef:17:34:d7:30:29:e7:14:6d:7e:08:8f:58:92:03:a7:65:0c:
8e:af:27:ab:97:a8:87:d0:2c:3a:19:ff:3d:29:b0:23:50:10:
86:c3:e8:7e:63:56:6a:4f:9e:a1:82:f5:8f:82:0e:65:dc:52:
e7:d8:eb:09:de:36:59:73:b4:d6:f9:40:0f:14:0f:0f:4e:db:
38:eb:48:50:90:2c:f5:20:68:7e:5d:d4:5e:2b:35:1b:f2:e8:
da:c2:7e:5e:1b:2e:df:ed:d3:b5:15:9a:66:47:a3:8b:30:2c:
70:e8:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:33 2025 by rpki-client