Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215238.roa
File: AS215238.roa (raw, json)
Hash identifier: WzXsjHfZa3KvTVt0ulPqgR2nSjJMPUB6m3EoFMriVxo=
Subject key identifier: 80:9B:5D:E1:92:AC:25:58:14:E2:E5:ED:FD:B8:AC:C6:8C:72:83:3F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7F30435B29EAB3AF6C505E2F33470B715C787F07
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215238.roa
Signing time: Tue 16 Sep 2025 20:28:31 +0000
ROA not before: Tue 16 Sep 2025 20:23:31 +0000
ROA not after: Tue 15 Sep 2026 20:28:31 +0000
asID: 215238
IP address blocks: 2a0f:85c1:b77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:30:43:5b:29:ea:b3:af:6c:50:5e:2f:33:47:0b:71:5c:78:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 16 20:23:31 2025 GMT
Not After : Sep 15 20:28:31 2026 GMT
Subject: CN=809B5DE192AC255814E2E5EDFDB8ACC68C72833F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:06:49:ad:7f:6e:7f:c3:c2:3f:3b:ee:da:
d5:fa:fa:e2:e9:0a:5f:ac:7f:53:49:5e:ac:13:90:
2a:db:5c:9d:1d:bc:44:c5:1b:6f:75:73:a2:dc:28:
6f:4e:26:79:75:ad:af:80:ba:c9:11:4a:90:ac:47:
fa:62:3d:3e:2e:d0:96:70:be:7c:87:8d:1c:e0:26:
6a:89:52:36:27:04:c7:e9:32:07:33:2b:8b:38:b6:
50:8d:87:24:94:f9:cc:c9:36:5b:d0:3a:f7:9e:b7:
c3:85:a7:95:1e:86:04:33:9c:31:51:7a:b2:34:96:
72:6f:1a:1d:ad:13:00:35:f8:0b:16:d0:c7:75:7e:
36:7f:bc:1c:b9:f9:d7:09:72:5e:49:17:25:42:fb:
b1:57:ba:c0:83:b3:9a:aa:ba:54:7f:a7:8a:fc:06:
34:5a:de:85:6e:1f:52:a0:a9:38:9a:ab:da:7e:fb:
1b:df:99:fd:42:83:d4:f1:85:d2:ad:4b:cc:0e:e7:
42:f0:cb:9a:e5:46:3e:41:bb:f9:06:23:e2:7d:0b:
a2:50:5a:8c:ed:ba:e9:36:58:67:ab:1e:93:d4:97:
90:d4:28:92:a3:47:9e:f0:d3:41:75:2d:5a:da:52:
2e:0e:9f:18:c3:33:58:a8:8b:bc:86:08:12:a8:0f:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9B:5D:E1:92:AC:25:58:14:E2:E5:ED:FD:B8:AC:C6:8C:72:83:3F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b77::/48
Signature Algorithm: sha256WithRSAEncryption
46:fd:b2:82:df:17:aa:75:2a:2f:c8:9b:e1:72:39:5b:ab:a6:
34:bf:05:58:85:a4:e3:bc:46:07:14:f7:fd:72:b8:31:2f:85:
5e:e8:04:d1:c5:26:1d:6c:ff:04:76:f0:4c:d4:3c:6d:5e:cb:
c3:84:e3:c1:bb:11:77:5a:fb:d7:fb:00:73:68:62:00:77:00:
8d:7b:32:4f:24:b6:7c:d2:47:46:a3:1c:0d:7e:3f:d1:12:5b:
67:4e:01:10:3b:cc:c5:bf:44:9b:6b:62:be:82:e9:e6:a0:30:
ba:6b:7b:f7:b3:01:ce:3a:d8:8b:52:53:eb:d1:9b:16:14:b2:
34:75:8e:f5:51:9b:a4:e5:04:83:cd:cc:c6:80:db:fd:79:4f:
40:83:6c:02:98:8f:9b:9d:52:71:df:c2:f0:ea:e0:02:68:e3:
e4:67:99:7e:f4:c4:4b:0d:ae:ea:2a:b5:82:3f:eb:b3:51:15:
d8:bb:a3:30:6d:85:92:f6:ce:b0:2a:d0:d5:c3:76:5b:02:54:
75:79:c0:bf:54:81:4d:24:67:be:0d:95:03:a0:d2:79:de:05:
67:95:8c:01:f3:f9:ee:7d:c1:f1:b6:99:10:84:fc:f3:32:25:
32:c1:8b:05:af:a6:69:ea:26:30:b6:f5:3a:10:48:e4:64:e6:
5b:5d:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:16 2025 by rpki-client