Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
File: AS215522.roa (raw, json)
Hash identifier: DbkngVS09kSwGJkDqEwI5P7CBxyDQYy4FydrU02cmZc=
Subject key identifier: 70:D6:E4:53:8D:FA:20:A9:CF:37:85:7D:BB:76:BF:83:08:12:D8:8B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4ADE05582971299717EA660BD503EBE721D3749D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 215522
IP address blocks: 2a0f:85c1:36c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:de:05:58:29:71:29:97:17:ea:66:0b:d5:03:eb:e7:21:d3:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=70D6E4538DFA20A9CF37857DBB76BF830812D88B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:e9:1e:62:7a:a8:45:76:9b:87:d9:97:f2:
b9:24:cd:73:a5:48:c2:31:e4:6e:4b:bf:42:d6:4e:
b8:3a:6b:3c:4b:8d:43:fe:bf:e2:91:e0:29:cb:ea:
1f:80:5b:81:74:42:1e:c9:81:21:cd:1a:1d:0a:a2:
32:ca:17:4d:83:4c:cb:c0:ee:7d:3a:35:64:57:cb:
c4:27:5a:ae:60:2f:52:29:f1:6d:5f:7b:14:e8:8f:
5a:64:ad:ee:e6:ec:67:84:b5:36:40:28:1b:a9:d0:
a0:2e:9e:f0:6d:d1:e9:b1:91:d4:4f:53:a5:82:71:
d5:32:4b:b7:dd:3e:bb:3c:51:80:bd:19:b8:9d:e9:
c8:3a:d5:0c:c0:ea:c7:97:c9:37:bf:fc:55:34:b2:
56:e2:c9:02:80:ab:1a:ee:43:a1:4f:60:79:fb:2f:
67:72:35:cb:43:65:77:d5:c8:8a:9a:e3:e9:1a:fb:
6f:6f:05:8f:91:b0:14:71:87:03:49:c4:ee:7a:63:
5d:a1:47:bd:e3:25:4b:08:ed:28:0f:07:6b:0b:fa:
8c:e5:3f:14:f2:fd:5d:c0:0e:ea:23:0b:6f:da:3a:
7b:07:17:12:2a:ce:ad:c5:cb:3a:61:e8:34:23:e8:
0c:8a:95:3a:0b:35:95:e9:bd:0b:78:4c:57:ed:a0:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:E4:53:8D:FA:20:A9:CF:37:85:7D:BB:76:BF:83:08:12:D8:8B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36c::/48
Signature Algorithm: sha256WithRSAEncryption
5d:78:f4:80:fb:e8:ab:68:91:c0:d4:ff:17:b6:2e:94:36:78:
8c:d3:7a:a1:27:7a:c4:bb:ed:3a:7a:4a:95:88:74:dc:84:02:
fe:cd:bc:6b:d2:97:17:ac:73:7f:90:74:d1:bd:a0:f6:2a:9c:
41:7e:f7:6f:47:4e:2a:12:c0:00:be:d7:bf:40:25:08:00:97:
39:97:b8:af:7a:ed:a2:5e:d9:f6:70:13:98:c7:17:07:95:5d:
cd:80:7d:43:80:29:d2:8e:18:c3:4d:b5:2d:88:78:7a:93:ca:
36:39:ed:0d:be:35:ef:2e:3f:b4:25:be:9c:bb:cb:02:a5:d7:
fc:e6:19:19:64:0d:7f:d5:36:2c:3b:a4:48:a9:48:c1:20:2c:
67:f3:40:cf:14:d8:bf:c1:18:19:72:52:37:7e:76:d7:32:a0:
63:a2:f1:8c:8d:63:f0:d1:4c:60:78:39:d8:71:aa:f2:bb:b6:
75:a8:62:cd:bd:8e:d5:f4:17:54:46:ff:b7:96:e3:a3:37:a0:
be:a3:af:94:14:74:77:f0:8b:46:3a:92:d7:4b:73:a5:64:a5:
43:48:11:8a:c7:9c:69:13:09:e5:24:4c:a3:6f:e8:fc:1d:87:
23:bd:4b:bc:f8:50:7d:48:f8:56:ba:6f:a7:a2:53:15:20:8a:
1d:95:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:39 2025 by rpki-client