Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215526.roa
File: AS215526.roa (raw, json)
Hash identifier: Y82B5k36CfomsMW5LJpBRz4eltrsFaUIRKi7iu9aHx8=
Subject key identifier: 38:95:0C:40:D8:48:42:35:7D:E3:D4:07:E1:E0:EF:46:DB:A4:34:AB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0E1FBDD13B5CF6FEDFB496DEFFAE51A079357214
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215526.roa
Signing time: Tue 19 Aug 2025 05:07:50 +0000
ROA not before: Tue 19 Aug 2025 05:02:50 +0000
ROA not after: Tue 18 Aug 2026 05:07:50 +0000
asID: 215526
IP address blocks: 2a0f:85c1:367::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1f:bd:d1:3b:5c:f6:fe:df:b4:96:de:ff:ae:51:a0:79:35:72:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:50 2025 GMT
Not After : Aug 18 05:07:50 2026 GMT
Subject: CN=38950C40D84842357DE3D407E1E0EF46DBA434AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:7f:9a:ce:b3:ec:46:13:e0:03:65:45:42:
0f:ad:78:48:ad:d1:dc:53:6c:ca:78:31:c8:60:d3:
63:d1:29:0f:83:19:a4:6d:8a:10:83:53:fa:36:9b:
af:64:6f:f4:f4:65:17:f4:50:06:b8:99:80:5b:29:
c2:d6:d3:84:09:e5:d9:b1:34:32:63:9d:b6:16:95:
c8:9e:74:ec:9e:84:bf:6f:fd:ab:23:79:2f:d8:f4:
0b:49:3b:fd:37:ec:43:cd:5b:7f:5e:f6:15:bf:2f:
45:5f:ee:67:a0:aa:cd:2c:39:65:d6:6a:dc:ea:d7:
07:bc:30:0c:a9:4e:18:71:b2:76:a5:22:6a:bc:b2:
63:a8:61:f9:f5:d4:20:3d:de:b3:c3:6e:8d:69:68:
ee:01:4a:e2:ad:14:fd:4e:fe:30:69:9c:80:4f:b9:
22:9b:21:6c:c7:8a:68:51:1a:67:c0:0f:03:77:5b:
1b:8a:3c:bb:41:a8:ea:5f:9e:4f:e7:a7:2a:6e:ac:
6d:5e:2b:18:fc:9a:c3:75:7e:1d:73:d2:96:99:2f:
da:d1:55:a2:4d:f8:40:48:d4:ef:01:76:67:cc:15:
a0:66:08:44:c3:b9:53:ee:50:10:ae:4e:ae:ac:30:
81:0a:f5:a8:17:24:f5:71:5f:42:36:06:ab:62:a6:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:0C:40:D8:48:42:35:7D:E3:D4:07:E1:E0:EF:46:DB:A4:34:AB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:367::/48
Signature Algorithm: sha256WithRSAEncryption
d9:42:cf:53:89:e7:b4:0b:2e:61:e8:02:77:c3:81:9c:0e:d6:
c2:8f:e7:2b:88:5d:2b:07:ef:2c:34:68:af:d6:fb:3f:5d:bd:
b4:2c:08:c0:5c:bb:dd:09:48:ef:47:fd:61:23:96:02:95:cc:
9a:4c:70:b9:b7:ca:2e:1d:9f:75:62:fd:9b:69:be:77:ff:c7:
20:b7:cd:22:b1:1b:5b:eb:5f:c2:70:6e:f7:f8:af:c0:15:40:
76:1a:e4:0d:fd:6e:58:37:b5:ed:ae:8b:ef:9d:3c:ff:ab:75:
5f:4e:28:7b:fc:03:aa:90:6d:9d:57:30:e4:52:15:5a:65:fa:
66:32:67:30:ff:ba:d4:fe:dc:5b:a8:29:62:af:ee:8f:71:55:
2d:b2:00:4f:91:e7:6f:02:0f:bf:8a:9d:9e:18:05:db:fd:99:
be:00:3e:79:7a:bc:10:2b:f5:01:6a:26:f7:23:40:9d:bb:c8:
72:39:d9:9c:7a:f1:7b:86:c5:b1:a4:c9:7e:1b:28:03:c7:43:
4c:1d:8e:52:82:a1:b8:04:9a:9d:55:a5:9e:e4:60:0a:dc:88:
5e:1d:a1:dd:c5:4a:a1:e8:54:9d:03:c9:0c:a7:fe:55:4b:ff:
11:52:a0:b8:7d:6d:2a:e6:a2:83:8a:cc:2f:04:4d:f3:e5:7d:
36:8a:27:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUDh+90Ttc9v7ftJbe/65RoHk1chQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MTkwNTAyNTBaFw0yNjA4MTgwNTA3NTBaMDMxMTAvBgNV
BAMTKDM4OTUwQzQwRDg0ODQyMzU3REUzRDQwN0UxRTBFRjQ2REJBNDM0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj1X+azrPsRhPgA2VFQg+teEit
0dxTbMp4Mchg02PRKQ+DGaRtihCDU/o2m69kb/T0ZRf0UAa4mYBbKcLW04QJ5dmx
NDJjnbYWlciedOyehL9v/asjeS/Y9AtJO/037EPNW39e9hW/L0Vf7megqs0sOWXW
atzq1we8MAypThhxsnalImq8smOoYfn11CA93rPDbo1paO4BSuKtFP1O/jBpnIBP
uSKbIWzHimhRGmfADwN3WxuKPLtBqOpfnk/npypurG1eKxj8msN1fh1z0paZL9rR
VaJN+EBI1O8BdmfMFaBmCETDuVPuUBCuTq6sMIEK9agXJPVxX0I2BqtipgI5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUOJUMQNhIQjV949QH4eDvRtukNKswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1NTI2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQNnMA0GCSqGSIb3DQEBCwUAA4IBAQDZQs9Tiee0Cy5h6AJ3w4GcDtbCj+criF0r
B+8sNGiv1vs/Xb20LAjAXLvdCUjvR/1hI5YClcyaTHC5t8ouHZ91Yv2bab53/8cg
t80isRtb61/CcG73+K/AFUB2GuQN/W5YN7XtrovvnTz/q3VfTih7/AOqkG2dVzDk
UhVaZfpmMmcw/7rU/txbqClir+6PcVUtsgBPkedvAg+/ip2eGAXb/Zm+AD55erwQ
K/UBaib3I0Cdu8hyOdmcevF7hsWxpMl+GygDx0NMHY5SgqG4BJqdVaWe5GAK3Ihe
HaHdxUqh6FSdA8kMp/5VS/8RUqC4fW0q5qKDiswvBE3z5X02iidH
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:06 2025 by rpki-client