Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
File: AS215617.roa (raw, json)
Hash identifier: KE8CM1vRj2Ow2dfMaIVRgOiVnr4Ok+jU8pbAXPjGMCQ=
Subject key identifier: ED:F2:00:DC:53:A5:99:2D:06:15:38:F1:D6:DD:FE:3B:5C:1D:FE:BA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 572FDCBB90350E88BDE8034F23630F92792A6078
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
Signing time: Fri 26 Jun 2026 08:08:48 +0000
ROA not before: Fri 26 Jun 2026 08:03:48 +0000
ROA not after: Fri 25 Jun 2027 08:08:48 +0000
asID: 215617
IP address blocks: 2a0f:85c1:357::/48 maxlen: 48
2a0f:85c1:363::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:2f:dc:bb:90:35:0e:88:bd:e8:03:4f:23:63:0f:92:79:2a:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:48 2026 GMT
Not After : Jun 25 08:08:48 2027 GMT
Subject: CN=EDF200DC53A5992D061538F1D6DDFE3B5C1DFEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:7c:27:25:a2:79:ce:49:49:0f:12:4c:36:
87:2c:d3:e0:84:36:a6:60:fc:ef:c6:cc:50:f5:b4:
f1:24:cf:97:bf:90:17:de:2a:07:b0:97:b4:6d:4c:
fe:d2:32:a4:3b:4c:8a:f8:7b:d1:23:5b:25:5c:de:
b8:06:0b:30:f8:55:ca:39:e7:fe:cc:6b:6a:b5:9b:
d2:9c:e9:cc:4b:0f:2f:7d:1d:73:a5:a1:38:16:da:
be:62:d8:45:64:d3:dd:05:90:43:83:d6:8c:ad:3a:
9c:9d:c5:ca:0d:fd:6d:7d:2e:e7:17:86:de:d0:1a:
15:94:23:98:6a:18:d0:2f:0e:c0:40:4c:bb:ff:c9:
d9:83:10:30:a8:50:83:fd:4a:d5:9a:e1:04:8f:b3:
ea:86:fb:13:38:03:81:c5:f8:ef:d9:6c:f5:07:41:
2f:21:32:d6:0a:64:29:cb:fe:a6:f6:dc:c1:40:95:
30:2b:3f:90:7b:fb:dc:67:2c:e4:8c:fa:0a:56:a6:
10:f1:80:d4:b8:4d:9f:4e:e9:7a:cb:ec:3c:82:44:
fc:21:4c:f5:4f:94:2d:d9:b1:75:f9:b4:3a:bc:c8:
ce:92:41:ed:5c:37:20:a7:fb:5e:10:56:5f:b8:d6:
96:b5:a6:e9:93:ae:15:f2:d2:42:01:b5:85:c8:37:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F2:00:DC:53:A5:99:2D:06:15:38:F1:D6:DD:FE:3B:5C:1D:FE:BA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:357::/48
2a0f:85c1:363::/48
Signature Algorithm: sha256WithRSAEncryption
c9:11:dc:1a:16:a7:d1:a3:fd:ed:9d:df:89:f8:39:c9:1b:7b:
b3:4a:62:5f:50:42:e9:8f:a9:77:c7:de:8e:65:52:24:f0:5c:
69:25:73:71:af:c4:bc:8c:4a:3e:a6:0a:b7:a8:25:16:0d:72:
09:b5:3f:a6:24:34:93:48:87:ce:0a:3c:52:bb:5f:75:dc:1d:
22:db:dc:e3:3e:8b:72:09:7a:e9:c4:6c:cb:65:42:34:18:a1:
4e:52:4a:44:e9:c2:4a:d1:53:86:52:8b:27:59:16:4e:11:25:
7e:c0:b7:4d:9a:24:fd:95:d7:19:fd:f8:09:0f:fd:ab:97:de:
c7:81:ac:18:a1:58:d6:35:58:6a:94:71:c7:15:ac:a6:a8:91:
5e:44:12:b0:3f:d6:a1:22:83:ea:d6:af:ab:e9:43:d4:c9:b0:
8f:68:da:bf:cf:91:19:79:b6:cf:45:5e:40:f0:dc:cf:d5:35:
8c:c2:a8:bc:be:1a:85:52:b9:c3:9d:f2:be:8c:cd:28:55:61:
8d:ee:e3:ce:46:f3:98:eb:f5:4a:0c:f4:3f:ed:9c:f9:d3:ad:
14:49:1b:4b:fb:ba:27:af:db:55:28:62:f1:d2:2d:70:f5:13:
99:76:b3:b5:6e:38:81:ac:90:10:5e:76:f5:e9:70:f6:65:49:
af:97:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:58 2026 by rpki-client