Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215659.roa
File: AS215659.roa (raw, json)
Hash identifier: 0yQWgiyicZGCrSp4zrv3UxNPVXlH69U5YQCEc+F4Hkc=
Subject key identifier: 79:F3:C5:85:D2:A1:B6:B8:07:CD:85:59:8D:D3:21:CE:7D:BC:9B:F0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 414D671CB10EB1B2F65FA1B0D2A2710DF0FE3D6D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215659.roa
Signing time: Wed 17 Sep 2025 03:07:53 +0000
ROA not before: Wed 17 Sep 2025 03:02:53 +0000
ROA not after: Wed 16 Sep 2026 03:07:53 +0000
asID: 215659
IP address blocks: 2a0f:85c1:356::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4d:67:1c:b1:0e:b1:b2:f6:5f:a1:b0:d2:a2:71:0d:f0:fe:3d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 03:02:53 2025 GMT
Not After : Sep 16 03:07:53 2026 GMT
Subject: CN=79F3C585D2A1B6B807CD85598DD321CE7DBC9BF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:e6:ac:3e:53:58:e3:e8:a4:97:5f:13:ec:
da:2b:cd:e5:75:f1:cc:92:8c:66:b1:bd:25:3d:83:
92:87:61:d3:2e:05:62:02:b4:5d:ed:be:70:4b:ac:
95:9e:8f:03:01:01:5d:2d:21:5d:bb:09:f4:45:49:
6b:04:38:72:86:ae:c2:27:99:ce:6e:dc:3b:6c:8d:
9c:b5:33:8f:b1:f9:95:73:62:f6:7f:93:df:1d:45:
f0:83:35:64:6c:a2:c7:11:ae:8c:b5:28:25:18:ce:
f8:d0:b6:d6:89:6b:e6:51:e9:7c:3e:4f:1d:14:11:
c9:16:11:39:ef:8f:52:7f:b3:c2:72:c4:92:8d:a5:
e0:54:25:74:c7:26:98:f3:c0:bd:4d:37:f2:aa:33:
d4:eb:3a:48:3e:29:ae:9d:22:15:fd:c0:47:7c:8f:
68:eb:d6:fd:d2:45:d8:41:eb:53:4f:49:4f:95:d9:
7c:eb:20:e6:1f:4f:56:96:0e:e2:0b:e2:c3:10:2e:
34:9b:02:b7:b9:03:e5:8c:ad:33:bb:7d:87:6b:2c:
9f:1a:d5:07:e0:b9:a7:bc:a5:06:2b:12:67:58:90:
44:22:14:3c:da:4d:b9:25:e5:8f:30:db:15:0e:fe:
6f:d1:64:ed:88:7e:b1:e7:35:c6:10:b7:ba:de:68:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:C5:85:D2:A1:B6:B8:07:CD:85:59:8D:D3:21:CE:7D:BC:9B:F0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215659.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:356::/48
Signature Algorithm: sha256WithRSAEncryption
f0:57:45:15:f3:22:5d:a0:87:62:49:e8:2f:e0:61:0f:cb:06:
5a:6d:5f:90:dc:13:d3:bd:eb:83:7c:06:ea:94:f6:f5:41:35:
d7:ba:7d:b9:18:9f:88:4b:a2:c3:44:a5:ab:f5:76:e6:f9:91:
a5:51:dd:93:83:4a:78:c0:de:b1:e6:b4:59:f2:53:77:28:66:
a1:6f:77:60:9a:dd:36:4c:5e:6d:d2:de:03:41:f4:a7:81:98:
f1:b2:3b:00:bc:9e:94:c9:84:01:c7:6e:b7:b9:a2:89:88:78:
05:bf:1c:e7:59:e3:4b:60:0b:20:6e:1e:da:e1:44:82:39:00:
d6:1a:25:2b:1c:c0:49:ec:42:a1:20:e6:ae:f0:57:ae:19:e1:
7a:0a:6d:56:33:9f:1f:a8:a7:54:cd:5e:6b:93:43:b0:d7:6d:
51:6f:e2:5a:4d:e6:8c:84:d6:a5:da:20:37:c1:e3:ee:b6:26:
79:33:90:f1:0c:9b:ee:9a:66:5d:91:52:20:a6:6f:7f:7c:bb:
5a:5a:36:47:69:b3:57:3a:3f:66:95:66:27:6f:28:52:f2:fc:
09:30:37:dc:a3:12:ef:6a:7f:35:23:73:4d:f6:78:68:cb:7a:
cd:79:e6:41:d6:d4:3a:80:4c:16:c4:22:30:84:83:9d:9b:50:
be:54:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:14 2025 by rpki-client