Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215887.roa
File: AS215887.roa (raw, json)
Hash identifier: IWsJn1Sh6q93WRHD9Skn/8c/8iaPSwVCMVn9Y5lTVaU=
Subject key identifier: 5D:F5:B1:60:BD:EA:59:D2:24:B5:94:30:AB:9F:95:1A:A2:AF:8D:0B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 552C586A0591928B79ED4A5F415E1B2EC3A88081
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215887.roa
Signing time: Tue 28 Apr 2026 16:03:06 +0000
ROA not before: Tue 28 Apr 2026 15:58:06 +0000
ROA not after: Tue 27 Apr 2027 16:03:06 +0000
asID: 215887
IP address blocks: 2a0f:85c1:332::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:2c:58:6a:05:91:92:8b:79:ed:4a:5f:41:5e:1b:2e:c3:a8:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 28 15:58:06 2026 GMT
Not After : Apr 27 16:03:06 2027 GMT
Subject: CN=5DF5B160BDEA59D224B59430AB9F951AA2AF8D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:62:28:fa:04:d4:e5:5c:1b:5d:d1:be:b4:
61:92:e6:5d:d5:2e:e1:2a:ee:15:7e:3a:89:10:9d:
e2:4c:23:79:7b:b2:01:9f:01:89:27:4d:8d:c9:bb:
e5:5b:db:cf:52:8a:8d:00:38:91:dc:7a:2e:3f:f1:
43:54:b7:ef:d3:cd:e4:e1:82:07:38:0c:9d:79:7b:
62:3c:4b:1f:c4:24:7b:a0:84:5e:5c:20:b7:df:d6:
bf:64:f7:9f:27:ca:35:16:05:5a:30:1e:b6:2d:83:
d9:61:65:34:d9:4e:b0:a0:e4:bc:e9:06:35:1a:bb:
b1:f5:39:d8:9f:7d:3b:53:ae:f7:56:51:b7:f0:39:
24:88:6a:58:66:94:fb:75:14:c9:0e:8b:17:7d:61:
f1:1f:df:fd:68:12:0f:2d:77:58:94:94:8d:9f:91:
89:00:4b:e2:e2:64:54:34:d4:7f:de:a0:70:41:63:
ed:14:ef:b2:c0:35:b5:53:fc:53:c1:cc:84:92:83:
26:97:3c:60:b3:da:a1:35:9f:e9:c6:c7:2d:53:92:
fc:f3:ae:ac:5e:fe:5d:92:77:60:f8:3d:10:5b:ef:
59:5c:92:48:3e:a8:46:ee:33:39:15:9e:14:a0:d4:
13:e7:d5:42:0e:7b:12:f1:80:1b:1b:4c:39:43:0c:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:B1:60:BD:EA:59:D2:24:B5:94:30:AB:9F:95:1A:A2:AF:8D:0B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:332::/48
Signature Algorithm: sha256WithRSAEncryption
20:2e:1f:4c:c9:d0:86:15:95:24:22:b7:1c:7f:68:bd:35:8e:
e1:84:d6:83:57:45:83:98:0d:3c:45:e5:a9:79:a4:62:f6:50:
bc:de:37:bd:1e:8f:be:85:1f:58:44:07:99:98:0f:31:66:ac:
55:5b:2b:4b:1f:b6:80:8d:37:ae:c6:14:9b:2d:b3:82:cf:d9:
6b:1c:c2:35:a0:45:fa:92:c6:0a:04:61:16:32:80:ba:22:7a:
f1:ba:85:0e:f7:1c:74:fd:05:7f:3b:27:5f:4b:04:eb:c2:df:
47:71:40:7e:f2:ef:dc:7b:43:a6:49:57:08:69:e4:9c:1e:04:
57:89:55:a9:3a:c2:ad:be:61:a5:a6:ff:59:13:06:b9:3d:37:
22:41:cb:76:05:57:c9:cc:85:15:6d:e7:50:76:0e:b3:2c:df:
83:64:ee:13:89:ca:cf:0b:b3:1a:7f:b2:67:57:52:df:f1:ad:
06:5a:cd:78:0f:0f:95:b9:dc:47:1b:1d:06:0e:c0:47:a9:b3:
50:7e:b3:70:57:91:7e:53:e5:8c:46:57:1c:03:39:76:2f:7b:
ae:b1:26:13:e6:56:6f:17:61:20:4b:53:74:1a:af:63:5d:dd:
2a:25:0b:50:b0:94:9c:ac:5a:a8:61:41:de:2e:b0:b6:0f:44:
1e:77:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:33 2026 by rpki-client