Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215899.roa
File: AS215899.roa (raw, json)
Hash identifier: LJHh2nAv3SsOU2EsTW0T+DLyGcV/Ux4f7wxgtsaY3kc=
Subject key identifier: 89:F3:58:36:17:D1:DF:FE:7D:1A:EA:AE:E7:D5:F8:81:FF:90:6D:D4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4735B0AC80C8B5C894A45F42E8692F8F50D93E18
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215899.roa
Signing time: Fri 25 Jul 2025 08:07:36 +0000
ROA not before: Fri 25 Jul 2025 08:02:36 +0000
ROA not after: Fri 24 Jul 2026 08:07:36 +0000
asID: 215899
IP address blocks: 2a0f:85c1:334::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:35:b0:ac:80:c8:b5:c8:94:a4:5f:42:e8:69:2f:8f:50:d9:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:36 2025 GMT
Not After : Jul 24 08:07:36 2026 GMT
Subject: CN=89F3583617D1DFFE7D1AEAAEE7D5F881FF906DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:42:3f:29:41:8e:10:d3:1c:4c:7b:89:56:
fa:99:0b:27:bd:06:6f:b4:fe:05:c8:d4:00:04:e0:
60:53:01:64:ea:ee:d9:58:6a:70:b6:95:25:94:c7:
25:da:ba:52:e5:80:fa:18:77:fe:51:51:73:2f:bf:
d0:81:bd:41:d5:6b:6a:50:f3:d3:c1:c6:de:6c:b9:
62:7f:66:a0:29:81:0d:bc:b6:b1:1e:b3:31:6f:e0:
81:03:94:f8:e5:e2:69:ec:34:d6:9b:87:25:13:ad:
84:84:9e:4d:e0:70:11:b7:e8:c6:fd:25:42:bd:64:
ae:b2:ab:ea:c0:07:eb:a6:45:5a:eb:26:85:47:9e:
92:a6:ce:7a:77:90:4c:ff:52:94:e3:4c:70:1a:12:
35:38:71:9e:cd:87:53:8d:d4:e9:a6:12:44:98:3a:
ec:ac:06:1f:5a:c3:d7:48:af:cb:26:73:fc:79:02:
3e:9a:53:1a:c3:ac:b2:f8:67:1f:8d:2a:9d:52:50:
35:32:0b:6b:d3:01:ce:85:41:9a:b2:49:3e:b2:24:
79:10:4b:ee:f1:11:ac:6b:64:96:cc:26:01:41:b0:
0d:1c:d1:ab:00:20:b8:01:b5:b8:84:19:e9:a9:ac:
b8:6a:6c:8c:df:9d:21:f7:8f:0f:bb:f3:ef:c3:fe:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:58:36:17:D1:DF:FE:7D:1A:EA:AE:E7:D5:F8:81:FF:90:6D:D4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:334::/48
Signature Algorithm: sha256WithRSAEncryption
7d:8d:dc:91:03:60:d5:32:f3:0d:69:41:02:21:84:75:47:f9:
da:90:ed:48:49:ae:a4:4d:32:73:db:77:a1:9a:5e:40:53:7a:
bc:46:95:d8:5c:fd:b2:88:0b:1a:26:d7:42:5b:dd:e1:68:f3:
60:47:74:73:83:22:60:66:10:36:90:95:48:7a:3f:7e:85:e7:
24:38:5a:9a:6e:bd:7d:73:52:a0:2c:4f:e4:b5:05:27:a5:bb:
a8:f9:67:bb:9d:61:18:f7:10:3d:78:3e:eb:a5:69:f1:75:08:
f3:4e:3f:a0:01:ae:b1:2a:3e:e1:6d:b4:ef:0b:06:7b:f0:22:
52:ad:d0:50:b3:34:cb:d4:dd:ed:12:05:50:ca:e0:bd:e6:77:
b4:43:93:32:d6:ae:32:51:ce:42:f1:2d:38:04:71:10:ee:fa:
0d:7c:a4:0e:1b:6f:4b:a5:b3:19:68:2d:7b:cc:6d:af:c8:0d:
69:7b:de:7f:c6:f3:43:27:b0:59:a3:5e:a4:b2:ce:1a:06:23:
66:f3:9a:39:95:c2:a7:7d:39:0b:4b:7d:ae:4f:23:69:74:33:
f0:39:f0:97:c8:41:08:3f:9a:c5:b8:88:41:31:54:bb:c4:f8:
01:78:47:f0:da:55:54:84:7b:a7:79:51:30:82:c1:13:44:53:
62:cf:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:06 2025 by rpki-client