Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215993.roa
File: AS215993.roa (raw, json)
Hash identifier: Hls/EMlMkLOwPQhTlavDeMJCX/XbSQ/r8uMVpB4EkLU=
Subject key identifier: B2:EC:C7:B9:AF:C8:BB:68:0E:F5:3A:CD:90:C8:73:F1:F5:57:B2:EC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4CF2EF2C78A06211FCB84711809B5B093CBCB4C9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215993.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 215993
IP address blocks: 2a0f:85c1:298::/48 maxlen: 48
2a0f:85c1:393::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:ef:2c:78:a0:62:11:fc:b8:47:11:80:9b:5b:09:3c:bc:b4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=B2ECC7B9AFC8BB680EF53ACD90C873F1F557B2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:25:40:2a:38:d4:85:ff:9b:82:e6:de:64:
78:50:80:f8:cf:f0:f8:33:df:cc:09:36:cc:c1:a1:
f2:fa:7e:c0:6a:8c:b5:9c:7c:6b:4c:15:ea:62:ed:
fc:65:17:7c:8e:7a:2f:c7:3a:78:d8:60:23:11:d8:
22:35:c8:60:0c:82:95:2f:5e:e6:31:d9:62:ba:e1:
b5:c0:81:af:d2:82:2e:9b:f3:84:11:f8:29:10:d7:
70:c1:76:38:49:b3:33:02:3c:ab:66:40:93:a0:15:
e2:d9:d8:f3:44:98:f9:1e:b5:ad:93:02:df:cd:78:
13:1e:8f:c8:5f:4a:f7:45:25:c6:fe:dd:11:34:34:
66:bb:fc:48:95:8e:ea:72:7f:07:08:7f:cd:1a:1b:
7a:6f:77:47:15:47:38:51:de:5a:d7:c1:08:9c:65:
23:49:8a:1d:7e:e2:da:53:1a:59:e4:e0:bc:7d:9a:
a6:ab:e1:4a:04:b1:fc:c3:3f:5a:58:96:41:fe:64:
43:3d:d0:9b:ad:f7:82:ab:d8:5e:4a:76:7f:43:0c:
1d:af:18:f8:96:d6:53:96:6d:49:26:f4:35:cb:d3:
76:5e:da:24:9a:2b:c6:3a:1d:a0:f5:0e:c7:d6:6e:
70:5a:49:87:54:23:24:c0:6a:04:db:e7:9c:ef:bf:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:C7:B9:AF:C8:BB:68:0E:F5:3A:CD:90:C8:73:F1:F5:57:B2:EC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:298::/48
2a0f:85c1:393::/48
Signature Algorithm: sha256WithRSAEncryption
74:d1:83:67:03:e8:8e:c8:58:a7:80:ce:19:4d:12:65:21:6f:
bb:fd:87:da:b8:c5:de:fc:c6:fe:70:fa:fa:bf:24:05:3c:51:
4d:68:57:84:af:0a:be:f5:1a:81:ac:0b:fa:59:11:11:d5:70:
3d:1d:0f:15:40:a8:45:78:4b:1e:53:6b:a3:f0:8e:ac:b9:18:
2c:df:5d:39:ca:d3:12:74:4b:75:40:2e:8e:f1:42:05:95:6b:
bc:9a:01:7e:12:2f:b0:fe:31:34:31:e9:40:3c:f8:a2:29:12:
54:98:16:40:78:48:e5:7b:9f:a1:4a:e3:28:43:c0:cf:ed:c1:
d4:0c:5e:8e:ba:7f:c7:fd:8e:b3:df:f4:b1:fe:af:19:db:8e:
f2:ef:74:a2:9e:67:50:3c:90:80:64:39:fc:3f:9c:93:b4:76:
38:e9:2b:8e:1f:3e:46:27:7d:37:c5:02:f9:51:95:cf:93:f9:
98:86:92:15:4e:0b:af:39:e3:38:8e:71:fa:8e:d1:aa:f8:b3:
06:9e:49:a7:5c:97:34:29:ac:da:82:de:0e:cb:21:9e:f2:03:
33:cd:89:90:a8:f5:45:bf:8e:f6:90:f3:f8:74:15:41:3d:e6:
59:79:e5:fe:b8:8b:6b:77:87:8f:9b:e3:47:9a:29:96:a1:69:
59:03:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:29 2026 by rpki-client