Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215666.roa
File: AS215666.roa (raw, json)
Hash identifier: Mi5+cvru8STu+vlv1i2nkzugI/A0fRRy045yACDSJl0=
Subject key identifier: 23:DF:6F:2D:13:80:BB:6B:DA:40:32:34:E7:95:A0:FC:6E:D4:F5:17
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1EFA713C86569B609F023CC7C2859F8E1F302CF8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215666.roa
Signing time: Tue 14 Jul 2026 20:00:12 +0000
ROA not before: Tue 14 Jul 2026 19:55:12 +0000
ROA not after: Tue 13 Jul 2027 20:00:12 +0000
asID: 215666
IP address blocks: 2a14:7581:9e00::/40 maxlen: 40
2a14:7581:e000::/36 maxlen: 48
2a14:7583:ee00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fa:71:3c:86:56:9b:60:9f:02:3c:c7:c2:85:9f:8e:1f:30:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 14 19:55:12 2026 GMT
Not After : Jul 13 20:00:12 2027 GMT
Subject: CN=23DF6F2D1380BB6BDA403234E795A0FC6ED4F517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:34:f8:40:0c:bd:63:91:68:50:af:fe:74:
02:f4:54:44:cf:86:4b:f1:75:69:1f:b2:ef:1c:a2:
47:de:61:6d:61:45:c6:b0:d9:ef:58:08:c0:4b:fe:
0b:14:19:89:10:8d:7d:dd:6c:53:37:02:bf:86:64:
9f:49:72:74:3f:bc:6a:0c:c7:f3:6d:1a:f4:bf:05:
49:46:b2:6c:ba:a3:7a:54:6b:4b:f5:8c:8c:bf:21:
32:9e:b9:2d:1e:a6:5b:6f:aa:07:58:48:64:29:09:
ce:02:7f:73:62:b4:85:81:91:93:da:2c:d8:84:d9:
6b:c0:27:51:1f:c4:4d:d7:8b:76:17:c8:eb:e9:45:
8e:7f:db:f8:19:c2:27:d7:88:e2:35:76:92:77:04:
95:c6:85:b0:73:1c:33:ff:f1:74:55:54:12:11:c8:
dc:7e:27:eb:7e:02:4a:47:c1:8b:1c:5e:04:a1:ab:
00:4a:5e:e1:0f:37:0b:5d:f5:59:59:83:5b:94:7b:
dc:60:70:9c:19:50:2e:35:df:7b:df:77:f7:7c:0c:
12:ad:8a:b0:d8:84:5d:22:f5:2c:d9:fa:0a:08:43:
39:bf:4f:97:a0:13:e0:f7:cb:0b:e4:7d:7a:3d:b2:
93:00:53:80:d8:9b:05:df:0d:ee:49:a0:0f:16:e9:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:6F:2D:13:80:BB:6B:DA:40:32:34:E7:95:A0:FC:6E:D4:F5:17
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9e00::/40
2a14:7581:e000::/36
2a14:7583:ee00::/40
Signature Algorithm: sha256WithRSAEncryption
91:44:50:a8:fe:bb:61:04:52:83:e0:d1:60:e9:b7:e6:aa:73:
df:fa:c1:4b:4f:c5:ea:57:e2:16:5c:fa:eb:46:e2:28:78:6d:
59:b8:c5:35:1d:24:92:8b:8b:69:a8:be:3a:92:00:2e:8e:96:
92:13:9e:5d:9e:80:f9:91:fe:a5:b5:b4:62:3a:6f:e1:f4:65:
2e:08:ac:df:3e:70:f2:e4:f7:70:dd:f4:b8:19:7d:55:cf:76:
d4:6b:20:f8:cd:6c:bf:68:33:a5:14:e8:bc:87:48:5f:fa:9d:
f9:17:05:45:c5:22:18:1c:6b:9d:43:c4:21:67:d4:24:95:85:
0b:5a:f0:c0:59:c0:70:47:db:36:58:47:31:7d:a6:38:af:c0:
19:15:8b:ad:a2:7b:ec:5a:7a:90:20:95:24:2a:9c:2e:fc:4a:
69:2b:40:c5:3c:87:1c:9a:6d:2e:d7:58:d2:b7:5f:d2:5e:4e:
05:75:7c:d3:86:79:39:47:72:5c:a1:39:53:e3:ac:d8:b0:fa:
14:d8:b1:3b:10:6b:a8:59:98:76:3d:ff:87:18:9c:04:eb:f3:
3b:6e:a3:5c:89:56:9b:a1:64:8b:74:7b:8c:be:5c:40:04:54:
01:c8:6b:7b:9a:02:89:8d:39:09:5c:20:b0:c0:30:f1:da:3d:
63:9c:29:9e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUHvpxPIZWm2CfAjzHwoWfjh8wLPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA3MTQxOTU1MTJaFw0yNzA3MTMyMDAwMTJaMDMxMTAvBgNV
BAMTKDIzREY2RjJEMTM4MEJCNkJEQTQwMzIzNEU3OTVBMEZDNkVENEY1MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZpzT4QAy9Y5FoUK/+dAL0VETP
hkvxdWkfsu8cokfeYW1hRcaw2e9YCMBL/gsUGYkQjX3dbFM3Ar+GZJ9JcnQ/vGoM
x/NtGvS/BUlGsmy6o3pUa0v1jIy/ITKeuS0epltvqgdYSGQpCc4Cf3NitIWBkZPa
LNiE2WvAJ1EfxE3Xi3YXyOvpRY5/2/gZwifXiOI1dpJ3BJXGhbBzHDP/8XRVVBIR
yNx+J+t+AkpHwYscXgShqwBKXuEPNwtd9VlZg1uUe9xgcJwZUC4133vfd/d8DBKt
irDYhF0i9SzZ+goIQzm/T5egE+D3ywvkfXo9spMAU4DYmwXfDe5JoA8W6Xw9AgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUI99vLROAu2vaQDI055Wg/G7U9RcwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1NjY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAKhR1
gZ4DBgQqFHWB4AMGACoUdYPuMA0GCSqGSIb3DQEBCwUAA4IBAQCRRFCo/rthBFKD
4NFg6bfmqnPf+sFLT8XqV+IWXPrrRuIoeG1ZuMU1HSSSi4tpqL46kgAujpaSE55d
noD5kf6ltbRiOm/h9GUuCKzfPnDy5Pdw3fS4GX1Vz3bUayD4zWy/aDOlFOi8h0hf
+p35FwVFxSIYHGudQ8QhZ9QklYULWvDAWcBwR9s2WEcxfaY4r8AZFYutonvsWnqQ
IJUkKpwu/EppK0DFPIccmm0u11jSt1/SXk4FdXzThnk5R3JcoTlT46zYsPoU2LE7
EGuoWZh2Pf+HGJwE6/M7bqNciVaboWSLdHuMvlxABFQByGt7mgKJjTkJXCCwwDDx
2j1jnCme
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:31 2026 by rpki-client