Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
File: AS215849.roa (raw, json)
Hash identifier: e9usuv0WcrBzJ63dwb2uoMNe5AYc98OQl5Ib+zbkUvo=
Subject key identifier: 30:8A:FF:C6:CD:AF:E6:FB:C6:87:AF:35:BC:4E:D4:98:65:B4:C3:EA
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 344BC6A8F3A9152DECD65FB16FB66601FAEB3651
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
Signing time: Fri 08 May 2026 17:32:56 +0000
ROA not before: Fri 08 May 2026 17:27:56 +0000
ROA not after: Fri 07 May 2027 17:32:56 +0000
asID: 215849
IP address blocks: 2a14:7585:6000::/36 maxlen: 36
2a14:7587:e000::/36 maxlen: 36
2a14:7587:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4b:c6:a8:f3:a9:15:2d:ec:d6:5f:b1:6f:b6:66:01:fa:eb:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 8 17:27:56 2026 GMT
Not After : May 7 17:32:56 2027 GMT
Subject: CN=308AFFC6CDAFE6FBC687AF35BC4ED49865B4C3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:d6:23:95:88:c1:e9:85:e1:fa:05:40:ce:
08:d0:64:17:50:7e:1d:c7:89:9a:66:54:7b:00:bd:
33:1f:8a:e7:79:71:60:e1:1a:91:c3:bd:ed:44:2e:
64:9e:62:b3:6d:58:fa:44:9a:31:d5:00:89:8d:36:
a2:d0:35:c1:73:45:ca:c4:e1:ec:82:79:a0:ce:16:
21:5d:a9:e8:3d:80:c7:30:f4:62:4b:38:ce:0c:f8:
45:c2:94:5a:86:93:fd:5e:43:db:52:f3:37:46:1f:
5d:c7:27:c4:ac:7a:77:51:1c:a3:c7:f3:32:2a:9f:
13:94:63:82:e6:cb:b5:92:5a:0b:3f:2b:22:11:27:
8a:63:75:6a:25:e1:67:6d:9d:d6:52:90:6a:84:b0:
45:e6:2c:95:05:30:4e:86:5e:e9:24:53:cf:d1:1f:
e5:ac:ff:b6:ef:4e:89:f9:0b:3f:64:59:e2:a3:b6:
bf:8e:72:b3:70:5b:7f:8f:39:89:52:71:fb:e4:7b:
3b:0c:66:02:17:80:8a:ec:de:24:1d:c3:12:97:bc:
6f:74:9b:41:c8:9f:45:4d:9a:fd:0e:9f:66:6b:b2:
88:30:77:a3:e0:18:c9:9e:de:e0:9e:c3:7c:f8:30:
bb:60:f4:19:91:d8:c3:eb:28:2d:62:22:e8:87:cb:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8A:FF:C6:CD:AF:E6:FB:C6:87:AF:35:BC:4E:D4:98:65:B4:C3:EA
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585:6000::/36
2a14:7587:e000::/35
Signature Algorithm: sha256WithRSAEncryption
00:a0:13:c7:18:c3:65:64:18:84:4c:f2:9c:90:11:0e:b5:d0:
a9:39:eb:08:36:1f:67:d6:bf:02:84:97:aa:16:3d:7f:10:0e:
f4:e5:4d:d8:0e:f2:e7:9d:18:49:2a:44:72:9e:e8:74:3e:a4:
0d:8a:6a:e0:b3:ee:4b:b1:3c:05:28:d8:4a:bd:bd:cc:63:df:
44:6b:44:b8:8c:24:9b:55:1f:f3:2e:69:26:ba:7a:a6:74:f6:
51:d4:c5:d3:bd:cd:fe:50:8c:aa:20:fc:c0:f3:7f:f6:b5:83:
a0:22:df:4b:6d:67:2f:ca:db:58:f1:af:1d:35:b7:fe:af:53:
92:82:a9:eb:ff:e7:79:19:50:5f:40:ca:37:23:be:63:51:75:
6d:cd:af:76:9d:43:15:bb:fa:37:e5:a4:a5:6d:66:ca:f9:e3:
f1:d0:73:a1:1c:a3:0d:94:94:67:de:ad:55:c3:db:5b:ca:4a:
3b:66:91:17:34:54:f3:ed:df:97:59:90:e7:87:63:34:66:c6:
1e:c3:3f:c3:d2:f3:8b:4f:9a:c6:9d:74:0e:07:12:1a:4a:4f:
14:4c:fd:82:f4:6d:72:01:af:88:67:64:40:1e:f4:2e:94:ea:
1a:fa:74:0a:be:43:41:63:1f:f8:1d:f2:da:29:2a:51:e9:31:
a8:b6:ea:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:51 2026 by rpki-client