Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: l9JaYj+esKAcYgMWD8OBZk/xektnJIyKEzNIpVR5ntI=
Subject key identifier: A1:24:52:28:C9:37:B6:EF:75:57:6B:21:C5:D9:D7:69:18:33:7D:E1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0824397EEDAD6A0B67AC0B3F9C48B69B2512E7B3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
Signing time: Fri 13 Nov 2026 17:01:46 +0000
ROA not before: Fri 13 Nov 2026 16:56:46 +0000
ROA not after: Fri 12 Nov 2027 17:01:46 +0000
asID: 215607
IP address blocks: 94.118.68.0/24 maxlen: 24
94.118.192.0/24 maxlen: 24
94.118.208.0/24 maxlen: 24
94.118.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:24:39:7e:ed:ad:6a:0b:67:ac:0b:3f:9c:48:b6:9b:25:12:e7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 13 16:56:46 2026 GMT
Not After : Nov 12 17:01:46 2027 GMT
Subject: CN=A1245228C937B6EF75576B21C5D9D76918337DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:ba:f7:01:82:9e:bb:40:fe:7b:87:43:f9:
fa:17:ea:0e:b1:75:5f:3d:d1:21:6e:e7:4b:34:60:
de:bb:70:98:4c:a5:05:34:64:dd:e3:07:3f:38:e3:
27:b6:54:f9:47:57:44:51:c0:ca:8b:7d:82:c8:a8:
0e:74:1c:74:b4:a5:13:d3:ad:90:d2:ef:ea:af:a9:
fc:07:e5:03:21:fa:6b:03:e5:91:f2:14:d3:b8:7e:
56:2a:74:94:45:f2:db:d1:b1:8f:61:83:5f:8c:6a:
ab:8b:a3:d4:be:41:20:02:57:8c:3a:1b:fd:41:26:
f2:a6:48:24:5f:77:0a:e4:76:34:1d:f7:9a:56:0c:
87:de:18:cd:f9:f5:36:a0:0c:ba:f4:65:90:fc:f1:
b4:f8:bd:dd:ef:69:fa:89:cd:4e:e3:00:78:38:1d:
92:cc:7c:60:7f:69:47:49:a1:d2:bd:91:4c:c3:92:
22:31:07:0a:b1:8a:ee:3e:f0:2a:2e:48:d8:a8:b8:
8d:64:7a:24:9e:9d:cb:4d:f9:34:53:c8:d9:82:3a:
fd:01:43:d7:da:1f:08:f8:1f:a2:2a:b2:80:91:4b:
62:bb:b2:4d:3c:5a:07:80:af:c9:e1:36:e7:77:44:
72:6b:a4:17:61:2e:ef:e2:56:02:1a:9f:27:eb:27:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:52:28:C9:37:B6:EF:75:57:6B:21:C5:D9:D7:69:18:33:7D:E1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.68.0/24
94.118.192.0/24
94.118.208.0/24
94.118.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8a:b6:b3:69:7f:a3:42:cb:8f:f6:c4:d3:8a:e2:8f:d0:5f:
d8:fa:45:95:6b:a2:1d:d9:3b:8c:a5:06:63:f2:fe:6e:ed:93:
02:51:14:e6:29:47:94:73:4d:68:8e:1e:7b:4c:0c:3b:3d:a3:
60:ab:5c:28:b5:20:83:52:73:4e:21:5d:bc:61:70:06:f9:45:
8e:be:bb:11:58:9e:c8:cc:7c:f5:13:eb:14:54:05:f7:c7:05:
ef:6c:e3:ad:de:45:cb:c2:34:10:97:2e:79:de:d8:1a:93:b6:
57:ff:33:49:e3:a9:a8:ba:5b:ec:c0:5d:99:a6:c3:28:ee:f7:
ad:3e:90:15:e9:1b:31:8c:4a:c2:e4:28:69:1c:2d:22:ad:d7:
82:5b:f1:76:39:a9:45:4a:9f:87:b0:39:a7:18:fb:2c:e8:06:
4a:6d:c1:3f:79:e4:0e:7b:e5:a3:10:57:7f:f2:15:d5:66:1d:
f3:d4:c2:1f:11:ba:27:7c:91:c8:d0:1a:d1:db:22:7b:b7:03:
52:ed:0a:61:91:7f:65:01:c1:04:9a:15:1d:a9:c9:3b:6d:fc:
5a:49:bc:37:f2:e6:67:c8:50:5a:0c:e1:5e:14:db:cd:3c:18:
d1:a6:47:74:37:5e:9b:3b:c3:47:43:1a:6f:2e:ef:9a:65:54:
e1:8f:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:11:21 2026 by rpki-client