Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215181.roa
File: AS215181.roa (raw, json)
Hash identifier: W/WPnQKWOZKEhnFxbUasd3NzfwNgYs0bS7gwN9SEd24=
Subject key identifier: 13:64:F8:5E:87:3C:D9:33:D6:AE:CA:22:F8:78:02:A6:BA:FE:8E:A1
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 6D31AA78241056937A56017C874585171D077865
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215181.roa
Signing time: Mon 06 Oct 2025 08:07:56 +0000
ROA not before: Mon 06 Oct 2025 08:02:56 +0000
ROA not after: Mon 05 Oct 2026 08:07:56 +0000
asID: 215181
IP address blocks: 92.249.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:31:aa:78:24:10:56:93:7a:56:01:7c:87:45:85:17:1d:07:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 6 08:02:56 2025 GMT
Not After : Oct 5 08:07:56 2026 GMT
Subject: CN=1364F85E873CD933D6AECA22F87802A6BAFE8EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:28:4d:49:ae:32:ca:34:0f:e4:90:05:34:
31:20:be:d0:0f:47:f7:b4:1b:2e:70:bd:fd:eb:f7:
ef:f2:28:e9:f2:54:a3:3a:de:e8:25:fe:d2:a5:2d:
f5:55:09:bf:ee:57:7c:40:2b:14:fe:9e:88:60:6a:
98:86:b0:9e:a0:d6:89:9f:b2:57:54:20:df:1d:45:
5c:55:86:63:94:5f:a6:60:dd:e4:48:c3:10:89:2b:
00:f2:03:11:d7:0e:14:09:50:4d:ed:3a:7b:d7:e3:
39:96:f4:c3:cd:55:bb:ed:02:25:04:85:d5:e9:66:
4a:b7:27:a8:2b:5e:d8:1e:97:28:3b:ae:14:e2:ff:
14:e5:30:5c:2a:8b:3f:bb:f5:11:ee:52:f8:bd:9b:
78:2f:59:a4:e9:50:7b:75:28:2a:55:0b:94:94:bc:
39:19:f8:ed:94:6c:75:43:d7:b1:3c:6c:b5:8b:5d:
f6:5f:d8:a1:32:d3:95:27:c4:8f:5f:fb:02:14:94:
11:0e:04:00:4c:6d:f7:74:f2:95:39:6a:01:cc:29:
ca:59:9e:9b:3c:7d:89:37:fd:23:f1:2d:1c:54:2d:
de:c3:00:77:f4:9e:52:86:2a:6b:f7:81:98:d2:8d:
97:b7:0e:51:ab:76:27:96:c8:95:8e:6b:fd:d9:2a:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:F8:5E:87:3C:D9:33:D6:AE:CA:22:F8:78:02:A6:BA:FE:8E:A1
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.63.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5a:8d:67:c0:40:92:41:d2:db:f6:fe:56:8b:48:fc:aa:83:
e6:17:37:6e:3e:d7:e2:3e:75:cd:d9:3b:01:32:5e:1e:be:9a:
5c:eb:fe:6c:02:22:da:73:df:de:93:f7:59:7c:69:1c:1f:37:
3d:2f:50:17:1c:96:43:98:9c:f9:de:f1:59:ff:dd:25:88:3d:
e3:41:1e:4f:92:cf:48:f3:10:90:ab:3a:95:cd:26:24:c5:4d:
9a:dd:17:72:7e:35:99:c4:f1:1d:c7:ef:6c:c8:31:3d:d9:62:
a9:d5:a3:21:b5:ae:aa:d2:d2:1f:8a:f7:b3:51:8a:bc:68:6c:
fe:03:58:be:9b:31:32:6d:c9:b7:a1:59:68:d5:67:01:47:9a:
5a:5f:f6:1b:f3:70:f3:93:3e:f6:cb:30:b9:dd:a4:43:1d:93:
1b:61:47:4a:09:d5:9d:68:ae:93:a2:9d:37:7c:b1:d1:a3:c3:
42:82:61:aa:98:52:50:5a:ab:7e:78:c5:f9:54:d6:95:41:7a:
c6:f6:75:dc:e7:d5:12:fd:aa:43:33:43:7d:f1:31:d5:49:52:
ce:7d:ec:bb:f0:27:58:65:85:76:ef:7b:1b:68:d9:0f:f6:c3:
1a:8a:62:ec:8a:ef:8b:fd:64:94:76:cd:84:43:41:91:99:cf:
ef:43:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:57 2025 by rpki-client