Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: LIQlQGdJOj4eyhzVXnA3RToYe4DBEW35AokyfzAk59Y=
Subject key identifier: FA:58:42:E9:DB:A1:56:C6:13:9E:10:24:6E:FD:7F:67:0D:D3:E5:13
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6385A43ECDC1F1BEAD1FD0F477F50E9A8D4AB06A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
Signing time: Fri 12 Sep 2025 12:05:02 +0000
ROA not before: Fri 12 Sep 2025 12:00:02 +0000
ROA not after: Fri 11 Sep 2026 12:05:02 +0000
asID: 215114
IP address blocks: 141.11.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:85:a4:3e:cd:c1:f1:be:ad:1f:d0:f4:77:f5:0e:9a:8d:4a:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 12 12:00:02 2025 GMT
Not After : Sep 11 12:05:02 2026 GMT
Subject: CN=FA5842E9DBA156C6139E10246EFD7F670DD3E513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:00:ad:f0:2a:d7:51:45:66:8a:ad:8a:86:
2b:ea:62:5b:b2:38:1e:2b:52:66:dd:33:0c:d2:c3:
1c:c3:f0:e5:78:7a:cf:2e:7a:2e:e9:75:97:85:38:
cc:a2:11:a7:e1:f3:f7:5f:93:a3:ce:18:f8:61:fd:
bd:58:22:3a:11:85:40:f2:05:ca:79:05:65:9a:15:
dd:b5:f8:18:37:e6:93:96:a8:21:c9:1b:c7:b2:4e:
24:9b:c3:b5:c4:27:56:1c:2d:28:cb:7e:21:e8:f5:
20:c0:9a:f5:26:d3:53:98:49:14:6f:83:d5:61:6b:
87:88:98:b5:db:27:5f:cb:9c:14:ba:97:82:3d:cc:
e9:30:9f:bc:2d:59:43:54:13:3d:49:3c:a4:cd:66:
57:8d:84:de:10:e5:24:b6:ef:91:65:98:b2:16:14:
98:9e:48:8d:c5:82:b9:65:8e:da:3e:bb:2c:62:53:
34:d4:95:7c:ee:0c:ef:71:df:ea:18:71:a7:73:cb:
91:04:05:3d:11:b2:34:29:21:9f:26:82:98:75:d4:
8c:3d:d2:59:31:59:54:83:4b:f3:7e:b0:50:02:e5:
df:94:6d:12:ea:a3:50:e3:97:f2:82:65:72:a9:b4:
53:1f:59:48:d9:4a:7a:ca:74:dc:6b:f6:c1:2f:f6:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:42:E9:DB:A1:56:C6:13:9E:10:24:6E:FD:7F:67:0D:D3:E5:13
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b9:2d:dd:c5:3b:a2:5a:c1:ca:b5:28:7c:ca:47:85:7a:45:
47:ce:f1:8d:7b:9f:81:ca:9a:78:21:be:e3:f4:c5:15:9b:94:
18:72:20:74:33:aa:19:2f:25:f3:92:79:27:a8:7b:0b:ec:fd:
14:5b:ca:e4:84:5e:ac:c2:fa:fa:60:48:19:f3:be:2a:f7:b8:
b0:d8:53:57:ff:9f:1f:47:f2:69:59:46:f3:f4:19:9f:70:2a:
d8:4e:36:6c:55:9e:fb:c4:77:9f:f8:22:a6:6e:70:c3:08:e4:
7b:de:8d:49:86:ed:3a:f2:70:ea:8b:b1:e6:8e:d0:42:6f:cc:
3e:48:0c:73:0c:04:14:fe:99:5d:87:bc:2b:4a:de:83:32:ec:
1b:88:04:36:85:2b:13:67:a3:76:25:55:c6:22:1c:b1:5b:9e:
a3:c2:96:d4:ba:12:ed:f6:e6:18:1d:b1:03:3f:e0:ee:07:96:
02:18:cb:ed:c4:87:a0:9f:44:ee:b0:72:3a:3c:39:38:13:37:
00:ac:a9:0e:e2:cf:e1:64:c3:0c:f0:77:84:49:85:d3:09:44:
b2:b5:25:9b:4b:26:b3:e3:d9:be:39:c6:44:d4:c3:38:60:e4:
42:46:e6:83:34:b4:e2:1b:23:e4:4b:0a:e6:4e:0b:18:45:eb:
8c:60:b5:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUY4WkPs3B8b6tH9D0d/UOmo1KsGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA5MTIxMjAwMDJaFw0yNjA5MTExMjA1MDJaMDMxMTAvBgNV
BAMTKEZBNTg0MkU5REJBMTU2QzYxMzlFMTAyNDZFRkQ3RjY3MEREM0U1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObwCt8CrXUUVmiq2KhivqYluy
OB4rUmbdMwzSwxzD8OV4es8uei7pdZeFOMyiEafh8/dfk6POGPhh/b1YIjoRhUDy
Bcp5BWWaFd21+Bg35pOWqCHJG8eyTiSbw7XEJ1YcLSjLfiHo9SDAmvUm01OYSRRv
g9Vha4eImLXbJ1/LnBS6l4I9zOkwn7wtWUNUEz1JPKTNZleNhN4Q5SS275FlmLIW
FJieSI3Fgrlljto+uyxiUzTUlXzuDO9x3+oYcadzy5EEBT0RsjQpIZ8mgph11Iw9
0lkxWVSDS/N+sFAC5d+UbRLqo1Djl/KCZXKptFMfWUjZSnrKdNxr9sEv9nopAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU+lhC6duhVsYTnhAkbv1/Zw3T5RMwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE1MTE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsF
MA0GCSqGSIb3DQEBCwUAA4IBAQBEuS3dxTuiWsHKtSh8ykeFekVHzvGNe5+Bypp4
Ib7j9MUVm5QYciB0M6oZLyXzknknqHsL7P0UW8rkhF6swvr6YEgZ874q97iw2FNX
/58fR/JpWUbz9BmfcCrYTjZsVZ77xHef+CKmbnDDCOR73o1Jhu068nDqi7HmjtBC
b8w+SAxzDAQU/pldh7wrSt6DMuwbiAQ2hSsTZ6N2JVXGIhyxW56jwpbUuhLt9uYY
HbEDP+DuB5YCGMvtxIegn0TusHI6PDk4EzcArKkO4s/hZMMM8HeESYXTCUSytSWb
Syaz49m+OcZE1MM4YORCRuaDNLTiGyPkSwrmTgsYReuMYLXT
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:57 2025 by rpki-client