Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: ywwiaLtD15a4Peb1mMJoa+1IsB2k+nIpiMAUkzeKnAA=
Subject key identifier: A6:59:B2:D7:6E:6B:95:3B:E7:58:F8:C2:47:8B:CF:74:65:28:13:9D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4F49508C104F5D9CA8AB99D2F5176A8E7514B4E5
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
Signing time: Tue 27 Oct 2026 00:01:45 +0000
ROA not before: Mon 26 Oct 2026 23:56:45 +0000
ROA not after: Tue 26 Oct 2027 00:01:45 +0000
asID: 215728
IP address blocks: 143.20.42.0/24 maxlen: 24
143.20.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:49:50:8c:10:4f:5d:9c:a8:ab:99:d2:f5:17:6a:8e:75:14:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 26 23:56:45 2026 GMT
Not After : Oct 26 00:01:45 2027 GMT
Subject: CN=A659B2D76E6B953BE758F8C2478BCF746528139D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:04:65:85:ab:b2:4a:c4:83:8c:1b:7f:33:
6c:d0:b6:21:69:d1:6a:c0:fd:af:3e:68:5b:9f:49:
1f:5e:44:70:86:e3:83:14:e4:b4:46:05:c4:96:1f:
6f:db:ef:87:66:c2:6d:0e:f7:70:fa:af:34:83:fc:
4b:8c:d8:6c:85:e8:52:93:47:8e:5d:a4:06:14:47:
f8:56:37:3f:f3:09:ea:12:4a:cb:26:ba:44:b6:3e:
ae:30:11:43:21:b4:15:7d:03:05:46:53:26:3b:0f:
e1:8b:f0:83:af:a6:9c:ad:09:1c:9c:e8:c5:e9:fd:
2e:5a:e3:50:79:d3:05:df:b9:fb:18:91:d4:90:c3:
1e:3e:91:f6:e5:c4:6b:47:4e:0b:f1:da:29:f7:c8:
bb:e8:03:37:e4:9f:61:b9:74:a5:0c:e6:3d:36:6a:
0c:9b:78:8e:b2:7e:f7:59:a3:32:85:2a:97:ff:28:
c1:e7:81:e8:34:22:82:d4:9d:f1:80:91:84:43:78:
c2:1a:6f:56:b8:da:1c:d0:75:53:f3:2e:be:68:f9:
d3:6b:d6:b6:29:e5:b8:0a:f6:0d:1a:7f:16:26:bc:
e7:49:4e:df:aa:14:91:c5:3b:97:c2:69:52:13:b5:
23:0a:fc:ea:40:7c:ea:76:2d:6e:10:a3:fa:0f:93:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:B2:D7:6E:6B:95:3B:E7:58:F8:C2:47:8B:CF:74:65:28:13:9D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.42.0/24
143.20.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0c:9a:66:a1:b1:c4:a6:02:2d:e2:64:bf:43:9c:bb:31:e6:
1c:8f:b0:fa:b3:ad:ad:9e:39:23:2c:fd:78:fa:f6:1c:33:d3:
bf:62:03:d3:1e:10:fa:f8:5f:d2:20:80:7e:d1:df:76:31:c2:
c3:5d:4a:70:e6:65:bc:42:91:e7:79:8e:40:c1:df:db:4a:f6:
f4:cb:4e:44:e0:13:bc:d8:70:7b:c3:31:a4:e1:24:f1:9b:de:
ef:40:55:96:74:da:a7:07:e2:91:95:f7:65:bb:6f:e9:cf:ed:
08:83:d7:ae:cd:6f:a6:3f:fc:89:2f:ff:4d:b6:c7:64:5d:9f:
ee:03:6d:b5:a5:07:63:e6:9b:4a:dc:23:7a:3b:83:2b:9f:c7:
f5:8d:a0:40:02:66:35:75:1a:3b:ce:5e:c9:d2:06:fc:c9:ad:
1d:15:5f:ae:94:a1:b9:73:98:10:a2:66:4e:64:b0:16:af:a1:
58:0b:33:93:9f:9f:ea:10:69:28:41:9b:da:3a:71:75:55:1f:
b5:6c:a4:96:ea:75:38:a6:d7:c2:29:9e:60:8b:8c:49:4a:31:
c7:18:9d:d2:fc:86:94:f0:b4:26:6b:2c:62:72:a5:82:24:7f:
68:80:33:da:33:75:f3:67:13:00:ff:04:c7:8e:e2:c8:1f:80:
1a:06:5d:55
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUT0lQjBBPXZyoq5nS9RdqjnUUtOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjEwMjYyMzU2NDVaFw0yNzEwMjYwMDAxNDVaMDMxMTAvBgNV
BAMTKEE2NTlCMkQ3NkU2Qjk1M0JFNzU4RjhDMjQ3OEJDRjc0NjUyODEzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiLwRlhauySsSDjBt/M2zQtiFp
0WrA/a8+aFufSR9eRHCG44MU5LRGBcSWH2/b74dmwm0O93D6rzSD/EuM2GyF6FKT
R45dpAYUR/hWNz/zCeoSSssmukS2Pq4wEUMhtBV9AwVGUyY7D+GL8IOvppytCRyc
6MXp/S5a41B50wXfufsYkdSQwx4+kfblxGtHTgvx2in3yLvoAzfkn2G5dKUM5j02
agybeI6yfvdZozKFKpf/KMHngeg0IoLUnfGAkYRDeMIab1a42hzQdVPzLr5o+dNr
1rYp5bgK9g0afxYmvOdJTt+qFJHFO5fCaVITtSMK/OpAfOp2LW4Qo/oPk6sDAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUplmy125rlTvnWPjCR4vPdGUoE50wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE1NzI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxQq
AwQAjxS/MA0GCSqGSIb3DQEBCwUAA4IBAQAvDJpmobHEpgIt4mS/Q5y7MeYcj7D6
s62tnjkjLP14+vYcM9O/YgPTHhD6+F/SIIB+0d92McLDXUpw5mW8QpHneY5Awd/b
Svb0y05E4BO82HB7wzGk4STxm97vQFWWdNqnB+KRlfdlu2/pz+0Ig9euzW+mP/yJ
L/9NtsdkXZ/uA221pQdj5ptK3CN6O4Mrn8f1jaBAAmY1dRo7zl7J0gb8ya0dFV+u
lKG5c5gQomZOZLAWr6FYCzOTn5/qEGkoQZvaOnF1VR+1bKSW6nU4ptfCKZ5gi4xJ
SjHHGJ3S/IaU8LQmayxicqWCJH9ogDPaM3XzZxMA/wTHjuLIH4AaBl1V
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:57 2026 by rpki-client