Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: Xg5mKyAMPXWNvQW4kwUNlDKekxM6wMz/vSO1k72Dvuw=
Subject key identifier: 6E:9E:F1:54:44:E1:11:7D:75:DC:DA:59:D8:F8:90:C1:9C:5D:7A:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 58F3C4C2681A779087A946CC07D68E2CD1D0CAC0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215114.roa
Signing time: Wed 16 Sep 2026 20:13:48 +0000
ROA not before: Wed 16 Sep 2026 20:08:48 +0000
ROA not after: Wed 15 Sep 2027 20:13:48 +0000
asID: 215114
IP address blocks: 96.62.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f3:c4:c2:68:1a:77:90:87:a9:46:cc:07:d6:8e:2c:d1:d0:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 16 20:08:48 2026 GMT
Not After : Sep 15 20:13:48 2027 GMT
Subject: CN=6E9EF15444E1117D75DCDA59D8F890C19C5D7A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:4f:cf:e4:ae:0e:78:2c:87:b0:9d:5d:8c:
29:11:c9:bc:21:c7:8a:09:e5:90:b2:7a:4d:91:7a:
c9:e9:9a:ee:53:7c:3c:4d:22:ea:4d:2e:bb:f7:3c:
b8:54:d1:9a:76:9e:3a:15:3a:91:35:c0:cd:fb:11:
a4:23:cb:d6:77:b6:39:d7:dc:14:d3:34:a9:51:7b:
28:6f:55:6e:87:22:f2:90:45:48:36:0b:13:51:56:
2c:b4:a2:ae:77:b0:7e:9b:02:9a:c0:5f:52:2f:e8:
1b:aa:b5:9f:f5:c5:84:e0:65:cf:b1:73:de:4f:26:
2b:8d:45:cf:3c:02:f2:2f:b5:ff:d0:ff:08:a1:91:
1c:fa:7e:f9:6e:92:29:ec:a5:d2:14:41:40:4f:f7:
8a:7f:39:18:f6:ee:f7:ba:17:ae:56:e4:63:8d:ad:
8e:35:26:56:e0:9d:ae:3e:16:aa:45:93:20:a0:de:
ac:33:83:3b:15:04:73:d0:ef:d6:07:3a:b8:65:cc:
79:3d:92:9a:97:75:ec:b5:02:a1:bb:b3:b5:ab:f3:
8c:b4:22:5e:c1:33:02:cf:8a:f6:53:db:99:16:6d:
c4:21:99:d3:bb:24:2b:64:57:4b:4d:35:12:bf:17:
d2:56:37:c0:b6:28:1e:b2:9f:2b:ae:94:98:4d:f6:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:F1:54:44:E1:11:7D:75:DC:DA:59:D8:F8:90:C1:9C:5D:7A:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:59:c5:9e:98:5f:19:72:3c:66:40:00:f0:df:95:df:df:e6:
de:6e:8d:60:0c:b4:55:b4:23:35:05:94:5a:04:61:75:00:66:
a8:04:1d:a4:5e:2a:c3:03:55:55:01:54:8d:aa:63:aa:c0:2b:
6b:56:4a:29:6d:c8:50:cc:db:53:f7:2e:93:a4:26:cd:c4:60:
01:47:58:29:3e:8d:9d:f5:a7:12:a2:a2:b8:00:d9:00:59:ce:
70:c7:a9:af:c4:18:53:92:e4:6e:df:c9:8b:09:82:30:6e:b5:
c4:1b:ff:5c:99:f9:60:06:7f:e7:0a:a0:cb:65:fe:6c:56:75:
f1:06:51:50:42:d9:f1:aa:e9:f7:8d:8d:a2:98:99:9a:ed:f2:
ab:90:46:47:82:c4:bf:31:ad:17:0f:7e:20:ff:54:c6:e0:e1:
29:45:8b:0e:67:78:81:1d:c5:61:b0:11:37:57:99:db:d0:16:
13:7c:9c:7a:de:bc:f7:33:58:d1:26:f9:a5:db:d4:33:e1:d8:
48:a5:07:f8:b1:84:b2:97:ea:a7:3b:72:a0:12:48:b7:a1:59:
87:59:7a:a6:2b:b5:07:81:e7:b7:d1:a9:b0:32:d0:90:f8:ef:
e1:dc:b7:a4:c4:ee:aa:83:13:af:0c:86:40:1f:88:86:0a:fc:
08:76:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:24 2026 by rpki-client