Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: yEUTFQPEfZnrJMVddkfTq/x1Ha68eE3RA5+NkI9LjwM=
Subject key identifier: CA:80:51:50:DC:C4:F0:9E:51:E7:2B:05:68:9B:73:90:40:69:9A:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 66C24DFD10F231CB72FEAAA2EE6F0912BC1141B9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215224.roa
Signing time: Wed 25 Feb 2026 07:46:24 +0000
ROA not before: Wed 25 Feb 2026 07:41:24 +0000
ROA not after: Wed 24 Feb 2027 07:46:24 +0000
asID: 215224
IP address blocks: 148.135.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c2:4d:fd:10:f2:31:cb:72:fe:aa:a2:ee:6f:09:12:bc:11:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 25 07:41:24 2026 GMT
Not After : Feb 24 07:46:24 2027 GMT
Subject: CN=CA805150DCC4F09E51E72B05689B739040699A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:2d:3d:8b:28:e9:52:7e:1f:8f:fe:a1:39:
92:47:58:e7:19:39:a5:f0:9f:e9:fd:e6:5f:3c:59:
e4:5d:72:b4:94:f6:b1:01:b0:10:36:ac:99:f4:25:
33:1e:fa:ff:9c:2e:4a:4a:55:fc:5f:89:cb:95:36:
36:92:c3:7b:cb:1f:15:63:84:d0:ba:99:7b:f7:7f:
78:ef:4a:8c:7b:42:b2:00:b5:a5:37:59:b7:7e:60:
0d:62:81:ff:f6:d6:b7:e1:e0:89:76:6d:6d:76:a4:
09:c6:98:6b:96:23:ae:57:75:3f:e8:b2:75:35:d4:
4c:ef:45:5c:8e:a2:4e:90:d1:35:6d:a8:52:4d:39:
4d:d2:ec:dc:a7:29:e3:55:a5:7a:d2:da:c6:0e:c5:
7f:ba:49:fb:1a:4a:44:91:c1:62:89:ed:c1:fb:f0:
71:01:1b:a4:30:aa:1a:cd:6a:84:a0:c6:20:c6:03:
e1:3e:18:c3:8b:f2:aa:37:fe:11:df:39:40:94:d0:
15:e0:d6:15:74:6a:12:00:f9:5c:09:e0:98:9d:b7:
f4:cf:4f:ee:bb:3b:58:08:bd:af:47:f4:2c:4a:ef:
64:ab:11:9d:73:76:b1:ab:b0:63:bc:12:90:e1:90:
73:b6:21:d7:00:14:05:1e:e2:02:52:0f:5f:db:97:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:80:51:50:DC:C4:F0:9E:51:E7:2B:05:68:9B:73:90:40:69:9A:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f9:35:40:04:40:f4:a7:82:a3:32:15:b6:d5:d6:21:bb:13:
69:c6:dd:dc:4a:31:48:3c:c9:43:ee:5a:36:1f:0c:0b:bc:0b:
68:1a:e8:2c:ee:c6:6a:73:cb:10:a6:34:13:d6:7f:3b:ce:78:
86:fd:ca:d2:1d:35:cc:3d:a1:2e:c9:f9:98:33:d7:5e:33:7a:
2c:df:d5:15:35:89:76:fc:e9:f0:0b:f2:d6:9d:98:35:6d:24:
05:44:bb:df:ef:96:a3:e6:cc:0f:c9:22:d5:27:c8:83:39:61:
5a:1a:dc:e7:ff:44:9f:c5:6d:e7:34:1b:8e:29:34:10:c1:58:
34:c7:2d:48:df:27:44:ba:2f:1b:30:a0:cd:5c:42:27:09:61:
1c:e9:bb:0b:89:92:36:dc:c1:c5:b7:a6:d2:ee:1e:6b:ed:da:
f1:36:eb:01:42:b2:6d:8b:ad:a8:13:ce:3b:ae:c6:10:b5:c5:
6b:e4:76:13:6f:d0:b5:3f:ef:f5:97:d3:fa:2b:3d:ce:a5:36:
ba:17:ff:7e:29:07:35:16:eb:a2:1e:f1:32:bc:52:de:e1:ea:
8b:02:05:a9:2f:51:51:44:bc:24:d5:b2:1d:34:76:02:22:06:
8e:0a:d4:66:7b:b9:40:df:18:6a:61:77:d1:63:d5:c5:4c:be:
41:bb:b3:b5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZsJN/RDyMcty/qqi7m8JErwRQbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMjUwNzQxMjRaFw0yNzAyMjQwNzQ2MjRaMDMxMTAvBgNV
BAMTKENBODA1MTUwRENDNEYwOUU1MUU3MkIwNTY4OUI3MzkwNDA2OTlBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4C09iyjpUn4fj/6hOZJHWOcZ
OaXwn+n95l88WeRdcrSU9rEBsBA2rJn0JTMe+v+cLkpKVfxficuVNjaSw3vLHxVj
hNC6mXv3f3jvSox7QrIAtaU3Wbd+YA1igf/21rfh4Il2bW12pAnGmGuWI65XdT/o
snU11EzvRVyOok6Q0TVtqFJNOU3S7NynKeNVpXrS2sYOxX+6SfsaSkSRwWKJ7cH7
8HEBG6QwqhrNaoSgxiDGA+E+GMOL8qo3/hHfOUCU0BXg1hV0ahIA+VwJ4Jidt/TP
T+67O1gIva9H9CxK72SrEZ1zdrGrsGO8EpDhkHO2IdcAFAUe4gJSD1/bl56tAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUyoBRUNzE8J5R5ysFaJtzkEBpmhMwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1MjI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIeg
MA0GCSqGSIb3DQEBCwUAA4IBAQCE+TVABED0p4KjMhW21dYhuxNpxt3cSjFIPMlD
7lo2HwwLvAtoGugs7sZqc8sQpjQT1n87zniG/crSHTXMPaEuyfmYM9deM3os39UV
NYl2/OnwC/LWnZg1bSQFRLvf75aj5swPySLVJ8iDOWFaGtzn/0SfxW3nNBuOKTQQ
wVg0xy1I3ydEui8bMKDNXEInCWEc6bsLiZI23MHFt6bS7h5r7drxNusBQrJti62o
E847rsYQtcVr5HYTb9C1P+/1l9P6Kz3OpTa6F/9+KQc1FuuiHvEyvFLe4eqLAgWp
L1FRRLwk1bIdNHYCIgaOCtRme7lA3xhqYXfRY9XFTL5Bu7O1
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:25 2026 by rpki-client