Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215238.roa
File: AS215238.roa (raw, json)
Hash identifier: athyLw7B9OllaJgLBsIGeH3ZIsbXd9FVNp7+V9FS8+4=
Subject key identifier: 9B:FF:DB:B9:AC:A4:0E:7A:96:DD:EE:94:0F:74:B0:80:E5:89:FD:64
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A996BB81146544E0ADB6E6B880EA2B783F17F3C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215238.roa
Signing time: Sun 15 Feb 2026 08:46:07 +0000
ROA not before: Sun 15 Feb 2026 08:41:07 +0000
ROA not after: Sun 14 Feb 2027 08:46:07 +0000
asID: 215238
IP address blocks: 155.117.109.0/24 maxlen: 24
167.148.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:99:6b:b8:11:46:54:4e:0a:db:6e:6b:88:0e:a2:b7:83:f1:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 15 08:41:07 2026 GMT
Not After : Feb 14 08:46:07 2027 GMT
Subject: CN=9BFFDBB9ACA40E7A96DDEE940F74B080E589FD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:68:14:a2:68:47:02:70:d1:ec:ea:56:23:
05:1e:2e:c8:80:b9:3e:1a:3d:98:76:e4:7b:17:3c:
6e:94:2a:5d:d1:65:5c:92:da:ec:c6:8a:d1:a3:10:
c8:00:57:91:3f:6f:62:54:46:72:f2:a6:2d:b2:4a:
4a:a8:e7:1a:0b:84:64:76:07:09:66:6a:2b:43:bc:
8b:ae:10:40:2c:7a:f2:c3:78:49:7d:5c:bb:8a:0c:
59:ba:ae:d9:4a:31:dd:43:40:53:5e:c4:9a:2c:0a:
7e:86:2d:de:4c:2a:47:9c:77:08:e4:a5:5e:68:e2:
3d:bd:9c:e6:1e:1d:8e:8e:6c:2c:d5:6a:c5:22:37:
40:f5:6b:b2:65:9f:ba:ce:6f:9b:f6:07:7e:c2:ea:
89:8c:22:6c:f1:24:71:24:42:e2:43:81:d9:7c:77:
58:d5:05:81:e3:b6:a2:85:7a:d0:4c:39:79:cb:f0:
36:6c:62:e6:b2:c5:17:40:1f:50:fb:45:c6:85:2d:
1e:a8:08:31:90:94:cf:72:60:6c:7a:83:88:ca:37:
1c:7b:26:26:d1:08:6e:83:2b:39:46:6e:32:f0:a0:
31:c4:64:01:c5:24:dc:e0:9d:28:c0:22:cb:67:17:
84:46:ce:bb:81:0e:df:17:8b:92:e7:c9:32:ea:8e:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:DB:B9:AC:A4:0E:7A:96:DD:EE:94:0F:74:B0:80:E5:89:FD:64
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.109.0/24
167.148.212.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1c:4b:8d:40:b2:24:57:4d:3f:3a:28:dd:cf:a0:49:cd:39:
ed:de:11:1d:09:c5:d2:c0:c3:cb:0c:7e:31:af:6e:17:2c:0c:
3b:3b:7b:3e:77:13:22:c6:75:c0:59:69:fa:f3:55:66:4d:9a:
8f:6b:6d:2d:2b:9f:66:54:ea:80:23:91:0d:40:d8:73:22:2b:
db:7c:24:db:27:3b:38:88:3b:7e:ed:c8:00:7a:f2:9d:b1:e8:
d7:60:69:3d:a8:72:3d:80:05:16:85:f5:19:fb:90:35:3a:98:
ce:6b:7f:e0:ce:40:12:13:2c:45:a1:66:94:ae:a2:2a:16:4b:
76:af:df:58:35:64:f3:75:af:ff:0f:62:f1:8b:82:fa:c3:7f:
fb:69:50:44:be:4a:0a:e8:cd:12:71:ef:8c:91:21:f1:14:f4:
02:30:31:0b:3e:ee:22:6f:16:fb:9f:95:e2:1b:92:80:19:50:
ac:8c:28:aa:62:f3:86:bb:f1:e8:cf:d9:1e:fb:fd:e6:6d:90:
35:9b:fb:2a:2c:05:c2:64:c4:66:e1:49:e2:c7:b3:4c:77:3b:
2c:2a:ef:21:fa:f6:01:93:13:b0:1f:b5:30:bb:bc:9f:c8:07:
81:9a:cf:b8:22:8e:2a:d6:51:ea:2a:cb:f1:98:fc:ab:44:ef:
7b:63:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:21 2026 by rpki-client