Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215291.roa
File:                     AS215291.roa (raw, json)
Hash identifier:          ke6xmU3Xx+nyaauAmHlJuQZw8xt0i1PzLDv89UM40DA=
Subject key identifier:   A9:96:07:0F:23:97:74:2B:F2:76:53:B1:5A:4C:20:24:AE:08:81:75
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       772FA8ADA620436E78C7C3A7AA3B03F561967EEB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215291.roa
Signing time:             Fri 28 Aug 2026 11:49:30 +0000
ROA not before:           Fri 28 Aug 2026 11:44:30 +0000
ROA not after:            Fri 27 Aug 2027 11:49:30 +0000
asID:                     215291
IP address blocks:        140.150.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2f:a8:ad:a6:20:43:6e:78:c7:c3:a7:aa:3b:03:f5:61:96:7e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Aug 28 11:44:30 2026 GMT
            Not After : Aug 27 11:49:30 2027 GMT
        Subject: CN=A996070F2397742BF27653B15A4C2024AE088175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:dc:02:aa:34:5e:70:a9:73:93:c0:0a:52:
                    b7:b6:58:3f:92:18:6f:31:62:8b:4f:8e:51:1e:b7:
                    01:d1:c6:fd:67:5c:41:de:ae:8f:fe:0d:27:22:39:
                    6d:7e:c5:ba:a2:71:5f:27:23:d0:f8:61:0e:11:cc:
                    b9:33:d1:d5:b6:62:6d:e1:8c:d2:ba:51:ad:f3:18:
                    dc:f3:f3:14:8f:81:e5:93:74:21:03:6a:db:9c:80:
                    6e:5e:90:65:4e:f2:62:af:26:ab:46:46:4f:c1:2b:
                    23:b5:1b:66:24:5e:06:ee:84:dc:00:0d:33:e0:fb:
                    1f:4d:da:7f:46:c2:4c:e7:cf:97:79:c6:dd:b2:8c:
                    67:23:a8:d3:d1:a3:d2:88:bb:ec:bf:9e:46:7d:f6:
                    6e:8f:12:0f:67:86:03:0d:1e:c7:1b:b8:e7:8f:ea:
                    67:72:8d:33:9f:45:b2:dc:13:f7:2f:ca:4c:b0:3e:
                    e9:a4:56:44:90:68:6c:c7:89:be:f4:ec:bb:ba:e7:
                    88:ea:4b:39:4b:3c:34:d0:54:be:98:ec:ad:bb:43:
                    8d:ac:eb:4e:84:f6:66:9a:49:06:44:e2:02:d2:4b:
                    51:fa:0b:f4:8c:6f:c5:a9:e8:b4:eb:ea:30:45:99:
                    d6:86:17:b3:7b:d5:35:3d:6f:15:c5:21:af:bd:98:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:07:0F:23:97:74:2B:F2:76:53:B1:5A:4C:20:24:AE:08:81:75
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.150.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:24:fe:67:0e:e5:67:68:27:3a:01:ea:91:73:af:d0:52:a8:
         db:bb:e1:78:49:64:29:53:fa:f3:b2:54:2a:0b:67:9d:06:b1:
         67:cc:9c:2c:a3:81:30:74:9a:16:9b:5f:78:0d:60:18:3d:cb:
         52:c4:a6:ae:b7:db:2d:d6:3f:12:34:b3:36:65:f2:8c:c4:96:
         37:b7:a1:21:3a:ff:cf:76:89:56:65:68:5c:85:86:b5:92:f1:
         39:e6:be:ce:92:92:cc:43:2b:6e:16:85:6c:45:ff:0d:29:ea:
         e5:83:fc:ed:97:cb:cd:b3:b3:57:e0:da:49:89:eb:83:9b:be:
         11:d9:47:8c:58:6d:80:64:4c:59:30:1b:de:78:72:2c:ca:5a:
         c3:60:16:e5:a9:e2:90:1d:76:73:3e:26:db:46:be:b1:e6:fb:
         7f:43:7e:97:0f:65:14:f2:35:b5:f3:b3:14:88:9c:4e:90:06:
         04:61:67:90:c0:67:71:95:6e:d1:46:ad:ed:7e:3a:cf:0b:f2:
         a4:1f:85:67:e6:99:0a:76:90:4b:c7:c5:94:88:41:b9:eb:3f:
         4a:08:69:59:e5:b3:d2:b1:48:97:1d:62:8f:fa:90:ee:34:88:
         87:08:96:82:23:d3:90:0b:bd:ec:d0:25:75:f0:30:15:ae:d1:
         7c:74:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----