Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: V97CtJLfWhJWbBfCT6hrn453IcvVgiV9mU5lRARPzI4=
Subject key identifier: 97:60:CC:11:69:ED:C6:68:E8:2F:33:90:35:A4:BA:93:FC:01:B3:BC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7AFC07E0A66C9AEC209938DEF1488D0798F14832
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
Signing time: Thu 08 Oct 2026 00:05:44 +0000
ROA not before: Thu 08 Oct 2026 00:00:44 +0000
ROA not after: Thu 07 Oct 2027 00:05:44 +0000
asID: 215607
IP address blocks: 148.135.255.0/24 maxlen: 24
162.141.179.0/24 maxlen: 24
162.141.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fc:07:e0:a6:6c:9a:ec:20:99:38:de:f1:48:8d:07:98:f1:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 8 00:00:44 2026 GMT
Not After : Oct 7 00:05:44 2027 GMT
Subject: CN=9760CC1169EDC668E82F339035A4BA93FC01B3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:82:ea:1d:22:24:3c:03:6b:43:db:a4:bd:
80:20:5a:77:7e:3d:c3:c1:b9:1a:b4:de:55:96:ba:
9a:92:cd:47:2d:ab:07:5f:ff:2e:c9:e4:f0:dc:72:
f4:c9:9d:bb:c2:74:5c:cb:24:07:5a:46:ab:b6:a1:
7e:ab:e7:8d:27:c3:11:4d:be:45:00:f1:68:3c:38:
65:b8:92:ba:13:0d:0b:b2:f9:47:b1:28:09:4e:2d:
0d:09:7d:8e:63:bd:02:78:e2:12:50:01:d7:04:44:
d4:07:e7:db:21:58:3e:39:9e:b6:6d:63:cb:c3:28:
85:d4:77:de:fc:54:52:62:7b:52:52:16:11:65:22:
84:b2:43:63:21:42:95:35:27:b6:f1:72:d1:ec:97:
ea:9e:be:4c:ef:a9:e3:eb:45:83:0d:0f:24:76:51:
c0:34:0c:16:91:d6:12:17:52:15:93:24:e7:d6:eb:
96:dc:21:e5:34:22:bd:ac:1c:67:a5:14:76:5b:5c:
8b:15:81:64:18:cb:b0:89:47:a3:ad:77:50:87:c8:
f3:7f:24:cb:47:39:49:0a:39:99:4b:66:18:94:5b:
ef:f6:b6:48:55:17:5d:30:4d:12:16:77:2c:83:81:
0b:32:e1:93:0a:59:00:a8:0e:bc:22:ea:eb:12:8a:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:60:CC:11:69:ED:C6:68:E8:2F:33:90:35:A4:BA:93:FC:01:B3:BC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.255.0/24
162.141.179.0/24
162.141.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:80:e4:eb:f4:9d:ad:29:4c:53:3b:11:f8:22:d2:20:52:d3:
74:0d:d9:80:c9:99:d8:48:47:50:7f:e0:52:02:c4:33:6c:ae:
3e:07:fc:da:20:e2:7a:11:f1:54:eb:0d:8f:0e:46:77:32:97:
08:c8:16:db:16:39:ca:2b:b2:50:41:81:38:46:b4:c1:b2:8b:
69:dd:eb:1f:17:3c:22:81:73:54:b4:f7:da:18:be:d4:21:9a:
fa:c1:8e:f5:98:50:99:d3:47:27:61:9a:2e:78:3b:e5:d4:60:
70:10:17:03:5c:3b:5b:bb:80:06:ca:7c:37:57:03:de:b2:e8:
5d:09:23:35:bd:0c:22:13:d8:2d:ba:30:c7:b6:47:1e:a2:e8:
d4:8e:e6:f1:f1:01:dd:2d:67:61:8b:63:0e:a9:58:8f:35:3b:
e2:3f:4a:79:fe:dd:ee:2e:2b:84:bc:c8:6f:2c:3b:ab:db:78:
0d:bc:56:b7:8d:3c:00:91:0f:6e:4e:4b:37:8d:03:15:5a:1d:
6f:52:5f:bb:9c:7d:2a:22:8f:36:08:d3:9e:8b:67:57:bc:ac:
95:5a:35:2a:f9:ca:b5:0f:97:37:85:4f:d7:b3:ac:77:3f:0c:
87:77:ed:11:24:e6:bf:f9:29:7a:5b:94:5a:76:4e:d9:50:25:
52:07:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:20 2026 by rpki-client