Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: ggsz/AzHgVC8d3if1wPEUVRIJ2YKeUw10fNtsvQBCLc=
Subject key identifier: 4C:1B:3C:85:8B:8A:F3:3D:02:03:D5:78:E1:E7:F8:BE:E1:2F:FA:84
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0E17F7C754769A6D21BB3574F7EB850F082FE0C6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215672.roa
Signing time: Tue 07 Apr 2026 05:47:03 +0000
ROA not before: Tue 07 Apr 2026 05:42:03 +0000
ROA not after: Tue 06 Apr 2027 05:47:03 +0000
asID: 215672
IP address blocks: 155.117.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:17:f7:c7:54:76:9a:6d:21:bb:35:74:f7:eb:85:0f:08:2f:e0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 05:42:03 2026 GMT
Not After : Apr 6 05:47:03 2027 GMT
Subject: CN=4C1B3C858B8AF33D0203D578E1E7F8BEE12FFA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:79:f4:91:a3:99:c6:41:1c:b0:a3:2d:47:
7f:39:9e:9e:60:6f:4c:a2:1a:ad:96:4a:5e:7b:84:
79:5e:a1:c1:16:75:a5:fd:d2:b3:c5:7a:3f:29:c3:
f5:8c:69:4e:be:59:47:ed:1a:36:6c:af:a8:96:2a:
2e:7e:f1:97:77:bb:9e:ed:dc:26:d6:65:3e:2b:f0:
4a:74:9c:1f:6c:da:32:6f:81:2f:95:21:61:dc:cf:
a1:af:01:21:47:05:7c:e2:d8:d2:1e:1b:36:d2:fc:
55:dd:55:b2:34:30:8d:0e:18:2c:fd:19:22:ab:db:
22:ba:f0:ed:f4:39:06:aa:ed:0f:02:fa:84:c4:47:
5d:16:23:3a:89:0f:fb:65:a6:79:9f:6c:7d:28:14:
bf:db:c1:2f:b4:f6:93:8b:ef:a0:06:83:a7:53:74:
b8:7f:c0:75:ea:59:40:1c:38:cd:c3:1f:b5:1a:0d:
51:87:ac:6b:55:06:c9:4f:03:e0:39:1e:d7:02:0c:
dc:49:01:71:e6:6c:32:45:50:12:20:57:38:b6:62:
f7:8a:5b:fd:88:35:d1:0d:e1:d9:71:a0:6b:c5:d7:
99:e1:4b:ea:2d:78:8a:67:a8:b9:f9:b8:a9:91:9f:
c5:3d:21:e6:42:cf:7c:d1:90:fd:79:cc:e9:61:15:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:3C:85:8B:8A:F3:3D:02:03:D5:78:E1:E7:F8:BE:E1:2F:FA:84
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.152.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:32:3d:5c:12:da:8f:cc:df:c2:1e:73:4b:0e:e4:16:7e:d5:
27:d4:cb:23:fc:df:a6:2b:74:f4:26:d8:c5:ee:df:49:19:4c:
62:3a:8b:25:f5:6a:aa:f6:ae:1c:cf:de:a7:1c:33:f8:5f:50:
8b:4f:e6:d6:05:67:cc:4b:cd:2a:52:ea:a0:db:8d:6e:ff:3a:
ab:aa:9e:23:30:33:1f:ca:d2:75:52:ef:41:37:0a:da:d7:ad:
21:d5:df:65:80:b1:a4:91:0f:7a:5c:9b:0e:19:43:eb:05:61:
e7:e9:49:fb:17:05:ea:3d:e8:aa:75:08:34:35:77:bb:04:22:
19:af:dc:a3:7b:1c:1a:4e:b3:21:8f:00:00:92:48:e1:98:bb:
a0:2f:b1:69:3e:8e:55:ef:6c:b5:e4:2a:b4:9d:ed:0b:9f:83:
a2:9d:b9:29:fb:2d:6b:d3:b0:c8:c7:cd:cb:f7:d6:7c:01:1e:
d8:9d:17:9f:18:d2:80:94:7e:85:56:0c:f9:07:ee:cc:3b:b9:
83:54:08:b8:99:c5:e2:d1:28:c4:23:1b:24:7c:11:3b:15:e7:
c4:d1:6b:89:ac:78:3a:0d:73:7f:f6:95:b0:63:de:83:e3:f7:
90:73:33:2c:e2:2e:da:ac:f5:e8:c3:14:5e:e6:b0:77:46:93:
42:4d:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:52:55 2026 by rpki-client