Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215703.roa
File: AS215703.roa (raw, json)
Hash identifier: Bss+GgTdPMiZUaVeOsO/+tae+YDoj5C6IDAuWkWtBNs=
Subject key identifier: E9:33:61:8B:04:10:61:10:F7:B8:DF:E2:9C:61:E9:AF:E7:21:A0:8C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3EF6850722D3C3D9E8802246782210CE971B81B6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215703.roa
Signing time: Wed 20 May 2026 14:47:15 +0000
ROA not before: Wed 20 May 2026 14:42:15 +0000
ROA not after: Wed 19 May 2027 14:47:15 +0000
asID: 215703
IP address blocks: 150.241.230.0/24 maxlen: 24
155.117.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f6:85:07:22:d3:c3:d9:e8:80:22:46:78:22:10:ce:97:1b:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 20 14:42:15 2026 GMT
Not After : May 19 14:47:15 2027 GMT
Subject: CN=E933618B04106110F7B8DFE29C61E9AFE721A08C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:36:13:00:cc:2f:7c:4c:33:7a:fe:43:91:
6a:94:89:44:0f:65:b1:17:fe:64:f1:e6:90:22:42:
71:ee:ed:32:95:41:20:f6:1e:c2:bc:08:dc:6f:0e:
f2:c0:c0:c4:81:c9:09:55:a1:e6:fa:9e:d9:15:15:
a4:67:ab:eb:02:89:0b:fe:8d:96:be:77:96:c3:3f:
5b:9f:68:7c:dc:a7:bf:ae:f9:a2:c8:d0:52:1c:65:
82:47:69:c5:57:bf:8f:8d:df:4c:f7:f0:69:23:86:
af:6c:e5:d0:80:82:79:56:7a:03:58:a2:ed:ce:99:
eb:ef:42:c8:3d:69:80:82:74:88:2e:f6:89:a4:47:
f8:b6:56:77:28:ff:b9:64:1a:ec:d1:34:4e:2b:2d:
51:69:e0:3a:82:72:b7:5e:2b:76:9a:40:6b:df:fe:
77:28:51:fd:0c:be:78:76:79:2d:f7:dd:b2:05:e3:
bf:fb:a6:c3:fc:0b:70:b3:2a:74:51:38:dd:cb:63:
2e:48:f8:cb:7e:32:55:ec:17:87:61:25:90:4b:5d:
4d:82:95:ed:f8:b3:c8:1c:d9:15:bf:d0:15:ff:c6:
06:42:4f:1d:ac:41:07:7a:9d:08:4f:eb:01:58:8e:
ca:88:c8:03:09:78:5c:b3:49:f6:78:bc:ca:58:9c:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:33:61:8B:04:10:61:10:F7:B8:DF:E2:9C:61:E9:AF:E7:21:A0:8C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.230.0/24
155.117.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0e:0f:96:26:29:98:68:02:ac:43:9e:8d:e7:be:ad:fe:ae:
ad:6d:bc:ee:2e:c0:fa:12:9b:44:b9:ac:62:f8:0e:9b:68:7c:
4e:2b:64:01:57:4e:f3:bb:ad:f4:27:b9:78:c8:ce:ab:2a:15:
0a:e5:05:5c:ea:67:3a:fb:07:87:55:9c:88:59:89:35:90:ca:
97:51:09:1e:78:fc:8c:6e:8d:95:f8:8a:af:07:a4:95:cb:ef:
93:1b:17:06:42:3f:c9:94:3c:2a:e7:b2:e9:45:60:bf:19:ca:
91:86:c5:84:8e:25:11:81:5e:19:53:b1:88:e3:8a:7e:f6:47:
21:04:43:ec:8e:83:da:9c:b1:02:31:72:52:c9:d0:3c:1f:24:
27:14:b0:44:53:cf:6f:50:e3:12:bb:75:4d:7d:a0:04:61:13:
5d:fb:1e:eb:e0:11:ec:8e:63:9e:19:eb:3c:fd:50:01:0c:2b:
de:ae:d2:dd:ca:b7:8f:7e:69:60:87:3e:84:5c:79:6a:04:31:
2d:6a:1b:c4:16:05:69:80:99:a0:0a:47:4b:3d:11:2a:86:c6:
51:20:a8:03:20:64:76:5a:a7:a1:1c:2e:57:14:db:d2:81:2b:
8e:30:59:80:c3:90:57:f7:3f:5b:95:73:1f:32:c9:8c:e9:53:
c2:85:95:fb
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUPvaFByLTw9nogCJGeCIQzpcbgbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA1MjAxNDQyMTVaFw0yNzA1MTkxNDQ3MTVaMDMxMTAvBgNV
BAMTKEU5MzM2MThCMDQxMDYxMTBGN0I4REZFMjlDNjFFOUFGRTcyMUEwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYTYTAMwvfEwzev5DkWqUiUQP
ZbEX/mTx5pAiQnHu7TKVQSD2HsK8CNxvDvLAwMSByQlVoeb6ntkVFaRnq+sCiQv+
jZa+d5bDP1ufaHzcp7+u+aLI0FIcZYJHacVXv4+N30z38Gkjhq9s5dCAgnlWegNY
ou3OmevvQsg9aYCCdIgu9omkR/i2Vnco/7lkGuzRNE4rLVFp4DqCcrdeK3aaQGvf
/ncoUf0Mvnh2eS333bIF47/7psP8C3CzKnRRON3LYy5I+Mt+MlXsF4dhJZBLXU2C
le34s8gc2RW/0BX/xgZCTx2sQQd6nQhP6wFYjsqIyAMJeFyzSfZ4vMpYnBoLAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU6TNhiwQQYRD3uN/inGHpr+choIwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1NzAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlvHm
AwQAm3V1MA0GCSqGSIb3DQEBCwUAA4IBAQB7Dg+WJimYaAKsQ56N576t/q6tbbzu
LsD6EptEuaxi+A6baHxOK2QBV07zu630J7l4yM6rKhUK5QVc6mc6+weHVZyIWYk1
kMqXUQkeePyMbo2V+IqvB6SVy++TGxcGQj/JlDwq57LpRWC/GcqRhsWEjiURgV4Z
U7GI44p+9kchBEPsjoPanLECMXJSydA8HyQnFLBEU89vUOMSu3VNfaAEYRNd+x7r
4BHsjmOeGes8/VABDCvertLdyrePfmlghz6EXHlqBDEtahvEFgVpgJmgCkdLPREq
hsZRIKgDIGR2WqehHC5XFNvSgSuOMFmAw5BX9z9blXMfMsmM6VPChZX7
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:21 2026 by rpki-client