Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
File: AS215727.roa (raw, json)
Hash identifier: kCcjWo7JRu/XjNWJP+UzNd8tf3JtsqUyiGDSvqOqWsY=
Subject key identifier: CC:7F:36:CB:3B:DD:72:EF:F8:46:A0:CB:A6:16:3E:BE:AE:DF:46:C8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 46F63BE9ABAA06B4337B6E2A2BB3AB0C33CD1CD5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
Signing time: Wed 15 Apr 2026 15:58:29 +0000
ROA not before: Wed 15 Apr 2026 15:53:29 +0000
ROA not after: Wed 14 Apr 2027 15:58:29 +0000
asID: 215727
IP address blocks: 143.14.181.0/24 maxlen: 24
143.14.191.0/24 maxlen: 24
162.141.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f6:3b:e9:ab:aa:06:b4:33:7b:6e:2a:2b:b3:ab:0c:33:cd:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 15 15:53:29 2026 GMT
Not After : Apr 14 15:58:29 2027 GMT
Subject: CN=CC7F36CB3BDD72EFF846A0CBA6163EBEAEDF46C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:1d:7e:60:a7:94:40:aa:f4:80:fe:fe:88:
81:11:b8:59:16:65:df:32:1b:fa:2d:a0:57:74:82:
3c:f8:bd:e4:e7:ce:38:58:e3:1f:74:b0:d6:3d:e6:
da:aa:64:78:9c:b8:13:60:6b:07:cc:69:f5:9f:67:
3f:60:53:6d:b0:49:22:92:25:91:d1:6e:1a:5a:33:
7d:4b:79:b0:9a:ec:18:5e:38:00:f9:b3:b5:97:9c:
20:75:7d:30:7f:5b:d4:bd:30:88:51:e0:2f:bf:87:
59:df:fa:9e:06:bd:b6:84:c6:8d:e0:93:59:06:27:
26:fc:91:b0:e6:bd:2e:19:7c:3e:c8:62:3a:43:c4:
b3:c5:17:12:38:03:a1:20:06:61:fb:4a:a6:09:60:
62:9d:a6:ba:8f:60:ec:ba:7a:09:30:0e:63:b4:20:
92:74:e0:06:e1:b3:37:8a:de:f2:9d:68:74:4d:82:
66:89:5f:19:9a:a0:13:e2:01:63:a7:36:a3:75:90:
56:21:26:b3:6d:a2:62:02:ee:72:53:f8:93:fa:53:
00:1f:ad:b6:b5:f5:38:42:4d:37:03:27:f9:e0:9a:
76:74:06:6d:57:9a:13:ae:d1:08:2d:2a:64:5e:d5:
ac:5c:fb:99:c8:db:bb:dc:89:d4:0f:59:cc:aa:58:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:36:CB:3B:DD:72:EF:F8:46:A0:CB:A6:16:3E:BE:AE:DF:46:C8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.181.0/24
143.14.191.0/24
162.141.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b2:3e:24:8f:45:d5:d5:04:0d:26:38:9c:a6:9f:37:47:cb:
59:81:6c:84:9e:62:9a:07:78:7b:d1:34:ef:ab:cc:11:3a:47:
67:1b:71:67:e4:72:2a:a8:8a:c7:6f:32:25:56:26:92:70:1a:
db:da:0b:35:be:a8:84:b4:a4:35:59:38:43:37:a5:cd:54:60:
d4:9f:0a:c2:ca:46:5f:d2:41:86:a1:06:c4:33:62:28:30:9e:
d8:8a:5f:db:6a:ff:1e:0d:3c:e1:00:26:bc:8a:6c:b8:d5:76:
54:10:d4:2d:c3:41:60:90:bc:77:e8:fe:ce:3d:f1:84:7c:d7:
cf:00:ae:0f:29:ce:21:cc:57:b0:ec:a6:cd:75:dc:20:17:6e:
74:83:8e:76:d6:96:fa:c0:05:c9:71:5f:e4:e7:aa:9b:2e:55:
4e:a6:9b:f7:3c:58:90:45:15:66:22:ea:b5:58:79:cf:dd:53:
a5:87:f1:a6:39:eb:6e:86:5d:cc:41:80:64:4a:6e:df:95:48:
e8:8a:be:fb:bb:a2:84:39:d9:69:11:7c:dc:29:5b:4c:e6:5e:
7f:73:9e:c2:aa:b2:53:65:8e:ed:c7:56:6d:24:74:dd:b9:64:
ec:2f:67:2a:b4:ea:34:15:b1:6b:bb:5a:13:86:ff:14:42:2b:
3f:0f:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:38 2026 by rpki-client