Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
File: AS215727.roa (raw, json)
Hash identifier: QVoQwaIbpQYBVkNq4GL/Mle7yOf6DfgkpCgl7CK5YVw=
Subject key identifier: A8:23:4A:E3:B8:A3:B0:EA:31:F2:80:80:31:17:C9:8A:8E:16:F0:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7BC7D75338406C626E5478E3389B35B0790BE5A7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
Signing time: Sun 20 Sep 2026 07:19:21 +0000
ROA not before: Sun 20 Sep 2026 07:14:21 +0000
ROA not after: Sun 19 Sep 2027 07:19:21 +0000
asID: 215727
IP address blocks: 150.241.199.0/24 maxlen: 24
162.141.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c7:d7:53:38:40:6c:62:6e:54:78:e3:38:9b:35:b0:79:0b:e5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 07:14:21 2026 GMT
Not After : Sep 19 07:19:21 2027 GMT
Subject: CN=A8234AE3B8A3B0EA31F280803117C98A8E16F08F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:02:34:dd:0f:50:f4:a7:98:c8:bd:be:4e:
71:39:a1:e5:57:5c:08:47:92:b2:f3:22:ad:0d:56:
4b:fe:4d:86:9e:55:a5:3d:4b:15:34:30:ae:52:9e:
11:01:a8:33:37:1a:c9:c2:43:df:8c:cf:32:12:c7:
6b:e3:b0:ec:2e:bd:2d:08:58:b4:9f:3f:2d:2c:58:
5f:ce:78:b8:30:4a:b4:71:3e:00:a7:20:e1:aa:70:
1e:e2:44:45:e3:a7:50:49:93:cc:90:74:4b:49:d3:
cb:cc:75:32:29:c5:ee:3c:82:09:eb:87:0a:20:bb:
6f:35:a0:54:a1:a5:03:4c:d4:c8:9e:f7:7f:d2:77:
95:72:73:be:06:fc:9c:a2:43:15:0f:81:61:66:85:
f2:8a:d4:15:e0:7f:16:e2:3a:42:0b:af:26:aa:c9:
99:93:39:ec:9c:a0:07:d3:db:a3:9e:2a:65:fd:84:
15:7a:33:cb:e8:c9:b8:02:6e:94:e7:16:2f:18:74:
f9:c7:99:73:a2:2d:21:02:6c:31:c0:1f:a7:c1:d0:
73:f8:db:67:3c:96:51:a7:09:c1:8b:47:ec:6b:41:
a0:ca:96:6d:57:ec:4d:cd:72:0e:be:39:8d:cc:f6:
14:db:fd:07:ec:17:4e:1f:91:1f:25:a5:eb:7e:5f:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:4A:E3:B8:A3:B0:EA:31:F2:80:80:31:17:C9:8A:8E:16:F0:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.199.0/24
162.141.115.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:68:13:a4:ba:11:bd:c1:e3:92:53:55:8f:b4:74:74:45:71:
22:16:b6:af:10:b0:6b:ec:86:5b:1d:f1:28:df:e4:92:64:52:
6f:3d:26:99:7d:c3:b6:07:fd:7b:c5:9f:91:dd:be:1d:e2:46:
27:1a:f6:fb:a9:a5:c0:77:28:4e:b5:ae:73:04:83:71:f5:37:
63:85:55:4c:53:e9:c1:d7:bf:da:98:57:30:ae:74:e4:e4:17:
f1:1b:60:4f:a0:88:d1:75:4b:9b:1d:46:bd:a3:89:2f:ff:af:
a1:a4:4e:7d:2a:03:b6:54:05:d2:3f:88:80:c5:06:e7:18:fb:
c9:38:24:ad:ca:6b:89:01:10:5a:ee:af:0e:25:fa:f8:2b:ad:
68:82:8b:cb:7f:15:3e:e9:71:2d:51:b8:ce:c6:c5:57:cb:ee:
c8:a1:04:a4:d2:32:ea:e8:52:6d:74:2d:13:f0:96:88:8c:83:
91:9e:9b:63:65:1e:98:1f:81:b2:c5:f8:c9:7c:9f:fc:1f:99:
d9:3a:99:99:10:90:d2:a8:94:56:2b:04:cf:a3:7f:21:2f:b5:
34:53:3f:32:1a:5a:ee:4b:61:92:be:b7:f2:1e:94:21:cb:b8:
71:c5:8b:2d:2f:69:b8:27:4b:3e:b5:31:98:00:55:5b:5c:f8:
a9:48:da:52
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUe8fXUzhAbGJuVHjjOJs1sHkL5acwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjAwNzE0MjFaFw0yNzA5MTkwNzE5MjFaMDMxMTAvBgNV
BAMTKEE4MjM0QUUzQjhBM0IwRUEzMUYyODA4MDMxMTdDOThBOEUxNkYwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxgI03Q9Q9KeYyL2+TnE5oeVX
XAhHkrLzIq0NVkv+TYaeVaU9SxU0MK5SnhEBqDM3GsnCQ9+MzzISx2vjsOwuvS0I
WLSfPy0sWF/OeLgwSrRxPgCnIOGqcB7iREXjp1BJk8yQdEtJ08vMdTIpxe48ggnr
hwogu281oFShpQNM1Mie93/Sd5Vyc74G/JyiQxUPgWFmhfKK1BXgfxbiOkILryaq
yZmTOeycoAfT26OeKmX9hBV6M8voybgCbpTnFi8YdPnHmXOiLSECbDHAH6fB0HP4
22c8llGnCcGLR+xrQaDKlm1X7E3Ncg6+OY3M9hTb/QfsF04fkR8lpet+X7ujAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUqCNK47ijsOox8oCAMRfJio4W8I8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1NzI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlvHH
AwQAoo1zMA0GCSqGSIb3DQEBCwUAA4IBAQC7aBOkuhG9weOSU1WPtHR0RXEiFrav
ELBr7IZbHfEo3+SSZFJvPSaZfcO2B/17xZ+R3b4d4kYnGvb7qaXAdyhOta5zBINx
9TdjhVVMU+nB17/amFcwrnTk5BfxG2BPoIjRdUubHUa9o4kv/6+hpE59KgO2VAXS
P4iAxQbnGPvJOCStymuJARBa7q8OJfr4K61ogovLfxU+6XEtUbjOxsVXy+7IoQSk
0jLq6FJtdC0T8JaIjIORnptjZR6YH4GyxfjJfJ/8H5nZOpmZEJDSqJRWKwTPo38h
L7U0Uz8yGlruS2GSvrfyHpQhy7hxxYstL2m4J0s+tTGYAFVbXPipSNpS
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:44:31 2026 by rpki-client