Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215741.roa
File: AS215741.roa (raw, json)
Hash identifier: xLq86I68FUX/wPLgYXAb6j0xbj/mMt7pdq4beD4gOMg=
Subject key identifier: F3:D8:14:C8:8F:16:92:B0:4A:2C:80:AE:9D:D6:93:7D:1C:99:D0:AB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F5F584590AF8094DAFB756DA1DC38C37A744E2D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215741.roa
Signing time: Wed 22 Oct 2025 15:45:46 +0000
ROA not before: Wed 22 Oct 2025 15:40:46 +0000
ROA not after: Wed 21 Oct 2026 15:45:46 +0000
asID: 215741
IP address blocks: 143.14.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5f:58:45:90:af:80:94:da:fb:75:6d:a1:dc:38:c3:7a:74:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 22 15:40:46 2025 GMT
Not After : Oct 21 15:45:46 2026 GMT
Subject: CN=F3D814C88F1692B04A2C80AE9DD6937D1C99D0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:c7:76:72:30:f4:6e:7f:4d:7e:d1:2f:a9:
14:e5:7c:0a:6d:d4:dc:14:77:b0:f2:6a:55:2e:0f:
74:d3:4d:16:54:bc:fb:48:c5:0c:33:d8:2f:cd:af:
74:c6:96:95:be:fd:6c:44:69:9a:26:e0:e4:82:65:
e6:e2:cb:9c:b2:c4:da:5f:1a:7d:87:91:22:55:62:
63:2d:bb:88:6e:85:20:9b:ed:26:d6:8f:d2:f7:03:
1b:07:2c:ef:95:47:06:bd:39:fe:7b:38:25:ed:21:
22:30:69:f9:30:01:3d:cd:df:57:e1:3b:36:d2:77:
fa:20:84:b7:45:95:f0:6b:41:c3:ae:50:84:57:86:
cb:6d:5f:31:0f:c2:61:b5:d7:72:92:2d:9a:e1:96:
8f:e9:4c:4d:17:7e:07:4f:c0:19:16:7a:5b:20:d0:
d3:3a:53:f3:a5:58:03:27:5e:ef:97:56:5b:62:a4:
e6:fc:1e:cb:8c:38:8f:86:43:ff:e7:43:eb:40:d4:
ee:e5:69:49:73:32:2b:43:75:88:9d:d6:c9:ee:3f:
6f:aa:55:eb:b4:88:f5:1c:59:46:5f:5c:5d:4e:91:
7c:53:bd:2d:ca:d7:cc:65:1d:e1:7e:d7:f2:7e:1e:
78:cb:bf:54:12:59:96:48:87:7d:94:c7:15:ed:c3:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:14:C8:8F:16:92:B0:4A:2C:80:AE:9D:D6:93:7D:1C:99:D0:AB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.141.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f3:e9:d6:48:b5:28:a1:1b:0f:fc:fd:f0:b5:fd:0b:8d:1d:
b5:e0:4c:66:6e:7c:20:c1:6f:26:94:cd:66:1d:2c:2a:52:5d:
1a:b1:61:9a:dc:39:c3:db:65:87:46:ee:87:bd:62:38:b2:d7:
a3:5c:1e:d2:08:96:5e:e6:de:6f:f5:e5:d7:e5:9d:3d:a3:09:
cc:32:a0:64:73:67:1c:57:52:22:5b:56:e0:2f:0d:20:97:8b:
f0:89:f0:aa:2f:ce:cb:bc:bd:ac:62:9e:ea:78:da:dc:6d:98:
aa:48:d0:5d:53:5b:b1:22:88:bf:5b:58:4c:59:07:6d:a4:b0:
71:3a:3d:28:61:5b:c7:26:4a:4d:fa:04:a4:46:a0:96:41:24:
f6:5d:af:e0:78:76:06:bd:43:c1:9b:9f:2d:f9:89:31:de:39:
9c:c6:1f:f4:ae:86:c2:40:42:94:74:12:7d:2b:59:92:2b:e5:
e9:10:00:07:ed:ea:56:f6:cc:d1:dd:ee:e8:19:0e:e8:04:a5:
cd:49:df:a1:2f:f5:79:87:3a:38:fa:92:93:66:b6:79:e8:9d:
8f:65:07:1b:b7:05:c6:8d:32:ce:60:61:f3:dc:00:8b:8d:58:
f3:52:05:7f:c2:3a:71:2d:9b:e4:54:80:75:d9:15:17:6c:a3:
fe:04:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:05 2025 by rpki-client