Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: op9MK61A52toUWs0Y51RwaAQHNWadGmex+/0/Hvxrvs=
Subject key identifier: 0C:4B:C0:32:AE:32:C2:2C:40:F7:97:B4:19:4E:D0:44:06:C6:0C:6A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 054EDC055640975258B2F60B1F35129DD343823F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215224.roa
Signing time: Wed 04 Nov 2026 00:49:39 +0000
ROA not before: Wed 04 Nov 2026 00:44:39 +0000
ROA not after: Wed 03 Nov 2027 00:49:39 +0000
asID: 215224
IP address blocks: 181.215.178.0/24 maxlen: 24
191.96.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4e:dc:05:56:40:97:52:58:b2:f6:0b:1f:35:12:9d:d3:43:82:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 00:44:39 2026 GMT
Not After : Nov 3 00:49:39 2027 GMT
Subject: CN=0C4BC032AE32C22C40F797B4194ED04406C60C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:38:a9:53:0d:b1:33:7f:50:64:cd:5f:75:
65:99:b6:74:df:da:45:30:a3:a0:08:ff:1e:a7:a7:
93:9d:c6:96:d8:37:22:e5:bf:86:3c:ee:f4:15:a3:
ef:cd:37:e2:8e:48:af:f9:d9:5c:f5:e0:d4:cc:62:
ed:a0:1a:62:e7:d3:b4:26:5d:83:15:d7:23:e7:21:
75:28:a1:70:fa:5b:0c:39:b0:7c:a4:e6:01:b8:93:
69:d2:ff:ad:90:5a:fc:ab:5c:79:8e:57:de:f3:e6:
49:60:43:84:6c:2e:eb:55:6e:76:fe:9d:48:23:4f:
31:36:c3:5e:da:07:27:ac:e5:28:38:8e:70:ac:36:
6e:bb:b5:34:b9:e6:61:5f:06:73:c3:e7:48:4f:ac:
16:39:8c:6c:69:63:ca:8c:3d:14:67:33:a3:94:47:
55:45:62:1c:d0:11:53:7e:6b:19:b2:d0:b0:79:8d:
d1:61:1d:f3:60:d0:c5:8f:ca:bf:d6:b1:27:78:19:
01:b4:da:0c:eb:df:95:db:e9:4c:c5:e2:3b:d6:7a:
7e:9e:21:ce:c9:0d:1d:28:7f:e2:bb:ab:64:bf:7f:
f0:38:50:d8:64:69:0f:f7:87:89:0a:a0:ed:85:8b:
d1:b5:24:ce:ff:1f:5f:0a:3a:47:8a:15:b1:10:be:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:C0:32:AE:32:C2:2C:40:F7:97:B4:19:4E:D0:44:06:C6:0C:6A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.178.0/24
191.96.100.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d5:ad:b0:73:06:fb:4e:8b:1a:9f:06:77:a5:01:a3:6e:fe:
75:89:98:7c:e3:51:97:bd:e1:29:97:66:4c:26:75:f8:a0:4d:
dc:9d:a1:5c:36:db:fb:d6:34:5a:88:2b:4b:e7:29:e9:f9:88:
67:1c:e7:e7:05:fe:1a:0a:8d:a2:9e:79:1c:85:a4:99:3b:07:
52:cb:f8:9f:07:5c:c9:d9:cb:63:33:a0:5f:60:a1:31:16:e7:
1a:8a:f6:39:70:91:7b:8b:d3:a7:91:d8:26:36:50:77:e3:98:
1b:52:cb:e4:e0:ea:2f:ec:aa:41:89:82:ad:53:77:06:34:8c:
a3:92:93:cb:59:7b:46:4f:ec:22:a9:9e:8c:d1:ce:7f:6a:12:
7e:09:10:b1:b0:a8:5a:64:2b:15:3f:86:4d:d1:9c:6d:e0:06:
55:c5:ae:b2:c0:43:75:e7:03:47:ae:9f:d4:dd:78:57:8a:fb:
e4:a7:ba:42:5c:e0:db:26:66:bc:74:37:84:0b:71:35:a0:52:
68:c3:36:5a:a6:c3:19:0e:f9:e6:ed:05:cc:1b:0a:40:2e:ee:
1d:1a:61:88:5f:9e:bd:2d:10:ef:0e:4b:7b:52:39:c5:3f:c1:
b1:ed:60:40:c9:b2:b6:0e:64:1b:89:64:ce:b6:ce:c6:3e:54:
1f:e8:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:18:56 2026 by rpki-client