Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215311.roa
File: AS215311.roa (raw, json)
Hash identifier: jSsQn6oTApP7vNTy7e9Nc35bi+FajJu1IoD7KZKHHU8=
Subject key identifier: C0:77:D1:9E:E5:46:49:2D:41:EA:1B:58:CE:86:D4:27:85:7B:82:7A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 57E47321B5D1998EDA78306D09FD736FBFEA1406
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215311.roa
Signing time: Mon 16 Feb 2026 00:55:38 +0000
ROA not before: Mon 16 Feb 2026 00:50:38 +0000
ROA not after: Mon 15 Feb 2027 00:55:38 +0000
asID: 215311
IP address blocks: 181.215.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e4:73:21:b5:d1:99:8e:da:78:30:6d:09:fd:73:6f:bf:ea:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 16 00:50:38 2026 GMT
Not After : Feb 15 00:55:38 2027 GMT
Subject: CN=C077D19EE546492D41EA1B58CE86D427857B827A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:c6:08:73:9a:18:96:06:27:3c:96:91:87:
af:37:7e:9f:aa:a3:08:e0:37:47:59:c9:65:f6:db:
5f:3c:59:f2:8c:85:a0:5c:99:10:a4:1b:21:da:12:
12:b5:a4:db:1d:cf:0a:cf:0f:e1:ad:66:36:bc:86:
07:c9:13:2f:2b:86:2c:20:7c:14:b4:d5:bb:29:bd:
1a:40:c4:4e:ed:e1:45:85:de:f0:a0:08:8e:70:24:
35:92:e7:e6:89:71:21:cd:aa:48:21:45:8c:72:9a:
86:80:6d:c6:5b:6e:15:1e:13:84:2c:1f:b2:62:a1:
27:76:2b:f5:96:a4:f7:41:64:5b:e7:64:b7:9e:4e:
8f:3f:91:ea:89:33:ca:7f:1f:64:e6:97:16:ef:4a:
11:62:15:f9:01:10:b7:ac:7b:60:85:40:6b:ff:e3:
94:9f:61:57:31:61:fd:2e:13:03:92:16:17:1a:a7:
af:d8:b8:4f:fb:e7:48:ed:38:b6:a7:a7:92:8b:ac:
3c:00:89:a9:4a:33:23:0e:3e:2b:0c:e3:89:ea:a5:
04:95:11:3c:84:19:d8:cb:ca:cf:b1:e9:45:81:59:
0d:55:db:47:fe:24:4d:86:75:f6:5e:88:e5:bc:c0:
b7:cb:a3:ba:81:50:12:4a:37:81:82:ac:de:01:b3:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:77:D1:9E:E5:46:49:2D:41:EA:1B:58:CE:86:D4:27:85:7B:82:7A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.39.0/24
Signature Algorithm: sha256WithRSAEncryption
01:64:6d:2e:47:0f:89:c3:05:58:93:51:9f:f5:4b:90:0c:29:
dc:97:6d:9f:65:a4:7f:f1:cc:7e:05:7d:b7:2e:bd:cc:19:f6:
14:42:f9:55:a4:a6:1c:6e:6e:af:ad:97:ce:0b:49:d3:aa:35:
f5:6c:98:3a:89:8f:3a:1e:c8:63:f4:a1:4a:c1:8d:cc:2b:fb:
55:f7:22:f4:ee:e3:a8:48:06:c7:4b:0a:78:16:51:1f:63:47:
12:7e:72:b7:cf:a6:ad:06:09:c0:f0:64:e9:54:a7:b1:95:62:
ba:36:57:97:2f:93:36:a5:dd:7f:b5:19:44:78:62:95:65:84:
62:18:c3:7b:ea:3e:6b:11:2a:0e:55:0e:79:48:2a:0b:61:9c:
1d:c4:2c:52:0c:a1:af:71:bb:6f:0f:fd:c3:ca:af:9c:de:d1:
22:72:ee:7a:cf:43:78:c4:65:c9:11:a6:b3:36:e3:8d:90:32:
d1:c5:40:b2:08:b9:02:10:d5:f3:88:1b:b0:62:4b:5b:50:18:
aa:38:8a:7c:a1:d5:eb:c5:ce:59:6e:45:96:12:98:c0:e9:12:
3c:63:70:26:74:0a:93:22:29:9b:1b:65:d8:9b:2d:a1:58:79:
c4:a4:a8:2e:c3:8e:7c:c3:86:01:f6:1f:9d:73:d8:b2:40:70:
fb:f8:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:17 2026 by rpki-client