Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215355.roa
File: AS215355.roa (raw, json)
Hash identifier: 5oyx/2yoW5W03HnE9c3dVYnRjTyQ5VkMCFiYUhTsJSY=
Subject key identifier: AB:CC:44:4B:31:34:96:AA:B1:17:B8:C2:32:5B:58:6E:A9:1D:34:64
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0D355ADFBF368355E7A18B073C4985796771409A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215355.roa
Signing time: Wed 11 Feb 2026 16:55:38 +0000
ROA not before: Wed 11 Feb 2026 16:50:38 +0000
ROA not after: Wed 10 Feb 2027 16:55:38 +0000
asID: 215355
IP address blocks: 181.215.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:35:5a:df:bf:36:83:55:e7:a1:8b:07:3c:49:85:79:67:71:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 11 16:50:38 2026 GMT
Not After : Feb 10 16:55:38 2027 GMT
Subject: CN=ABCC444B313496AAB117B8C2325B586EA91D3464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:62:2c:a6:c4:39:2b:f8:d5:5e:ac:15:80:
f0:f1:62:05:2f:ff:35:b7:9f:62:11:1c:cc:b4:8b:
f6:ab:74:45:aa:b6:a4:4a:42:ff:63:c9:19:83:cc:
90:58:fd:47:e4:d8:a4:4c:77:c2:b2:1a:1c:f8:ba:
ff:fc:80:ea:23:de:b8:94:b4:f0:df:e0:fe:fc:c5:
71:e2:09:15:81:f5:b0:e3:d1:c8:95:74:44:b5:42:
c7:d6:5b:19:ac:0b:15:03:41:c7:b3:3f:1d:59:0e:
5c:71:05:d0:66:f3:e5:22:10:51:86:17:7d:a4:b2:
89:47:41:6f:6a:60:8c:3d:4f:77:35:59:6b:5a:82:
44:d1:c6:37:df:36:b3:45:8c:b7:f8:57:50:31:97:
4f:d2:71:f5:92:a7:18:22:17:53:8f:8b:9f:bf:c2:
94:72:86:96:b1:c5:23:7b:76:97:e3:0a:6f:84:78:
1b:bf:11:2d:cb:ef:82:0c:22:55:17:e4:7c:5d:aa:
6e:ff:48:32:ed:d5:b2:29:2e:31:8b:16:b7:87:88:
63:0f:1a:6b:c0:ae:24:71:0a:54:50:89:0d:90:ba:
c8:6f:61:a8:5d:2c:ee:40:e6:9d:d4:5e:c1:d7:bb:
10:5d:ee:f8:8b:43:dd:a5:f2:16:fc:8f:66:ac:1c:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:44:4B:31:34:96:AA:B1:17:B8:C2:32:5B:58:6E:A9:1D:34:64
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.6.0/24
Signature Algorithm: sha256WithRSAEncryption
80:31:3c:35:de:a9:82:9c:75:84:4f:e8:ba:4d:7c:0a:f1:65:
81:02:54:65:5c:8a:45:13:ca:a5:eb:45:36:cd:8d:54:37:40:
c8:b3:be:f9:56:f0:b4:cf:71:22:89:fe:bf:16:cf:d3:d5:58:
8d:be:7f:3a:2d:ab:5a:9a:c2:f0:d8:4b:0b:23:af:45:6a:3d:
80:0d:9c:c3:3c:89:e7:14:e2:05:37:c8:72:1e:1a:8c:b4:2f:
38:e1:6d:9f:05:75:3f:27:df:95:68:83:bf:b5:02:8f:db:02:
9c:bc:0c:81:b8:0c:25:25:93:bf:02:1b:61:84:ff:1f:34:19:
65:f8:c8:d4:d0:aa:e8:1d:b0:53:61:1e:5e:ad:0a:70:49:e9:
bc:37:41:a4:af:d8:8d:35:47:53:7d:a2:1c:be:03:97:31:8e:
3c:b3:fc:f9:ff:c1:46:43:91:a5:c3:64:c5:30:8e:18:b8:4c:
ce:88:27:99:6a:fe:41:04:78:cb:4e:1a:90:79:ff:ce:36:ab:
c1:09:01:26:82:a6:02:b0:3a:14:12:b5:d1:15:c3:28:34:3e:
86:7c:a6:dd:c1:bb:93:7c:e0:0e:3f:82:49:e8:2e:33:f1:19:
c5:18:59:37:22:4f:68:de:ac:cb:79:28:5f:f5:22:dd:12:d5:
96:4a:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:19 2026 by rpki-client