Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215594.roa
File: AS215594.roa (raw, json)
Hash identifier: GLPfrHikL7aMjGW3KZ5v51O8SbSlulvQzSyXetzVNsU=
Subject key identifier: CF:3C:F4:B3:EF:20:C3:1E:5C:B5:BC:B4:8D:A4:AA:7C:2B:D8:A1:AC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6F9052F407B041ADC89C92FFA663CA5BCE45195C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215594.roa
Signing time: Tue 31 Mar 2026 07:22:16 +0000
ROA not before: Tue 31 Mar 2026 07:17:16 +0000
ROA not after: Tue 30 Mar 2027 07:22:16 +0000
asID: 215594
IP address blocks: 181.215.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:90:52:f4:07:b0:41:ad:c8:9c:92:ff:a6:63:ca:5b:ce:45:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 31 07:17:16 2026 GMT
Not After : Mar 30 07:22:16 2027 GMT
Subject: CN=CF3CF4B3EF20C31E5CB5BCB48DA4AA7C2BD8A1AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:7f:c4:33:ec:dc:26:4e:a0:dd:06:fb:4c:
65:d9:51:32:53:c6:ff:d8:1a:16:d7:d9:84:86:1e:
9e:fb:8a:26:75:9e:06:3b:2b:04:c2:ff:9b:8d:65:
9c:b8:f1:c0:9c:3b:e4:27:c7:cc:dc:62:62:bf:e1:
b8:13:48:b9:ca:ed:c5:4f:1c:27:0e:20:96:28:1a:
3b:ee:d9:b7:32:fe:81:b4:38:e8:33:b3:87:f4:21:
0e:49:65:9f:cc:03:5e:b1:8b:c2:4a:28:0c:ed:d9:
1b:11:87:80:9a:c8:e5:49:d0:b4:0c:76:97:8a:ce:
8b:52:8a:da:a9:75:d1:95:9f:48:c8:2c:04:34:96:
6e:95:fa:58:12:11:78:67:5c:88:52:57:e4:f3:10:
75:e2:6f:aa:c4:1e:3f:a0:1d:0a:33:14:6d:97:1f:
a7:b1:5e:cc:9f:18:54:80:d5:e7:4d:12:26:bd:0e:
5f:ef:90:65:c4:9d:b7:66:58:76:15:57:1a:c8:a8:
11:91:83:62:2b:5c:9c:33:0f:fb:be:e9:30:38:66:
77:b7:84:a0:af:da:ef:3d:57:bb:a2:1a:b0:7e:94:
98:3c:a5:72:33:be:09:0b:03:bd:50:1b:86:76:21:
25:08:29:c3:bd:d4:37:35:e5:d2:4e:65:7a:29:d7:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:F4:B3:EF:20:C3:1E:5C:B5:BC:B4:8D:A4:AA:7C:2B:D8:A1:AC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.110.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c7:d2:be:ab:62:64:81:36:18:c9:d1:2d:4f:c1:32:65:a1:
12:05:f1:df:97:b6:5b:5f:74:1d:9e:64:12:d6:56:c0:38:3c:
90:9a:30:d2:1a:bf:0e:86:e9:d8:12:84:05:d3:1a:5b:7f:50:
86:5e:b2:69:9b:f7:ac:57:e7:1a:6e:81:da:c4:5a:33:3a:8c:
72:ef:05:36:2a:56:7f:a4:a5:f8:2a:e2:4f:33:e0:af:ce:e0:
c8:1f:a2:1b:54:e7:8f:bc:df:fa:91:86:43:66:b6:fa:67:12:
b6:1b:02:1b:0f:73:50:ab:d7:b1:ab:99:29:44:7b:42:1a:31:
aa:dc:87:49:af:9f:dd:36:28:a6:ce:e8:e9:ce:0a:a1:ec:ea:
3d:b3:b9:d1:a9:38:7b:ed:52:34:a8:a9:94:cf:7e:ec:9e:e5:
cb:ba:ca:57:b7:c7:d8:2f:82:a0:92:f9:e2:57:8a:c5:22:5b:
4b:3f:e8:71:6e:9b:1e:ba:35:5e:92:37:b2:ef:c2:07:ed:52:
c9:8c:1b:6d:d8:95:11:b8:ef:53:38:2b:60:4d:af:24:61:95:
50:89:8b:be:48:57:2a:87:2e:2c:f8:52:5d:9d:3e:34:3f:91:
de:49:7f:8c:5f:51:19:bd:7f:2b:bd:3e:b4:c8:fe:87:d1:69:
5f:47:64:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUb5BS9AewQa3InJL/pmPKW85FGVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAzMzEwNzE3MTZaFw0yNzAzMzAwNzIyMTZaMDMxMTAvBgNV
BAMTKENGM0NGNEIzRUYyMEMzMUU1Q0I1QkNCNDhEQTRBQTdDMkJEOEExQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInn/EM+zcJk6g3Qb7TGXZUTJT
xv/YGhbX2YSGHp77iiZ1ngY7KwTC/5uNZZy48cCcO+Qnx8zcYmK/4bgTSLnK7cVP
HCcOIJYoGjvu2bcy/oG0OOgzs4f0IQ5JZZ/MA16xi8JKKAzt2RsRh4CayOVJ0LQM
dpeKzotSitqpddGVn0jILAQ0lm6V+lgSEXhnXIhSV+TzEHXib6rEHj+gHQozFG2X
H6exXsyfGFSA1edNEia9Dl/vkGXEnbdmWHYVVxrIqBGRg2IrXJwzD/u+6TA4Zne3
hKCv2u89V7uiGrB+lJg8pXIzvgkLA71QG4Z2ISUIKcO91Dc15dJOZXop1yOzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUzzz0s+8gwx5ctby0jaSqfCvYoawwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE1NTk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtddu
MA0GCSqGSIb3DQEBCwUAA4IBAQBDx9K+q2JkgTYYydEtT8EyZaESBfHfl7ZbX3Qd
nmQS1lbAODyQmjDSGr8OhunYEoQF0xpbf1CGXrJpm/esV+caboHaxFozOoxy7wU2
KlZ/pKX4KuJPM+CvzuDIH6IbVOePvN/6kYZDZrb6ZxK2GwIbD3NQq9exq5kpRHtC
GjGq3IdJr5/dNiimzujpzgqh7Oo9s7nRqTh77VI0qKmUz37snuXLuspXt8fYL4Kg
kvniV4rFIltLP+hxbpseujVekjey78IH7VLJjBtt2JURuO9TOCtgTa8kYZVQiYu+
SFcqhy4s+FJdnT40P5HeSX+MX1EZvX8rvT60yP6H0WlfR2Q4
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:25 2026 by rpki-client