Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215645.roa
File: AS215645.roa (raw, json)
Hash identifier: 5gB0eLHCxjmqKtt53iwHF5Hg7fanYPd1RVdt1Vkik44=
Subject key identifier: 27:D1:32:CA:FF:E0:21:D2:8A:5D:75:9B:50:1C:F1:CE:D3:24:2B:2A
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 497587E069EC5B9B2049111CDE8F272FBA63A954
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215645.roa
Signing time: Sat 18 Apr 2026 11:54:06 +0000
ROA not before: Sat 18 Apr 2026 11:49:06 +0000
ROA not after: Sat 17 Apr 2027 11:54:06 +0000
asID: 215645
IP address blocks: 85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:75:87:e0:69:ec:5b:9b:20:49:11:1c:de:8f:27:2f:ba:63:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 18 11:49:06 2026 GMT
Not After : Apr 17 11:54:06 2027 GMT
Subject: CN=27D132CAFFE021D28A5D759B501CF1CED3242B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:b7:29:04:95:57:ca:18:dc:75:6d:a3:4b:
d2:e9:ae:bc:23:c7:0b:a0:4b:df:42:20:6c:17:90:
6c:ec:d8:72:79:90:28:02:e8:43:47:cf:b3:52:92:
c3:a9:05:31:f7:5f:4a:b2:94:2a:e4:42:5d:36:b8:
aa:e2:76:c7:af:fc:7b:c9:0a:19:83:3c:28:09:d4:
9c:e9:3a:4c:9e:9f:46:8f:a1:0e:8e:3f:5a:59:9e:
53:98:f7:78:c3:16:35:f9:12:94:ed:86:ab:92:8a:
5e:ac:fd:9f:05:bc:6a:80:70:80:a8:80:9e:e5:bc:
37:0a:95:48:b0:7d:6e:89:66:cb:25:4a:f7:42:37:
2e:9e:71:94:37:bc:c5:78:7c:2f:b7:7c:10:00:cf:
f6:c8:88:92:d9:86:8c:8b:a1:37:9e:fa:cb:ff:6e:
49:78:a0:01:ef:a3:57:23:9b:36:48:6a:50:fd:4f:
ef:59:2e:27:7b:1a:3a:43:09:87:c6:0f:dd:c8:7d:
54:f7:09:db:68:9d:0a:52:6e:05:89:eb:58:f4:d2:
64:e8:8f:b8:ef:d0:0c:b3:2e:64:58:5a:0c:59:84:
55:1a:3e:f9:63:eb:78:e9:4e:0e:c9:5b:80:44:05:
5a:2b:dd:3f:17:4e:c8:cf:c6:c9:f1:e8:21:3f:75:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:32:CA:FF:E0:21:D2:8A:5D:75:9B:50:1C:F1:CE:D3:24:2B:2A
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0-85.235.74.255
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:49:41:3b:58:a8:2e:97:86:14:68:aa:e3:da:e7:80:b3:6d:
4e:aa:1a:49:4e:da:32:ea:8d:88:38:2e:dd:1b:37:25:7c:41:
86:f8:4b:09:46:27:63:65:11:ce:e3:82:66:d9:b6:14:6e:ae:
00:2c:9d:45:26:9b:2a:fb:d4:5a:7b:91:07:00:c6:df:2b:dc:
b6:ac:43:15:f9:f1:ec:65:13:9e:1c:7b:45:e1:29:4f:51:76:
c5:68:c0:98:58:68:17:86:7e:a7:dd:d3:5d:a2:c7:ac:f7:10:
99:a3:9a:7a:52:5f:2e:f9:37:c9:be:2e:2a:dd:9e:93:12:7e:
01:d2:e1:21:d7:cc:51:47:2c:e5:b6:f5:19:70:31:f6:d0:dd:
3f:0e:15:f7:5f:08:be:2d:b6:c9:c3:3a:02:05:f7:24:0c:5a:
f7:f5:c1:ce:e3:7e:48:d7:12:24:0a:54:61:cb:26:43:cc:c8:
05:ad:79:8b:d2:3f:18:1c:ac:28:ca:51:a1:1c:ae:94:51:5c:
3c:90:69:bd:02:ba:c3:94:a0:b4:bf:5e:f2:24:ae:8f:0f:10:
94:1f:dc:8f:7e:e0:89:a9:79:64:b6:04:1b:bc:f2:d7:70:8f:
fd:84:b7:67:d4:93:94:4f:fb:b5:1f:d7:14:be:96:24:4f:d1:
c4:e2:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:19 2026 by rpki-client