Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215006.roa
File: AS215006.roa (raw, json)
Hash identifier: zrDMBTpXmI8aBrsgRUrYw/6SYmLAeMd7flIO31+3mkc=
Subject key identifier: 27:32:38:E9:5F:41:EE:AD:96:29:5C:B4:79:FB:D7:1F:03:DB:C9:1D
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 18938948B5D2BCABC60A56B6A0E570202D56573E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215006.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 215006
IP address blocks: 2a0e:8f02:f06c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:93:89:48:b5:d2:bc:ab:c6:0a:56:b6:a0:e5:70:20:2d:56:57:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=273238E95F41EEAD96295CB479FBD71F03DBC91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:79:e4:4f:4d:81:3d:3c:f9:c2:16:2f:b4:
0a:49:87:f5:83:62:d7:16:c0:37:64:53:3f:e5:08:
dc:e0:d9:12:6c:cb:c0:96:57:ab:32:19:5d:2a:72:
bb:60:b0:29:cd:6c:26:79:49:7d:90:a5:ed:a6:e3:
ae:d9:54:11:62:22:54:33:c0:33:a0:bf:29:a8:40:
5c:6a:fb:f5:86:c4:8f:ee:13:ef:b1:14:2b:00:a5:
4e:0f:79:ea:8c:43:7d:99:25:cb:1e:09:47:65:93:
7f:36:02:8f:27:90:85:00:b1:7c:d0:5a:2b:17:87:
61:ed:8d:06:3f:4a:e5:6f:c6:bf:d8:65:ad:a1:28:
fe:86:a6:62:09:8d:a1:55:3c:ae:6a:a5:75:92:62:
80:5b:14:47:af:b9:c6:08:3f:32:23:41:fb:be:ce:
95:38:01:00:ab:c1:b9:48:35:75:7e:c1:85:40:24:
64:85:6a:60:50:9a:b5:99:85:8e:46:70:41:e0:77:
fe:4d:0c:4e:d9:9f:e1:ec:28:b0:83:08:5b:a0:a6:
76:4a:ec:d9:fe:50:90:89:c9:2f:98:69:3d:0d:74:
c1:4c:be:cf:1c:9d:05:48:21:a6:e8:5c:16:9e:99:
ab:1f:5b:d0:0f:ca:ae:94:77:45:89:7e:1a:6e:f0:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:38:E9:5F:41:EE:AD:96:29:5C:B4:79:FB:D7:1F:03:DB:C9:1D
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215006.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f06c::/48
Signature Algorithm: sha256WithRSAEncryption
57:8c:c8:58:de:b4:19:b9:30:37:02:e7:f7:68:cc:9b:4a:38:
28:9a:e4:ad:cd:d1:5f:a9:05:52:e9:bc:19:9b:5d:21:28:fb:
7d:81:4a:20:ea:ee:81:b2:e8:bc:3d:c9:3a:01:a9:f6:44:20:
90:c3:3e:70:4f:ed:4e:6f:e1:34:8f:e3:70:00:b5:0b:dd:df:
0a:99:89:da:e0:c4:a5:9f:58:24:50:0b:89:c6:44:82:c7:1c:
82:ed:f4:a6:88:f4:6c:b9:a3:ba:e5:7b:09:40:f8:bb:39:bc:
d7:02:2e:cd:98:56:be:fd:7d:0d:04:55:cb:d1:27:f2:65:0c:
20:d2:62:56:62:0a:76:cc:f2:f6:0b:17:89:c2:24:01:b3:61:
1d:5c:35:58:de:5b:95:23:33:39:bd:5f:7a:b6:37:16:80:c7:
ce:27:c9:c9:6b:f8:c5:e2:6c:d8:92:6d:d9:62:a7:fb:5b:c4:
91:10:33:b5:7a:41:a5:4b:4e:48:9e:be:c5:4b:e7:af:84:91:
04:26:75:28:c9:64:20:a2:6c:0c:28:e4:df:16:91:72:2b:81:
08:4f:76:e5:0c:ce:80:97:00:57:46:0e:d2:b2:e1:ef:df:89:
da:54:48:2a:54:32:64:20:5f:5b:a6:87:1e:7a:37:52:58:ac:
2d:dd:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:09 2026 by rpki-client