Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215386.roa
File: AS215386.roa (raw, json)
Hash identifier: UxVlBaZ3o8kF+P4aqa539zH8sjWE1dH8Gbmr6t231i0=
Subject key identifier: 38:1D:6B:92:1D:EA:B3:04:7E:E5:01:9E:B7:19:CE:AE:0D:BA:06:FB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 53837466D97C3EFCDB7A38B294191D1ECC7AD2A7
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215386.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 215386
IP address blocks: 2a0e:8f02:f069::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:83:74:66:d9:7c:3e:fc:db:7a:38:b2:94:19:1d:1e:cc:7a:d2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=381D6B921DEAB3047EE5019EB719CEAE0DBA06FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:7a:3a:54:ca:27:8b:34:f7:3f:a8:9e:f1:
fc:18:2d:cb:c5:a9:30:e9:b6:b7:84:91:48:be:5f:
b8:41:a0:34:c8:7d:e2:ee:b8:3d:15:f8:fd:98:24:
00:c6:75:e8:54:e0:42:9c:d2:76:e5:bc:08:7a:71:
1a:45:4f:d1:1b:f3:7e:69:e6:cd:5f:0e:f7:0b:05:
9a:fe:3c:8b:fc:37:6b:46:b7:14:21:d0:c4:72:e5:
5c:33:a4:20:19:29:02:45:8d:42:e9:8a:d9:30:71:
98:5b:c7:d1:5f:fb:fc:e7:aa:e6:d2:e2:95:10:b6:
4c:f6:8d:ce:d9:19:e8:7a:8f:62:57:cf:ad:74:ef:
ff:49:d3:d2:d1:63:5c:5e:14:f1:11:c5:14:db:0e:
93:8a:35:6f:da:96:f8:e9:e4:df:32:91:f2:a6:c7:
d6:a3:5e:b0:88:f6:3a:d7:2c:7d:b3:82:34:5e:89:
35:7a:33:bd:05:a9:10:25:00:ce:bb:f1:55:1f:ba:
b6:dc:8e:1d:f7:47:5e:01:6c:ab:64:f9:39:c2:67:
cd:3c:ee:e4:f7:1c:ca:78:d1:85:0e:27:9b:18:b5:
09:92:c4:ca:cb:c8:92:af:dc:88:52:89:7b:a5:54:
d3:2f:c5:17:b9:29:6e:00:4d:36:34:7b:a1:26:18:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:6B:92:1D:EA:B3:04:7E:E5:01:9E:B7:19:CE:AE:0D:BA:06:FB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f069::/48
Signature Algorithm: sha256WithRSAEncryption
82:a7:5a:7f:e4:7f:99:e9:fd:f8:fc:30:16:b3:97:49:ca:6b:
ce:97:e7:a7:ba:8f:52:a6:ac:05:4a:14:65:5f:ad:c3:bf:25:
8d:5e:0c:85:ca:17:aa:52:75:c8:a4:41:b4:df:3c:02:4b:e2:
0b:55:8d:ae:48:d6:4d:97:e3:4e:66:8d:f6:d5:03:42:f6:ad:
c3:b3:6c:e5:b9:91:22:ed:7d:8c:16:d3:05:86:cb:0e:79:e2:
c2:37:2e:d1:b1:9e:c9:c9:45:1f:de:5a:3e:2e:8a:f7:30:10:
31:b5:76:64:dc:62:59:ed:cc:0c:68:a6:96:2b:b9:30:5d:a1:
f8:d6:ab:28:3d:08:78:bd:c5:e9:63:f2:fb:0b:4e:35:8e:16:
31:24:7a:63:3a:e9:79:69:e5:74:2b:cf:9b:79:d2:89:e2:f6:
18:25:45:d8:96:41:27:8c:8f:38:c7:39:c8:f9:b7:b6:93:99:
16:ab:63:63:99:6d:71:4a:f9:50:94:81:e8:d0:09:c2:55:63:
d7:84:99:85:f3:5a:57:d3:fc:78:d1:c8:78:0a:43:37:80:d5:
fc:75:16:5b:56:81:b6:97:65:e7:d0:10:4d:bd:6f:f4:f7:50:
d6:27:41:b2:65:a8:3e:6c:3e:ee:7c:5a:8b:86:3e:60:35:51:
48:11:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:18 2026 by rpki-client