Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215448.roa
File: AS215448.roa (raw, json)
Hash identifier: Fnxy8MZyo15rw7/vFVl9gdGLT7qL3VopdWjePGlLfio=
Subject key identifier: 14:C2:0E:B1:01:2A:46:BE:07:D1:D9:BE:3C:13:EA:8B:28:90:AE:4F
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 25114AA85B0E8F9CA2BDFC4AC4332F40054DC44E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215448.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 215448
IP address blocks: 2a0e:8f02:f068::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:11:4a:a8:5b:0e:8f:9c:a2:bd:fc:4a:c4:33:2f:40:05:4d:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=14C20EB1012A46BE07D1D9BE3C13EA8B2890AE4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:e6:9b:17:35:71:ee:e5:18:b7:a1:7f:08:8a:
bb:db:20:d2:25:f5:ad:ad:3a:36:95:1c:3a:7b:23:
0a:e8:b2:eb:b6:a5:da:3d:4d:66:52:33:5b:0a:ae:
68:5a:4c:8c:5d:2b:bb:51:73:ce:cb:42:b0:c3:65:
f5:f4:ec:76:f2:f7:9a:6e:6d:f9:a3:33:29:98:6e:
5e:f7:f2:73:fd:ac:fe:dd:90:e5:e7:cd:ac:db:1e:
cc:38:c1:d5:cc:87:3e:60:ae:36:67:ca:da:5d:c5:
42:2a:f8:2f:ce:08:4f:b7:bc:79:72:50:ff:58:4c:
50:86:06:2c:eb:23:11:85:13:f9:d3:7d:c9:dd:0e:
a5:65:5f:54:25:4d:9f:59:0f:38:3c:c8:d4:2f:99:
3d:7c:11:4a:dd:b9:0a:96:d1:ce:6d:7d:11:11:17:
93:67:10:5d:bf:0c:79:9c:fd:2c:6f:eb:b1:2e:6c:
2b:26:72:25:e5:34:43:3a:6b:e3:9d:41:bc:8e:f6:
ef:cf:1e:5d:1d:c6:8b:a8:d9:17:f5:63:95:a9:d3:
64:6a:3c:66:2a:59:bf:08:3f:98:5a:44:11:0d:98:
ce:b2:89:82:11:44:da:db:a9:ce:29:5f:12:82:b5:
40:03:9b:7c:00:45:c9:f8:c6:eb:c8:99:d7:8b:ca:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C2:0E:B1:01:2A:46:BE:07:D1:D9:BE:3C:13:EA:8B:28:90:AE:4F
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f068::/48
Signature Algorithm: sha256WithRSAEncryption
1c:52:d9:d4:64:33:43:ac:0f:6b:50:dd:12:25:1b:22:38:60:
44:9a:f1:3e:08:75:36:00:22:09:73:9f:05:4d:fe:5d:c6:bc:
4c:2e:a7:f8:e4:5f:77:90:6f:57:a7:af:0c:31:76:d6:23:22:
85:1b:29:3e:c1:ba:80:a9:8a:c4:db:5d:39:77:b9:be:60:43:
78:46:3c:cf:ae:69:db:0d:cc:38:a1:b6:2d:4e:d6:60:7e:64:
56:49:fa:06:a9:01:7b:ec:cb:57:17:1e:ba:2f:7b:0e:95:52:
22:e1:b4:d2:46:57:5b:5c:5f:ca:6d:46:0f:63:de:71:a4:18:
70:2b:65:81:7c:4a:79:64:50:65:8e:f1:4e:4e:3a:06:62:0b:
33:83:af:ad:1c:0a:ef:25:b4:bf:f3:8e:9e:13:f2:96:ab:20:
dd:36:e0:a9:46:ca:94:6c:52:df:0e:80:af:a1:2b:a9:42:6d:
dc:55:5b:3a:22:f8:b8:8f:69:41:a7:d2:51:da:6c:0e:ab:e9:
dd:35:82:45:11:c6:b1:1f:f5:74:c3:de:55:fc:f5:14:56:77:
89:7a:61:e0:2e:9e:5a:38:35:3b:5b:10:9a:6d:86:a7:74:64:
7b:4e:f5:0c:b0:8f:63:31:5c:9b:36:35:df:2e:2a:fd:b3:0f:
c9:bf:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:09 2026 by rpki-client