Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215507.roa
File: AS215507.roa (raw, json)
Hash identifier: XITzBXuMOtJzs3CWdEI5ReTUdi3wADuziPr9m5qnDZQ=
Subject key identifier: AE:E1:FF:5B:D7:41:CD:6D:06:9C:F1:F0:2D:C2:7C:4F:30:59:10:E9
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0D8343F65D6C8D1784EDD096CF6E7D7D70E00BA9
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215507.roa
Signing time: Wed 04 Nov 2026 20:32:52 +0000
ROA not before: Wed 04 Nov 2026 20:27:52 +0000
ROA not after: Wed 03 Nov 2027 20:32:52 +0000
asID: 215507
IP address blocks: 2a0e:8f02:f067::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:83:43:f6:5d:6c:8d:17:84:ed:d0:96:cf:6e:7d:7d:70:e0:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:52 2026 GMT
Not After : Nov 3 20:32:52 2027 GMT
Subject: CN=AEE1FF5BD741CD6D069CF1F02DC27C4F305910E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:7f:3a:0c:ee:da:1a:4e:54:39:5e:00:8c:
64:c2:ed:5b:f4:1e:78:a4:15:d2:15:07:d8:a8:63:
d7:12:46:03:7f:ce:54:a1:d2:8f:4e:9b:34:73:0a:
75:d3:cf:ec:1b:06:7d:c4:16:24:05:1e:59:df:f4:
83:ec:35:aa:16:08:d9:db:fa:48:bd:33:d0:3d:74:
a0:87:25:70:6d:19:cb:eb:de:b1:49:a0:20:7d:ae:
10:83:b0:c1:1c:a5:16:37:6b:d7:26:fc:0f:00:db:
8d:8a:8c:1f:57:21:5c:fe:72:55:85:2f:f0:ca:70:
cc:92:ec:5d:a1:b6:8a:f8:d5:ec:e9:a6:9e:c4:cc:
63:7f:fd:89:45:d2:9c:3b:99:75:77:e9:74:17:6d:
27:10:35:3c:5c:c1:aa:26:89:4e:b4:2e:22:35:6e:
67:d8:f4:d6:03:cb:8c:25:60:0e:5c:37:d1:9d:6c:
95:20:90:d3:07:7f:08:a5:39:fe:99:54:62:95:51:
c6:30:7c:3f:a1:ce:4e:17:b6:07:58:f8:c8:09:d5:
54:62:e1:81:d6:21:00:79:0d:bb:55:15:f4:62:f1:
15:04:c0:a7:cc:d8:93:3d:ee:27:e9:fb:b4:6e:46:
7e:a7:27:e4:6e:e8:8d:90:d3:cf:7d:3a:42:b2:d3:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E1:FF:5B:D7:41:CD:6D:06:9C:F1:F0:2D:C2:7C:4F:30:59:10:E9
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f067::/48
Signature Algorithm: sha256WithRSAEncryption
48:5a:5f:1f:b2:8c:a9:bd:43:d6:49:03:54:e3:47:18:24:f5:
5c:bd:b0:81:fc:21:44:48:95:46:5d:e8:fe:0a:bc:df:4a:ac:
f8:e8:c4:63:e7:e3:12:b6:29:4a:9e:31:df:a5:0c:e3:d7:ee:
29:b8:d5:3c:ef:98:0a:37:37:6e:54:cf:73:b9:f2:30:4e:72:
a7:64:bb:3d:78:e1:23:70:e9:f4:3d:83:32:0e:4e:f4:ed:c4:
98:86:9f:d8:09:e4:f6:29:2b:30:87:e9:b5:1c:f4:14:fd:e8:
72:ec:19:88:3d:d1:01:c8:7f:ee:fb:cf:73:0d:3b:64:5c:19:
bb:36:60:aa:57:30:e6:3d:c4:84:79:7a:bc:93:18:5c:a3:d7:
1f:87:30:26:17:b7:22:e9:cd:e2:c2:d8:fa:2c:cf:f7:21:0f:
6c:e4:dd:39:f8:5b:b3:11:b3:1a:f3:82:52:19:10:30:b1:51:
bc:dc:71:68:2a:0e:58:f6:ea:8c:bc:c7:16:e0:1d:41:61:46:
27:ff:30:00:14:ec:bc:9c:1e:ab:65:99:c6:1a:7d:ef:5f:ab:
75:29:72:5b:31:8c:bc:b9:1e:b5:74:cf:f9:0e:e4:58:4d:34:
1f:d5:42:a6:94:dd:00:4c:e3:b6:7a:7b:c9:95:7c:1f:e2:52:
0f:17:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:50 2026 by rpki-client