Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215681.roa
File: AS215681.roa (raw, json)
Hash identifier: Gph4/JwlSKK27ENA5MZtrAYa4ZxG+zKPUcD6IS4+zTw=
Subject key identifier: 5D:07:11:C1:D1:39:25:F6:65:0E:44:9D:87:A4:06:B9:BF:0B:57:BB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6BB6608C0F16375F34C71E3AA35F0308296580DD
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215681.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 215681
IP address blocks: 2a0e:8f02:2070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b6:60:8c:0f:16:37:5f:34:c7:1e:3a:a3:5f:03:08:29:65:80:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=5D0711C1D13925F6650E449D87A406B9BF0B57BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:03:25:ef:24:24:0d:d1:1e:61:bb:7e:a2:
20:59:09:2c:be:b8:65:d1:4e:4c:7e:73:88:7b:1e:
c6:a4:88:9d:80:7c:43:8c:b1:98:8a:f6:0b:b5:c7:
70:fc:93:a1:2f:1a:82:a3:5b:02:98:1c:0c:b4:ad:
cd:fa:7b:a6:5b:09:54:94:14:7a:cc:ea:b4:44:8a:
0d:67:26:98:7c:0f:23:de:75:2a:91:3a:e5:1b:21:
fa:ee:d5:06:de:95:3b:cd:77:27:fe:e1:b8:2a:e6:
bb:e3:5e:08:cb:79:46:40:7e:47:e6:7f:70:b3:46:
56:c7:2e:73:37:11:fa:c5:42:2b:ac:0f:94:6d:c4:
61:28:4e:74:1a:88:d9:99:02:59:d6:a1:fc:1e:8c:
21:32:98:05:df:b8:c7:95:32:3e:3f:7d:57:81:32:
6d:b1:21:a7:bf:db:ae:6c:4e:d7:f7:ba:e9:07:16:
41:54:95:d4:08:4d:f3:cb:f1:0c:8d:97:9a:ae:40:
c7:d6:c4:f0:d4:5a:97:9d:32:ba:21:df:ff:8a:d6:
cd:c9:4d:2b:0b:3d:6e:71:41:71:a8:49:72:d7:27:
46:b5:df:eb:c4:69:ce:76:a8:0b:36:21:fe:56:65:
5a:b9:e0:3e:ae:49:11:e5:22:ed:74:d6:c9:8a:00:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:11:C1:D1:39:25:F6:65:0E:44:9D:87:A4:06:B9:BF:0B:57:BB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2070::/44
Signature Algorithm: sha256WithRSAEncryption
84:3e:15:be:81:4e:75:50:5a:d7:c4:81:08:7c:e1:47:9e:ac:
ba:d9:21:da:ff:8e:ac:b4:0e:df:14:df:1f:39:a8:8e:a5:35:
d6:a3:00:db:cd:76:5a:af:dc:be:75:1c:7a:6e:cc:20:ee:a6:
4a:50:2d:95:48:23:6f:f3:95:10:6b:b9:3a:b2:a0:ed:ff:c2:
05:ae:0b:7f:ea:48:11:7d:6e:1b:98:2e:f5:93:33:16:80:6b:
3b:8d:39:6a:be:d3:62:ba:b9:85:3f:91:bc:da:12:41:43:1f:
89:55:9c:6f:b6:b7:10:0b:a8:ad:44:1b:c8:fd:76:aa:cf:73:
19:bb:20:d3:29:02:9b:f9:b5:a3:21:9f:c7:d8:9d:fe:e2:5e:
65:d4:54:4e:90:a3:a6:62:1f:37:48:6b:24:aa:60:97:c2:19:
f3:0b:8c:a6:1f:b1:d0:55:1d:b3:be:71:10:08:46:8e:02:12:
cf:1a:45:30:29:18:6a:f4:c5:62:20:42:45:fb:3a:74:d2:0a:
12:5c:9c:60:c7:f8:33:bb:78:2d:98:b0:3c:fd:0f:d6:75:e3:
02:e6:86:6a:2b:d5:52:31:bc:ca:ce:72:05:a4:dc:f7:14:c2:
4a:b7:f7:15:3d:96:9b:9b:1d:1a:22:d2:9e:01:76:8d:23:1b:
c8:b0:56:c7
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUa7ZgjA8WN180xx46o18DCCllgN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDhaFw0yNzExMDMyMDMyNDhaMDMxMTAvBgNV
BAMTKDVEMDcxMUMxRDEzOTI1RjY2NTBFNDQ5RDg3QTQwNkI5QkYwQjU3QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuQMl7yQkDdEeYbt+oiBZCSy+
uGXRTkx+c4h7HsakiJ2AfEOMsZiK9gu1x3D8k6EvGoKjWwKYHAy0rc36e6ZbCVSU
FHrM6rREig1nJph8DyPedSqROuUbIfru1QbelTvNdyf+4bgq5rvjXgjLeUZAfkfm
f3CzRlbHLnM3EfrFQiusD5RtxGEoTnQaiNmZAlnWofwejCEymAXfuMeVMj4/fVeB
Mm2xIae/265sTtf3uukHFkFUldQITfPL8QyNl5quQMfWxPDUWpedMroh3/+K1s3J
TSsLPW5xQXGoSXLXJ0a13+vEac52qAs2If5WZVq54D6uSRHlIu101smKAKYRAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUXQcRwdE5JfZlDkSdh6QGub8LV7swHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIxNTY4MS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoO
jwIgcDANBgkqhkiG9w0BAQsFAAOCAQEAhD4VvoFOdVBa18SBCHzhR56sutkh2v+O
rLQO3xTfHzmojqU11qMA2812Wq/cvnUcem7MIO6mSlAtlUgjb/OVEGu5OrKg7f/C
Ba4Lf+pIEX1uG5gu9ZMzFoBrO405ar7TYrq5hT+RvNoSQUMfiVWcb7a3EAuorUQb
yP12qs9zGbsg0ykCm/m1oyGfx9id/uJeZdRUTpCjpmIfN0hrJKpgl8IZ8wuMph+x
0FUds75xEAhGjgISzxpFMCkYavTFYiBCRfs6dNIKElycYMf4M7t4LZiwPP0P1nXj
AuaGaivVUjG8ys5yBaTc9xTCSrf3FT2Wm5sdGiLSngF2jSMbyLBWxw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:50:08 2026 by rpki-client