Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215956.roa
File: AS215956.roa (raw, json)
Hash identifier: gi2oMVTM9U8TnzdZfmns2XDSzXH63X/ngcfdzXkYbN8=
Subject key identifier: 8B:AA:8A:3A:02:F9:F2:8A:82:27:6A:64:0F:4B:16:CE:37:D6:D1:7C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6E00732B32F0E1E49C191FFD6BD9334D078FE494
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215956.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 215956
IP address blocks: 2a0e:8f02:2270::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:00:73:2b:32:f0:e1:e4:9c:19:1f:fd:6b:d9:33:4d:07:8f:e4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=8BAA8A3A02F9F28A82276A640F4B16CE37D6D17C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:ad:c8:61:ef:ba:4e:35:04:12:82:95:5a:
8f:af:18:d1:6e:4a:3a:7b:0c:e8:ab:ea:b8:3d:4c:
aa:87:6e:f8:63:72:e3:94:06:37:8d:db:85:33:70:
eb:75:22:28:00:c5:f2:1f:84:46:24:8a:28:b6:40:
37:61:1d:3f:78:da:df:05:3c:ce:8a:7d:84:ae:d1:
9b:81:8e:ff:f8:e0:df:1c:5c:fb:80:09:45:e5:1e:
96:92:c9:7d:fd:fc:9e:41:7f:75:5a:bf:6d:98:0c:
9b:e3:a5:ba:35:ea:f3:a0:c8:65:35:f4:97:1f:b0:
a2:f4:49:4c:f6:7a:62:31:98:36:3a:cd:d0:59:3a:
a3:51:79:8a:ca:ca:8f:24:30:7f:c6:55:8e:ea:1a:
bb:e2:18:42:5f:e9:14:dd:94:ac:85:90:02:27:2e:
2c:0b:7c:32:21:41:92:0a:30:87:f1:0a:28:2c:ce:
8b:a8:87:71:be:98:ba:d5:ac:3e:45:c2:25:d5:ee:
73:f2:70:05:2e:37:38:54:33:6c:7d:99:ef:21:1d:
23:51:f2:34:5e:7c:8b:a4:66:34:ce:39:70:4a:1d:
df:16:f7:20:28:f9:65:5a:9f:5f:00:ea:1e:55:55:
25:c3:ba:8a:03:a3:30:00:a5:f1:23:17:14:db:87:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:8A:3A:02:F9:F2:8A:82:27:6A:64:0F:4B:16:CE:37:D6:D1:7C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS215956.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2270::/44
Signature Algorithm: sha256WithRSAEncryption
77:6f:91:49:ed:9f:58:66:0c:48:89:69:a4:21:a5:dd:43:e3:
ac:51:7e:03:d3:b0:99:3c:09:ae:f0:cb:e6:e5:68:0d:37:5e:
aa:15:64:b4:fa:fa:b7:c0:60:81:0a:da:66:5c:a2:1c:25:06:
37:ac:46:43:f6:79:86:c2:83:4d:6e:5f:70:29:f4:82:8e:a9:
5e:c6:fa:96:b4:aa:d5:48:8f:d8:7f:78:f2:70:b7:4e:c5:a5:
41:ea:28:7b:46:1b:52:48:80:c1:dc:fa:3c:67:7c:1c:42:96:
a2:68:92:43:b2:cf:eb:88:a5:1e:52:e8:b5:26:c2:87:81:38:
d1:f6:1d:26:e6:06:39:42:25:10:d4:5e:3f:0e:3d:0d:5e:1a:
2b:f8:a4:bb:00:a0:e1:5e:72:22:6a:fc:0d:af:47:9a:21:5f:
b4:54:81:26:f8:e7:19:ed:cc:fb:c9:ad:3a:87:c1:da:e2:f3:
97:18:fd:1d:42:30:f7:0a:e6:7a:9e:fe:d2:e9:11:6b:ec:da:
c2:0e:db:28:bf:2a:09:8a:ee:1c:f1:f4:28:cf:e4:8e:ac:73:
7b:d0:1d:84:de:e8:3d:8c:a8:2c:05:a4:2a:2a:1f:4b:3a:3e:
8d:63:14:fd:97:e4:c9:88:20:f8:ea:7d:15:91:b4:a1:d2:a1:
7e:98:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:19 2026 by rpki-client