Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15830.roa
File: AS15830.roa (raw, json)
Hash identifier: pb3NMaK+JvAN/Yu39+L6IPWrYHKTstaCJFBaieISzQE=
Subject key identifier: 0F:9C:36:48:6F:2D:A4:49:39:8E:D3:2A:12:7B:92:8F:D7:62:95:DB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 02128D0E99ED048A2CADBDAF6A3C5623B2A7D7D6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15830.roa
Signing time: Mon 06 Apr 2026 13:00:17 +0000
ROA not before: Mon 06 Apr 2026 12:55:17 +0000
ROA not after: Mon 05 Apr 2027 13:00:17 +0000
asID: 15830
IP address blocks: 2a13:9500:15d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:12:8d:0e:99:ed:04:8a:2c:ad:bd:af:6a:3c:56:23:b2:a7:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 12:55:17 2026 GMT
Not After : Apr 5 13:00:17 2027 GMT
Subject: CN=0F9C36486F2DA449398ED32A127B928FD76295DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:20:d1:47:84:44:4a:3c:db:03:f9:95:0a:
0c:28:3b:0a:7a:51:68:4c:e9:54:91:7a:8e:f9:6f:
11:3c:4c:58:63:b1:dc:73:5b:10:b6:5c:84:5b:d9:
44:42:c9:50:0c:be:4c:33:9a:65:ea:e2:d0:6c:28:
00:1d:30:10:77:52:5a:3f:60:aa:09:6d:1c:87:b1:
7b:22:b1:44:f0:24:4e:75:9b:b3:0b:a1:d9:20:bd:
d3:2e:e8:08:fc:04:a6:31:04:6a:8c:46:75:c8:b3:
30:11:f2:92:5d:d1:22:4c:65:99:a7:9b:39:79:1d:
63:97:cf:c4:f2:22:d1:88:31:7d:22:b6:79:e1:e5:
16:86:68:af:b7:01:ea:72:41:6a:f3:50:b3:ca:b4:
00:17:22:d0:4a:fa:ee:90:21:66:d8:cf:7c:85:89:
b5:8b:fd:2b:c5:34:6a:aa:b5:80:19:b4:3f:96:24:
65:ed:b4:c7:f3:d2:27:a6:27:21:29:19:a8:b9:1b:
d6:b3:a3:f9:e5:a5:7a:42:a9:0c:23:d4:1e:13:d9:
5f:c4:56:f1:9e:71:b7:f6:6d:5a:14:19:9c:ba:e3:
20:86:a9:63:87:40:3c:26:9d:ed:31:b1:e1:8a:76:
49:3a:10:fc:63:b8:e6:df:3e:cf:fc:d7:da:c5:78:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:36:48:6F:2D:A4:49:39:8E:D3:2A:12:7B:92:8F:D7:62:95:DB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS15830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:15d::/48
Signature Algorithm: sha256WithRSAEncryption
65:bd:3c:01:2e:f0:3b:81:03:e0:84:46:ba:ec:f3:65:6f:5b:
a1:fb:a2:7b:42:61:1f:d9:0d:2c:03:3d:e9:69:2e:69:09:4f:
de:75:a8:25:88:4c:09:64:07:b4:30:d8:f4:d0:0e:a4:cb:99:
9b:3d:42:6e:31:28:1a:54:6f:fd:ca:53:76:cf:0e:e7:90:17:
a6:ef:d1:6a:fa:0b:40:a2:f1:01:f4:23:38:e7:d4:74:f9:06:
68:a1:6a:3e:c0:1e:6b:e8:3c:90:f6:1d:1f:f3:08:4c:c9:70:
49:c1:70:93:49:36:55:1b:fb:66:db:e8:ee:95:0e:06:7e:1d:
a1:18:c6:f4:fb:54:b7:06:78:eb:84:08:45:01:f1:02:ca:f5:
83:e6:48:50:4f:29:0e:60:b8:63:d7:8b:7f:74:10:5b:10:52:
58:a7:32:3a:e0:73:32:58:64:d7:83:2e:47:3d:73:30:3d:f1:
37:17:14:89:71:60:b4:ee:d9:10:bc:ee:16:e8:5f:af:c7:b6:
5d:94:b7:de:fc:cd:cc:d9:9a:3d:61:19:d9:e1:cb:9c:2a:be:
31:9c:3f:e7:c9:75:a5:62:ab:f7:97:28:84:e5:05:dc:6d:e4:
6e:cc:cb:20:8b:00:85:92:34:14:c6:c6:d2:50:1d:91:b6:dd:
0b:4e:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:32 2026 by rpki-client