Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215035.roa
File: AS215035.roa (raw, json)
Hash identifier: fbnsB8YnjPAfq4CEeFGLYI4VB/a5XDkplTJyHDq4fcI=
Subject key identifier: 6A:02:20:16:D7:CC:D2:76:D2:05:D9:F2:65:C1:0A:62:83:C7:12:DF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D7E95BBACA24A5E88398813D5FF5FAB5704C8BF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215035.roa
Signing time: Tue 10 Jun 2025 19:13:59 +0000
ROA not before: Tue 10 Jun 2025 19:08:59 +0000
ROA not after: Tue 09 Jun 2026 19:13:59 +0000
asID: 215035
IP address blocks: 82.23.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7e:95:bb:ac:a2:4a:5e:88:39:88:13:d5:ff:5f:ab:57:04:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 10 19:08:59 2025 GMT
Not After : Jun 9 19:13:59 2026 GMT
Subject: CN=6A022016D7CCD276D205D9F265C10A6283C712DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:a1:77:fa:a9:e7:db:7d:f1:ae:08:74:82:
da:3a:1e:0c:27:51:1e:b2:0f:5c:57:c3:e7:a4:18:
40:fb:57:e5:14:af:de:b4:0d:0f:81:93:01:56:79:
ba:94:38:18:ba:ae:24:f0:b8:18:e9:7e:46:5d:5b:
b8:12:0b:27:44:22:4a:95:db:7b:ec:21:55:db:33:
8a:a7:2d:d1:20:e6:88:fc:91:70:52:37:ce:4d:28:
7d:4a:a3:30:42:66:2d:08:6b:1f:2c:32:21:25:92:
81:87:6f:ea:d6:b2:c8:01:85:9d:4e:11:6d:05:0f:
b6:e4:99:e9:29:8e:34:bc:1c:0a:70:2c:c7:42:67:
5d:1f:8e:69:04:1a:d6:99:ee:bb:76:d9:a5:c9:9e:
cd:b2:a8:ec:7e:7d:0f:dd:78:87:2c:8c:a3:86:e6:
6e:f4:44:06:d2:0f:a3:7c:40:7d:56:c2:37:a5:d3:
f7:55:e5:d8:f1:28:bf:a4:64:36:1d:27:b8:f8:27:
50:5b:de:0d:50:76:4d:75:1b:f6:f0:1d:06:25:7c:
3b:5c:ca:67:6c:34:b4:49:30:14:de:67:fc:1a:fe:
6a:3f:18:84:0f:8c:91:02:4a:65:8e:7c:33:c1:7c:
b9:c9:d3:77:aa:8b:15:58:e8:97:f9:30:dc:f9:c7:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:20:16:D7:CC:D2:76:D2:05:D9:F2:65:C1:0A:62:83:C7:12:DF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:84:f4:e8:cd:b6:6a:9b:55:6f:6e:c0:15:16:4e:e0:4a:eb:
76:89:1e:37:34:d9:fb:29:8b:f1:a0:3f:87:70:76:b8:e9:56:
32:c0:65:f8:08:de:94:ba:72:87:1a:28:e3:8f:59:fe:c9:e5:
5e:a5:03:50:d7:23:f2:db:3a:bf:fd:90:ae:9c:fc:f5:9c:a8:
20:46:3d:ac:fb:0e:8a:e7:1f:27:68:35:85:02:23:a6:47:91:
39:b8:93:9f:80:64:14:ae:3f:35:ca:df:70:cf:ef:fc:31:1a:
2e:5a:38:e6:ba:6b:4b:06:d1:c4:02:1c:8c:8f:f6:cd:fa:a6:
4e:fa:20:61:29:d0:00:9c:be:da:b3:da:ea:c1:12:9b:9d:be:
f6:99:89:b1:86:f2:39:07:62:8b:48:00:11:1a:41:89:b9:0b:
27:d2:d4:69:c8:8f:f6:3a:f9:2f:4d:91:73:69:a9:01:ad:8b:
93:9e:40:f1:cb:c7:02:50:4b:aa:15:d6:ea:14:bc:cd:85:f9:
b1:17:8e:5a:4c:ba:c0:52:b0:7d:42:9e:31:b8:c5:50:4f:a4:
f6:90:0b:7d:c5:bf:1e:b3:d0:9a:5c:c3:97:c3:85:c8:12:6b:
6d:3f:f3:02:18:06:ae:f4:4f:18:a0:d2:33:0c:db:99:46:c8:
8d:6e:8e:dc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHX6Vu6yiSl6IOYgT1f9fq1cEyL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA2MTAxOTA4NTlaFw0yNjA2MDkxOTEzNTlaMDMxMTAvBgNV
BAMTKDZBMDIyMDE2RDdDQ0QyNzZEMjA1RDlGMjY1QzEwQTYyODNDNzEyREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIcKF3+qnn233xrgh0gto6Hgwn
UR6yD1xXw+ekGED7V+UUr960DQ+BkwFWebqUOBi6riTwuBjpfkZdW7gSCydEIkqV
23vsIVXbM4qnLdEg5oj8kXBSN85NKH1KozBCZi0Iax8sMiElkoGHb+rWssgBhZ1O
EW0FD7bkmekpjjS8HApwLMdCZ10fjmkEGtaZ7rt22aXJns2yqOx+fQ/deIcsjKOG
5m70RAbSD6N8QH1Wwjel0/dV5djxKL+kZDYdJ7j4J1Bb3g1Qdk11G/bwHQYlfDtc
ymdsNLRJMBTeZ/wa/mo/GIQPjJECSmWOfDPBfLnJ03eqixVY6Jf5MNz5x2lFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUagIgFtfM0nbSBdnyZcEKYoPHEt8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1MDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhe+
MA0GCSqGSIb3DQEBCwUAA4IBAQAshPTozbZqm1VvbsAVFk7gSut2iR43NNn7KYvx
oD+HcHa46VYywGX4CN6UunKHGijjj1n+yeVepQNQ1yPy2zq//ZCunPz1nKggRj2s
+w6K5x8naDWFAiOmR5E5uJOfgGQUrj81yt9wz+/8MRouWjjmumtLBtHEAhyMj/bN
+qZO+iBhKdAAnL7as9rqwRKbnb72mYmxhvI5B2KLSAARGkGJuQsn0tRpyI/2Ovkv
TZFzaakBrYuTnkDxy8cCUEuqFdbqFLzNhfmxF45aTLrAUrB9Qp4xuMVQT6T2kAt9
xb8es9CaXMOXw4XIEmttP/MCGAau9E8YoNIzDNuZRsiNbo7c
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:48 2025 by rpki-client