Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: bmjA6goopIzToN5QeaOwaxdYaPNArfi3ihLMvCFfBoA=
Subject key identifier: 90:29:EF:E7:C6:43:75:0A:B8:65:D2:8B:35:E3:C7:D5:A7:2D:D2:81
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 165BE5FEF7A08C7EE015DD0D1A358EB53A7C76A1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
Signing time: Thu 04 Jun 2026 19:51:42 +0000
ROA not before: Thu 04 Jun 2026 19:46:42 +0000
ROA not after: Thu 03 Jun 2027 19:51:42 +0000
asID: 215114
IP address blocks: 82.26.80.0/24 maxlen: 24
2a13:9500:145::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5b:e5:fe:f7:a0:8c:7e:e0:15:dd:0d:1a:35:8e:b5:3a:7c:76:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 4 19:46:42 2026 GMT
Not After : Jun 3 19:51:42 2027 GMT
Subject: CN=9029EFE7C643750AB865D28B35E3C7D5A72DD281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:39:0c:d1:7e:66:fe:b2:b5:0e:70:19:0f:
ef:cf:f8:c7:f9:65:4d:f2:2d:5d:8b:de:ab:65:5f:
78:07:0e:3d:47:1c:dd:47:69:20:56:c7:b7:95:50:
fa:36:52:fc:ba:8c:32:5e:64:0f:43:24:3b:77:55:
a3:cb:66:f1:a0:48:9f:1f:77:2f:ae:68:8f:87:51:
7a:dd:77:ae:27:5c:3a:6c:f2:8d:e1:62:f7:f9:f5:
ba:86:cc:44:6c:1c:57:d3:3e:3c:8e:ca:36:8c:7a:
f8:2e:fc:f0:26:8c:0b:cb:1d:e1:72:d0:79:11:78:
7c:e9:09:9d:0a:b0:00:43:b9:a3:f2:b2:0f:8c:4c:
ba:6f:61:2b:be:09:f5:58:46:b7:30:80:77:ba:0c:
b8:1f:44:43:ae:eb:e6:5d:c7:b0:37:c4:89:9e:d0:
59:fa:5a:ea:2f:e9:17:2c:ac:05:64:e5:ef:60:4a:
fa:23:fd:ae:8b:44:5d:4d:18:80:b3:9f:4c:11:ac:
6c:c0:bc:12:17:26:9f:93:c8:62:66:11:7c:77:06:
8c:de:ae:5d:18:8e:04:be:45:d2:c1:aa:78:b8:52:
a2:7e:9d:5b:1f:c8:ce:73:23:bd:84:5e:e1:0f:df:
ec:22:8f:b2:6b:c6:53:4e:0c:36:5d:98:b8:44:83:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:EF:E7:C6:43:75:0A:B8:65:D2:8B:35:E3:C7:D5:A7:2D:D2:81
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.80.0/24
IPv6:
2a13:9500:145::/48
Signature Algorithm: sha256WithRSAEncryption
12:c2:69:20:89:f3:8a:25:1d:a3:4a:e7:87:b8:52:42:6a:cd:
8d:13:3c:90:f9:c1:94:4c:86:e4:a7:9c:1b:a0:66:c2:15:d4:
6a:9a:75:7e:c9:af:dc:ca:c1:bd:4a:1d:d6:29:80:46:80:6d:
2f:8b:09:0d:a3:43:61:20:65:b4:50:86:f6:1e:1a:60:9a:15:
a5:14:96:b5:9e:7b:15:7d:dc:f7:bd:ef:72:a5:72:d6:8f:e7:
1d:f5:1e:6c:5c:20:fe:ea:52:e6:ad:44:1e:c1:a1:99:67:ed:
7e:5b:5b:9d:2b:11:3d:83:ee:a6:6b:25:32:9d:d5:3b:d7:c5:
cc:d3:65:de:02:f4:9f:b6:af:2d:b6:2b:8b:4b:d1:c4:a8:b5:
f7:31:00:e5:e5:27:6b:00:f2:d7:f0:67:47:44:a0:9d:58:ec:
51:0e:4d:a5:5a:af:ee:6f:8a:d7:34:fb:34:bb:72:3b:fb:f0:
88:65:1d:f5:75:96:0d:01:b8:ff:13:0c:96:85:6d:36:7f:b2:
b0:86:72:99:37:3c:aa:c5:cc:98:83:25:54:29:34:ed:db:e1:
c1:25:10:0f:78:e9:c5:84:b6:c9:37:06:51:33:72:b5:7b:e7:
09:9f:a9:b3:6c:a9:0d:65:4c:51:aa:14:e5:b7:6c:23:95:33:
ab:7f:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:43:38 2026 by rpki-client