Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: m0Wbgn3pwHCV9szvZ1NNYgMAHGmhZqlK1oMyafZ1ER8=
Subject key identifier: 28:87:E3:88:16:97:F7:CA:1E:0D:C6:CD:A5:AF:EE:DB:7F:74:14:B1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D64E79AA66FE407AAE87BB2A5993762253A3B25
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
Signing time: Tue 09 Jun 2026 21:36:54 +0000
ROA not before: Tue 09 Jun 2026 21:31:54 +0000
ROA not after: Tue 08 Jun 2027 21:36:54 +0000
asID: 215224
IP address blocks: 82.24.122.0/24 maxlen: 24
82.39.175.0/24 maxlen: 24
84.75.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:64:e7:9a:a6:6f:e4:07:aa:e8:7b:b2:a5:99:37:62:25:3a:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 21:31:54 2026 GMT
Not After : Jun 8 21:36:54 2027 GMT
Subject: CN=2887E3881697F7CA1E0DC6CDA5AFEEDB7F7414B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:0e:c6:6a:42:db:3f:be:ed:d3:c9:8e:fd:
36:17:af:ec:16:c2:74:10:97:5a:5a:cc:65:f5:53:
1d:b3:82:be:87:09:7c:a7:b4:6f:d7:54:0d:7d:b7:
9e:d4:23:e5:ef:b5:63:aa:b9:e7:55:c5:22:73:0c:
fa:d3:86:17:a4:7f:e5:5d:c6:27:7c:f8:fc:2c:6a:
6f:7b:55:40:39:ab:cd:9b:ae:a5:20:36:0f:82:81:
7e:48:81:58:a5:b8:4d:17:97:78:d8:30:03:43:a9:
ec:6b:78:3d:5c:59:d7:b0:44:43:48:96:fa:ab:1c:
d9:a7:95:90:ab:45:d1:de:63:f6:41:d9:0e:7b:ed:
a9:34:4a:7b:c0:ca:9b:17:99:59:2d:48:13:70:00:
3c:e5:b9:d8:d3:5a:bf:05:9d:3f:e8:6d:0b:7b:b0:
63:9a:5c:1c:93:1c:3f:1e:67:70:09:b9:1e:9c:e9:
47:f8:a4:00:79:99:bd:56:11:3c:2d:5b:22:ed:8a:
7a:eb:bc:fd:73:b8:36:27:6f:c1:f9:4c:17:b4:d8:
f0:f6:26:12:34:68:d5:54:5b:c2:cf:4f:04:01:c1:
64:93:10:4b:a8:fd:7f:9d:04:69:38:62:26:26:1f:
ab:2d:44:ac:5a:35:0a:38:80:26:47:51:19:7f:62:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:E3:88:16:97:F7:CA:1E:0D:C6:CD:A5:AF:EE:DB:7F:74:14:B1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.122.0/24
82.39.175.0/24
84.75.207.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6a:a6:57:5a:f2:9c:30:37:0c:ea:7b:c4:58:52:df:b5:f6:
b8:a3:e0:9a:1b:d4:13:8b:90:3b:53:fb:1e:cb:29:4d:55:72:
ed:c1:81:b7:16:a8:8f:39:88:bd:33:c9:09:82:c6:fa:99:20:
e3:a4:38:4a:af:95:31:5c:66:1d:e9:69:cd:7b:ad:c9:b0:e6:
a8:1b:92:28:b4:fd:c0:67:8f:8d:54:e0:e2:0e:e2:00:c9:07:
e9:c0:af:a3:c6:79:cd:e9:f5:bb:ae:b9:82:ec:5f:95:d6:e7:
86:25:a7:6f:72:d3:f9:25:7f:18:e7:de:ff:88:23:aa:7f:1a:
0b:b8:80:d0:0f:f8:cf:b9:0c:11:64:8b:b1:fc:71:b3:fb:9d:
e7:e4:47:58:52:49:f8:92:dd:79:5f:4f:d8:c6:b8:0a:25:8c:
a9:3f:ae:86:37:7c:0f:d5:a3:c5:f2:f8:3b:42:bf:e4:6a:01:
8d:90:0a:b9:05:63:5a:4c:18:de:fe:6d:6e:4e:c6:c0:f7:cd:
ba:58:79:de:f0:44:8c:64:e2:9a:d5:ec:5e:45:2c:95:b7:d2:
10:5b:9c:fd:f8:27:f2:1e:bd:1b:d2:f7:0f:2f:7f:c4:90:25:
ee:3d:b8:3d:0b:37:8b:29:e2:1f:09:7d:9f:b7:22:6a:d7:ff:
09:ed:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:01 2026 by rpki-client