Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: ZultbFIvUvITZdtCSPBp4jDUe2EMey1MJTNp1BZLfF4=
Subject key identifier: 1F:C2:52:11:56:F4:88:DD:BD:83:E5:C4:7F:A8:65:88:72:8A:28:DE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 759D0F98934447D3D25CC70BD1EBCBFA9113A017
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
Signing time: Mon 02 Feb 2026 17:45:09 +0000
ROA not before: Mon 02 Feb 2026 17:40:09 +0000
ROA not after: Mon 01 Feb 2027 17:45:09 +0000
asID: 215224
IP address blocks: 82.39.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9d:0f:98:93:44:47:d3:d2:5c:c7:0b:d1:eb:cb:fa:91:13:a0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 2 17:40:09 2026 GMT
Not After : Feb 1 17:45:09 2027 GMT
Subject: CN=1FC2521156F488DDBD83E5C47FA86588728A28DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:fd:46:7f:4a:b6:bc:57:82:38:57:5f:34:
26:02:56:d6:7f:d2:9f:7d:f8:24:27:64:34:99:ce:
86:ec:85:bb:e8:0c:f9:e7:e3:73:58:47:4c:31:72:
a8:47:d8:f4:e8:5c:ca:98:5f:bb:df:47:9f:c8:6f:
de:00:bc:fb:c3:42:49:e7:4e:d5:62:9e:f7:4a:ba:
86:9b:59:43:3c:1d:9b:36:d3:9c:c3:83:0c:20:3e:
2b:9c:17:51:4e:09:d2:f0:33:93:41:c8:2b:2b:ab:
69:04:1f:d1:43:ef:69:9a:82:ba:a6:30:16:7a:30:
65:d4:76:29:12:51:f0:fa:de:af:e4:f2:37:bc:e4:
06:54:e3:82:a4:d1:02:5c:41:8b:98:73:6d:90:b3:
a5:4e:d2:d9:92:3b:35:f7:c9:b1:47:4c:de:c6:cf:
75:98:8c:23:5b:e4:dc:ba:3b:ac:00:ee:0e:56:56:
5c:56:ad:e4:42:cb:19:49:e7:5a:b6:01:cc:e0:24:
9d:7c:23:78:61:52:6c:47:db:d0:fe:78:a3:ba:26:
b0:fb:ca:61:a6:75:c6:cc:fd:2c:c9:d6:71:6c:cb:
b6:85:e3:24:f9:fb:2a:fe:f6:08:46:bd:ec:f2:db:
a5:73:b2:69:ee:58:8a:bd:d9:32:2b:aa:f1:76:e4:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:52:11:56:F4:88:DD:BD:83:E5:C4:7F:A8:65:88:72:8A:28:DE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f9:8f:d6:3a:4e:b0:e7:73:4c:59:29:f3:af:cd:af:62:f2:
1b:ba:e3:23:3c:9a:e0:e0:91:cb:7d:20:66:78:52:54:4c:9a:
b9:b2:d3:11:77:ed:b6:8f:3d:1d:20:54:fc:d8:55:46:8c:ba:
f1:d3:b4:83:42:36:86:8e:92:14:2f:40:aa:c3:1a:ec:24:e0:
97:88:29:f8:75:c9:ae:29:06:ba:2c:94:4b:78:9c:50:3d:ad:
f0:ce:83:1a:bf:ff:40:1b:9e:fc:0f:34:35:b5:95:84:d5:4a:
7f:72:a1:19:90:26:84:80:31:85:72:34:e5:0a:2b:dd:55:6d:
d6:fc:80:80:27:58:68:aa:bd:40:a8:00:84:af:9d:03:e2:b6:
ac:49:ae:46:ca:4d:b0:95:60:87:99:78:09:af:d4:a3:a4:96:
0b:4f:c8:94:b0:b6:82:01:75:14:5c:a0:56:a1:de:9d:31:78:
97:c6:ef:f4:69:c2:7e:aa:24:57:8a:cf:53:17:1e:da:68:bb:
31:55:84:26:0f:0d:9f:e6:5e:43:6c:28:b7:5b:c1:22:91:27:
f6:de:72:df:f5:fb:86:1f:f9:8c:56:ac:4c:f2:6c:f9:7f:47:
ac:06:65:29:84:30:b6:32:08:c5:11:8e:ee:32:e4:a5:d5:ce:
b6:ba:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:38 2026 by rpki-client