Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
File: AS215370.roa (raw, json)
Hash identifier: EnTDlZ9sVk3aMULt2sCEl6Vzvyryz1usHQ8l16G/s80=
Subject key identifier: 1D:A6:63:81:91:15:12:C5:67:E6:E2:DE:90:93:58:E8:47:97:F6:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5D240A7B8A28ADB26C7B75F8793EE923B9FCD893
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
Signing time: Fri 20 Feb 2026 11:07:22 +0000
ROA not before: Fri 20 Feb 2026 11:02:22 +0000
ROA not after: Fri 19 Feb 2027 11:07:22 +0000
asID: 215370
IP address blocks: 82.39.186.0/24 maxlen: 24
2a13:9500:68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:24:0a:7b:8a:28:ad:b2:6c:7b:75:f8:79:3e:e9:23:b9:fc:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 20 11:02:22 2026 GMT
Not After : Feb 19 11:07:22 2027 GMT
Subject: CN=1DA66381911512C567E6E2DE909358E84797F601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:60:1a:7e:32:9f:50:68:d8:a5:1e:d5:91:
51:cf:24:08:48:a0:26:62:93:0d:64:6e:a9:b3:c3:
e3:4c:31:04:e5:80:ae:07:0b:70:29:e8:db:5d:44:
bc:95:55:2f:20:b4:f5:78:d5:cf:17:b3:9f:1b:f2:
ce:b2:77:82:11:d9:a6:ee:6f:43:af:da:13:a9:9d:
d3:6c:f6:59:5b:84:1f:6b:c5:f0:49:5b:b4:70:6e:
6d:46:f7:90:c6:02:f1:88:bc:be:46:76:a2:80:fb:
cf:0a:83:54:05:74:f3:50:74:0c:a1:16:2d:18:dd:
7e:21:ea:5e:30:df:f3:e0:33:38:1d:7e:08:c7:fc:
b2:38:f4:26:50:f6:33:95:ac:29:81:a3:d2:db:26:
87:81:2c:c7:27:6d:40:06:e4:2e:ca:6b:0e:c9:91:
c3:83:de:bd:70:ca:c1:14:2a:89:c1:36:cb:4f:3c:
44:99:ad:2c:14:45:e9:13:38:18:07:73:58:74:48:
e8:40:10:e3:16:fa:cd:19:f0:9f:25:b6:02:b5:fd:
a6:e6:ce:0a:fc:42:44:c4:7b:b7:f9:5b:ab:50:bd:
23:5a:5e:69:ea:73:95:3b:69:99:d3:dd:4e:cd:1c:
90:f7:c5:97:23:30:b9:28:6a:40:c5:3d:61:5a:23:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A6:63:81:91:15:12:C5:67:E6:E2:DE:90:93:58:E8:47:97:F6:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.186.0/24
IPv6:
2a13:9500:68::/48
Signature Algorithm: sha256WithRSAEncryption
60:61:4a:66:73:69:f8:cd:27:31:0b:bc:8c:e7:68:d9:e5:36:
9c:f3:79:3b:d4:23:92:ad:2e:d6:84:e7:48:a6:ea:98:ea:98:
e7:9d:6a:12:99:7b:31:b5:a5:6e:d2:6a:85:9e:b3:fe:6b:4b:
0f:a8:29:11:d1:2c:fe:45:1d:cb:1d:25:e8:d0:be:af:30:aa:
cb:c9:59:12:47:9e:10:21:a8:f0:ee:5e:37:7f:9f:ad:cf:0c:
b3:d1:98:ef:30:af:73:9a:84:ec:f5:42:91:33:4d:dd:1b:2c:
61:00:59:ed:5d:47:1c:ae:06:dc:67:48:d1:e5:21:88:18:10:
0c:dd:51:b2:a1:5a:91:86:c4:06:ec:62:cf:6e:d8:c5:52:45:
35:49:53:ba:d5:6c:78:99:97:fc:e4:1f:a1:e2:bc:1c:49:59:
90:8e:40:28:b5:9f:32:35:5f:9b:ff:96:da:04:ac:7d:eb:b4:
69:ab:be:aa:97:04:9b:d5:bd:06:b6:1d:91:3e:7f:11:16:af:
68:f4:8a:f4:a7:1b:cb:73:9a:3f:5e:4e:5d:73:e2:ad:b3:e9:
ef:b2:26:4a:33:45:3c:84:9c:6c:2b:1e:84:8a:14:03:30:81:
ea:e4:7c:13:e7:41:d8:b5:74:03:8b:e8:8f:69:4e:d8:68:72:
d4:e7:0e:35
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUXSQKe4oorbJse3X4eT7pI7n82JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjAxMTAyMjJaFw0yNzAyMTkxMTA3MjJaMDMxMTAvBgNV
BAMTKDFEQTY2MzgxOTExNTEyQzU2N0U2RTJERTkwOTM1OEU4NDc5N0Y2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOi2AafjKfUGjYpR7VkVHPJAhI
oCZikw1kbqmzw+NMMQTlgK4HC3Ap6NtdRLyVVS8gtPV41c8Xs58b8s6yd4IR2abu
b0Ov2hOpndNs9llbhB9rxfBJW7Rwbm1G95DGAvGIvL5GdqKA+88Kg1QFdPNQdAyh
Fi0Y3X4h6l4w3/PgMzgdfgjH/LI49CZQ9jOVrCmBo9LbJoeBLMcnbUAG5C7Kaw7J
kcOD3r1wysEUKonBNstPPESZrSwURekTOBgHc1h0SOhAEOMW+s0Z8J8ltgK1/abm
zgr8QkTEe7f5W6tQvSNaXmnqc5U7aZnT3U7NHJD3xZcjMLkoakDFPWFaI73RAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUHaZjgZEVEsVn5uLekJNY6EeX9gEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1MzcwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUie6
MA8EAgACMAkDBwAqE5UAAGgwDQYJKoZIhvcNAQELBQADggEBAGBhSmZzafjNJzEL
vIznaNnlNpzzeTvUI5KtLtaE50im6pjqmOedahKZezG1pW7SaoWes/5rSw+oKRHR
LP5FHcsdJejQvq8wqsvJWRJHnhAhqPDuXjd/n63PDLPRmO8wr3OahOz1QpEzTd0b
LGEAWe1dRxyuBtxnSNHlIYgYEAzdUbKhWpGGxAbsYs9u2MVSRTVJU7rVbHiZl/zk
H6HivBxJWZCOQCi1nzI1X5v/ltoErH3rtGmrvqqXBJvVvQa2HZE+fxEWr2j0ivSn
G8tzmj9eTl1z4q2z6e+yJkozRTyEnGwrHoSKFAMwgerkfBPnQdi1dAOL6I9pTtho
ctTnDjU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:49 2026 by rpki-client