Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: jOC2K4hoSLpL4Bcou45eUI8QiDcJFD5lDJigva6SIQ4=
Subject key identifier: 5B:94:F2:32:75:F9:90:6E:CC:D0:47:E6:9E:BF:7F:23:D4:62:BE:A4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F74C236E14AFFE3770961A8A28275E0C4AE7C7C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
Signing time: Tue 03 Nov 2026 00:00:25 +0000
ROA not before: Mon 02 Nov 2026 23:55:25 +0000
ROA not after: Tue 02 Nov 2027 00:00:25 +0000
asID: 215607
IP address blocks: 84.75.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:74:c2:36:e1:4a:ff:e3:77:09:61:a8:a2:82:75:e0:c4:ae:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 2 23:55:25 2026 GMT
Not After : Nov 2 00:00:25 2027 GMT
Subject: CN=5B94F23275F9906ECCD047E69EBF7F23D462BEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:c1:51:6f:e9:ff:94:7f:48:e7:6a:ac:ce:
75:3f:0e:41:89:75:2a:8d:bc:f7:b1:cc:72:87:c7:
e2:af:56:b9:8f:53:73:58:a4:64:9d:e5:90:29:89:
9b:9e:5c:b0:0e:2f:ab:a3:2f:e0:e2:3e:87:3d:ea:
e7:ac:fe:2f:ec:79:11:a9:b9:1f:cb:4f:d6:3c:35:
1e:68:d7:b1:30:5c:18:e1:ec:64:a7:aa:71:a6:8a:
b5:f4:59:8a:5c:81:17:a2:d6:31:70:a6:37:de:54:
9d:91:bb:a4:7e:bf:9c:5e:df:df:03:59:d6:da:a7:
03:a5:fd:fa:1c:81:b4:99:cd:b1:6d:da:57:cf:72:
bc:71:28:45:99:d1:b1:0f:71:ed:51:6e:f5:9e:66:
ab:46:d9:b0:ca:3a:94:b1:32:d0:38:50:84:15:ae:
a4:64:7f:b9:80:32:da:60:22:b6:8d:e2:c4:c0:a2:
0b:c9:13:5d:fe:de:4d:a4:f2:e9:f7:65:e6:0d:9e:
5a:e7:05:4f:53:4f:f3:16:42:d1:36:fe:b2:23:2f:
2b:68:45:a0:66:4d:64:90:a2:3c:8a:ab:b0:9b:17:
44:4e:df:a4:2d:a9:a6:e0:b5:79:b6:64:35:85:78:
21:f0:b7:b7:40:06:bc:39:18:73:9d:88:86:c5:35:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:F2:32:75:F9:90:6E:CC:D0:47:E6:9E:BF:7F:23:D4:62:BE:A4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.76.0/24
Signature Algorithm: sha256WithRSAEncryption
96:15:e4:19:49:1d:d1:52:a7:1b:b2:7a:db:90:d7:a2:f1:56:
9a:4c:38:7f:8a:43:fa:68:27:e9:7a:b2:1d:7e:3e:26:e1:b0:
cf:48:0b:1f:30:b0:e3:c1:fc:a3:1b:ab:6f:1f:fa:ea:63:50:
bc:1c:31:ed:32:49:fa:bc:21:0d:87:18:f2:5a:06:5b:91:f0:
e0:70:59:f9:33:09:2b:89:7b:fb:d3:1a:e0:4a:21:a3:09:e4:
2d:ae:97:7f:d3:2e:28:07:05:07:6f:55:8f:52:54:61:68:22:
0a:80:29:78:07:1f:03:b6:99:f6:09:60:75:9b:2f:15:cf:8c:
23:26:93:2b:90:17:2b:cf:41:f4:47:2d:42:84:df:84:5f:fe:
7b:56:e8:37:f1:e5:72:86:2e:c4:f2:87:b0:e0:fa:38:75:46:
20:3a:1a:a7:21:a6:50:c9:fe:7a:f1:83:3c:19:8d:a4:68:35:
5c:60:31:ca:31:25:7a:d6:e2:ab:33:43:e9:79:75:34:a0:58:
4a:f0:6b:da:44:7f:41:c2:5d:2e:96:53:ed:ad:45:9d:04:01:
a6:02:f3:92:83:7b:81:dc:93:ec:d5:71:ab:00:bf:16:1e:88:
09:ea:d2:ed:f6:f4:af:81:b4:84:a8:94:b9:2e:73:dd:26:76:
c1:f3:9e:52
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUT3TCNuFK/+N3CWGoooJ14MSufHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDIyMzU1MjVaFw0yNzExMDIwMDAwMjVaMDMxMTAvBgNV
BAMTKDVCOTRGMjMyNzVGOTkwNkVDQ0QwNDdFNjlFQkY3RjIzRDQ2MkJFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCsFRb+n/lH9I52qsznU/DkGJ
dSqNvPexzHKHx+KvVrmPU3NYpGSd5ZApiZueXLAOL6ujL+DiPoc96ues/i/seRGp
uR/LT9Y8NR5o17EwXBjh7GSnqnGmirX0WYpcgRei1jFwpjfeVJ2Ru6R+v5xe398D
WdbapwOl/focgbSZzbFt2lfPcrxxKEWZ0bEPce1RbvWeZqtG2bDKOpSxMtA4UIQV
rqRkf7mAMtpgIraN4sTAogvJE13+3k2k8un3ZeYNnlrnBU9TT/MWQtE2/rIjLyto
RaBmTWSQojyKq7CbF0RO36QtqabgtXm2ZDWFeCHwt7dABrw5GHOdiIbFNSojAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUW5TyMnX5kG7M0Efmnr9/I9RivqQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NjA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVEtM
MA0GCSqGSIb3DQEBCwUAA4IBAQCWFeQZSR3RUqcbsnrbkNei8VaaTDh/ikP6aCfp
erIdfj4m4bDPSAsfMLDjwfyjG6tvH/rqY1C8HDHtMkn6vCENhxjyWgZbkfDgcFn5
MwkriXv70xrgSiGjCeQtrpd/0y4oBwUHb1WPUlRhaCIKgCl4Bx8Dtpn2CWB1my8V
z4wjJpMrkBcrz0H0Ry1ChN+EX/57Vug38eVyhi7E8oew4Po4dUYgOhqnIaZQyf56
8YM8GY2kaDVcYDHKMSV61uKrM0PpeXU0oFhK8GvaRH9Bwl0ullPtrUWdBAGmAvOS
g3uB3JPs1XGrAL8WHogJ6tLt9vSvgbSEqJS5LnPdJnbB855S
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:22 2026 by rpki-client