Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: aXY+b5bIsl2pgR1upXQ0yUXFfmluJwUHHlljyBruBiU=
Subject key identifier: 95:7A:0E:39:11:91:0A:E1:3E:DF:7F:A2:0A:B1:35:C1:AF:4E:1C:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 40A1E2A4F50BAE3B7D02D6B37BF1AC3997F36148
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215672.roa
Signing time: Fri 18 Sep 2026 16:49:35 +0000
ROA not before: Fri 18 Sep 2026 16:44:35 +0000
ROA not after: Fri 17 Sep 2027 16:49:35 +0000
asID: 215672
IP address blocks: 2a13:9500:fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a1:e2:a4:f5:0b:ae:3b:7d:02:d6:b3:7b:f1:ac:39:97:f3:61:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 16:44:35 2026 GMT
Not After : Sep 17 16:49:35 2027 GMT
Subject: CN=957A0E3911910AE13EDF7FA20AB135C1AF4E1C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:52:46:c6:24:b1:fb:fb:79:06:02:f8:01:
90:c4:6e:e8:d5:c1:f9:8c:8f:93:f0:ea:75:84:88:
5b:13:a4:03:2c:13:0f:2a:ab:8b:4d:eb:7a:47:bd:
50:31:76:cf:9c:3d:b2:f7:07:38:db:c7:91:17:fc:
61:4f:83:65:a4:d6:70:20:25:64:17:26:7f:3b:5e:
6a:89:43:78:34:3a:cf:da:ba:38:65:af:54:84:0c:
29:5a:6d:fa:1b:03:6b:03:fc:29:91:d9:a1:8e:16:
d4:75:7b:6b:22:9f:c0:94:e2:20:d8:c5:06:ea:b9:
8f:14:7e:30:11:e2:02:20:80:cb:01:00:d6:fd:19:
24:9f:c4:fa:d7:b0:d2:1c:fb:22:ef:de:bb:9c:a2:
68:4d:88:7c:fd:f2:69:03:99:21:d8:50:66:ec:60:
97:aa:4c:20:ba:ac:18:29:b8:d9:1e:0f:43:ca:16:
15:9d:b2:75:91:7f:09:63:33:e0:b2:d4:7c:3e:0e:
9c:b1:ab:3f:87:87:21:7d:fa:5d:c4:10:89:63:2e:
6c:51:86:3e:f0:26:9f:96:8c:09:50:89:ed:79:56:
58:a6:41:2c:e6:1d:94:df:0a:bb:fc:fa:be:43:9a:
09:cf:13:34:ce:7b:aa:a6:0e:c5:ee:d4:83:33:cc:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:0E:39:11:91:0A:E1:3E:DF:7F:A2:0A:B1:35:C1:AF:4E:1C:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:fb::/48
Signature Algorithm: sha256WithRSAEncryption
8b:2c:0c:a0:82:fb:ea:cf:6e:a4:bc:f7:9b:61:c8:a9:5b:ac:
13:0c:60:e0:d4:0f:e9:2b:9f:7e:57:4d:29:22:8c:4d:5a:14:
33:b2:26:04:53:49:07:90:fe:5c:3f:43:ec:43:1b:96:8d:bc:
07:d1:92:c9:cf:ab:31:f2:b1:67:14:41:ec:00:51:b3:77:4c:
41:c8:28:c8:d1:af:21:f9:d7:82:53:12:89:a6:28:33:c5:76:
39:ea:2e:70:87:77:f2:6e:44:75:13:f7:af:78:8e:91:37:e7:
93:8e:b0:56:54:80:3e:aa:21:f1:a3:d9:69:a9:b9:de:aa:7b:
73:21:fd:e0:c8:7b:5b:73:10:fe:ad:af:c5:b5:76:66:19:38:
38:df:33:1b:89:62:77:17:5a:45:9d:47:01:91:4f:be:9e:51:
5e:cc:bf:76:84:bb:53:4b:76:b3:c2:25:19:be:f7:93:c1:14:
61:3b:68:fb:30:b8:14:29:09:f6:d8:d4:08:c0:9f:f8:61:c8:
61:4c:8c:68:38:26:5b:5a:06:12:3d:e8:66:2f:f5:e9:28:c1:
ce:f4:39:6f:6a:5d:fc:80:88:58:53:c2:84:76:ed:ed:90:4f:
7d:65:2a:64:7f:ed:45:e7:53:e9:34:9d:12:93:4e:74:6d:c0:
55:6c:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:45:38 2026 by rpki-client