Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
File: AS215693.roa (raw, json)
Hash identifier: DOBch9LvijBeMSGsHsl0It5cx6mCKEc58au0JKuHTbM=
Subject key identifier: 48:D9:5B:47:AC:FC:4A:C7:22:B7:B6:5E:26:0A:07:0D:6F:FE:5B:C6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3464377D1FF8DD78DCFA30FB0DED4E9EAF058B92
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
Signing time: Thu 17 Sep 2026 14:31:10 +0000
ROA not before: Thu 17 Sep 2026 14:26:10 +0000
ROA not after: Thu 16 Sep 2027 14:31:10 +0000
asID: 215693
IP address blocks: 82.21.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:64:37:7d:1f:f8:dd:78:dc:fa:30:fb:0d:ed:4e:9e:af:05:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 14:26:10 2026 GMT
Not After : Sep 16 14:31:10 2027 GMT
Subject: CN=48D95B47ACFC4AC722B7B65E260A070D6FFE5BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:3f:da:00:f4:27:da:6f:93:74:d1:00:21:
5e:85:48:5a:ed:e6:7a:5a:af:5b:3d:60:c9:3c:dc:
8c:0f:a9:1b:d0:37:20:ec:54:77:16:d9:90:70:b8:
6b:98:8d:f3:c3:e2:f3:d9:80:4f:79:13:4b:09:3f:
f9:c3:0e:7a:a5:11:03:ad:9d:6a:ad:6f:0e:22:77:
e7:ff:7f:2f:ef:d6:ab:b5:72:d1:8b:33:21:64:21:
ee:aa:9b:ab:d1:be:b5:78:f7:54:d9:49:e4:d5:94:
20:05:e3:10:2f:ba:5c:d7:5f:fa:06:af:4f:c0:57:
20:59:64:a4:63:7d:5b:c1:ec:71:22:d8:8e:6c:96:
c0:4b:86:82:56:bf:6a:c4:9b:7c:d7:84:ca:f3:7d:
1d:8f:2a:0d:4e:28:8c:aa:58:6b:4f:0f:ba:e6:61:
9c:f0:58:64:a2:93:3a:88:dc:c5:17:87:e6:9f:a1:
41:85:15:7f:84:3f:c4:ad:a8:be:3e:41:56:4e:f2:
3b:16:c7:2f:59:33:cd:99:5d:ac:d8:be:e2:a2:bd:
e0:26:63:78:96:8c:49:b3:98:80:25:5f:26:4c:36:
f8:05:86:ff:2b:4d:b1:b5:26:a3:1c:1e:55:40:a1:
b5:21:24:0f:d1:06:ea:25:8c:e2:31:68:97:b3:d7:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:5B:47:AC:FC:4A:C7:22:B7:B6:5E:26:0A:07:0D:6F:FE:5B:C6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.6.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ec:f4:f8:a6:cd:0f:b9:51:bf:86:d3:77:80:c3:36:5f:4d:
14:f0:3a:78:f7:8a:15:bb:6a:36:56:45:58:d9:5c:db:ce:97:
cb:70:8f:a5:e7:c4:69:b5:8f:f7:a1:50:e0:d9:d9:e9:74:66:
1f:c4:03:2c:d6:de:97:56:52:02:57:4d:51:26:d3:5d:29:a1:
9a:64:1a:10:eb:29:7e:79:2b:bc:90:24:f5:60:0d:91:c9:81:
a8:f3:60:4a:10:15:ee:03:18:e3:7b:5f:8e:44:0c:d7:a2:8f:
63:73:4b:7a:31:d4:05:ad:18:fa:76:96:be:a7:b4:e6:30:ab:
cc:32:4f:1c:75:74:0b:fe:1d:24:c2:98:3b:bc:49:f0:54:76:
a2:cf:a8:68:c1:54:f5:f4:9a:dd:97:a5:8d:14:9d:30:6a:d3:
78:25:e4:ed:68:6d:5f:28:51:b7:33:8a:91:d1:c3:57:cf:36:
19:87:e2:f1:a7:69:cc:71:22:98:a5:0d:20:e8:06:8d:7e:e1:
84:c2:5a:3e:ba:6f:a7:dc:a4:a6:ae:df:c3:3f:e0:73:66:cd:
3f:a0:bc:2d:18:f8:d9:57:41:55:b7:43:d7:16:59:88:6c:d3:
3b:05:9c:59:57:a6:0a:ee:3c:cd:e4:ed:db:a1:3b:c0:a0:1d:
db:54:15:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNGQ3fR/43Xjc+jD7De1Onq8Fi5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTcxNDI2MTBaFw0yNzA5MTYxNDMxMTBaMDMxMTAvBgNV
BAMTKDQ4RDk1QjQ3QUNGQzRBQzcyMkI3QjY1RTI2MEEwNzBENkZGRTVCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdz/aAPQn2m+TdNEAIV6FSFrt
5npar1s9YMk83IwPqRvQNyDsVHcW2ZBwuGuYjfPD4vPZgE95E0sJP/nDDnqlEQOt
nWqtbw4id+f/fy/v1qu1ctGLMyFkIe6qm6vRvrV491TZSeTVlCAF4xAvulzXX/oG
r0/AVyBZZKRjfVvB7HEi2I5slsBLhoJWv2rEm3zXhMrzfR2PKg1OKIyqWGtPD7rm
YZzwWGSikzqI3MUXh+afoUGFFX+EP8StqL4+QVZO8jsWxy9ZM82ZXazYvuKiveAm
Y3iWjEmzmIAlXyZMNvgFhv8rTbG1JqMcHlVAobUhJA/RBuoljOIxaJez1643AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUSNlbR6z8Sscit7ZeJgoHDW/+W8YwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NjkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhUG
MA0GCSqGSIb3DQEBCwUAA4IBAQA37PT4ps0PuVG/htN3gMM2X00U8Dp494oVu2o2
VkVY2VzbzpfLcI+l58RptY/3oVDg2dnpdGYfxAMs1t6XVlICV01RJtNdKaGaZBoQ
6yl+eSu8kCT1YA2RyYGo82BKEBXuAxjje1+ORAzXoo9jc0t6MdQFrRj6dpa+p7Tm
MKvMMk8cdXQL/h0kwpg7vEnwVHaiz6howVT19Jrdl6WNFJ0watN4JeTtaG1fKFG3
M4qR0cNXzzYZh+Lxp2nMcSKYpQ0g6AaNfuGEwlo+um+n3KSmrt/DP+BzZs0/oLwt
GPjZV0FVt0PXFlmIbNM7BZxZV6YK7jzN5O3boTvAoB3bVBXx
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:06:43 2026 by rpki-client