Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215828.roa
File: AS215828.roa (raw, json)
Hash identifier: +FR2izOJz5pi+g5JBrQRvXoV62vWzshh6nvsgYrWdfE=
Subject key identifier: B2:67:12:38:9B:5C:C6:2E:70:C5:14:C9:42:FB:B4:E6:06:53:F2:41
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 146270155FB7262C08BB425106BCC806E5DF2491
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215828.roa
Signing time: Mon 14 Sep 2026 05:49:35 +0000
ROA not before: Mon 14 Sep 2026 05:44:35 +0000
ROA not after: Mon 13 Sep 2027 05:49:35 +0000
asID: 215828
IP address blocks: 2a13:9500:ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:62:70:15:5f:b7:26:2c:08:bb:42:51:06:bc:c8:06:e5:df:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 05:44:35 2026 GMT
Not After : Sep 13 05:49:35 2027 GMT
Subject: CN=B26712389B5CC62E70C514C942FBB4E60653F241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:7f:0c:e9:bf:ab:ec:fc:74:b4:55:09:a6:
a6:de:f6:a8:fc:be:6d:9b:ef:17:e4:f7:1a:07:1a:
87:59:46:3c:e7:58:35:2d:ad:a9:f3:b1:11:ac:42:
b6:32:36:2f:22:19:4c:05:29:aa:68:3b:1a:2e:cb:
59:1f:78:08:8b:6b:8e:0b:44:c6:6c:33:50:83:25:
85:c3:49:25:ef:70:f7:9d:cf:df:36:d5:d8:60:f9:
e9:12:05:ec:3b:f9:86:4c:85:82:f0:78:5e:b2:27:
9d:e8:0c:e3:84:ab:6d:cd:ea:bd:fa:0d:78:16:bb:
19:41:d1:2d:da:eb:99:ee:87:08:f6:b2:b1:45:7a:
4e:02:0d:71:b3:1a:90:f4:e6:08:63:bb:48:20:ac:
99:21:88:7a:0b:76:cf:e5:6c:f7:cb:dd:55:c5:7c:
31:9a:9f:f6:ab:1a:ec:22:af:c7:00:c4:4f:10:d0:
d4:67:90:b4:e4:60:78:f0:bc:9e:9b:b4:5d:92:a2:
74:f7:db:08:f5:ed:d7:22:76:4c:a2:83:31:fc:44:
88:ac:09:c9:83:18:df:21:cf:5b:76:6c:53:ac:55:
2b:1d:42:b8:f5:13:a3:41:e6:13:64:21:ce:f6:58:
64:b5:ed:90:85:1a:be:ed:e8:f6:05:2d:9a:d0:0a:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:12:38:9B:5C:C6:2E:70:C5:14:C9:42:FB:B4:E6:06:53:F2:41
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ef::/48
Signature Algorithm: sha256WithRSAEncryption
41:11:41:9b:21:2f:72:80:60:33:b9:38:b2:a6:45:40:d6:18:
33:c7:93:f1:00:cc:e5:e7:e9:04:ce:2d:7c:34:fe:4d:7c:bc:
1c:87:2e:f9:89:10:f2:8d:f8:33:7c:98:16:d2:00:b6:ba:24:
ea:10:19:4c:2d:78:4f:f1:2d:0d:12:e7:23:aa:57:9b:5f:69:
55:4c:cd:df:b7:cc:0c:6e:8c:60:c2:ae:c2:7a:59:96:cd:53:
8e:6d:21:1a:c4:9f:2b:33:6d:c6:44:7f:dc:f0:66:59:a3:05:
1d:16:fd:36:fc:24:fc:ff:bd:6f:fc:e9:c8:52:d5:d5:16:4a:
07:51:fc:76:91:6d:b3:2d:36:ee:ae:79:69:09:6b:bd:b1:75:
a8:fd:55:b1:47:b6:89:5c:38:67:d8:40:6e:9a:61:18:c1:db:
fc:9b:f8:ca:a1:cf:02:1a:d7:88:46:4c:8a:6b:ae:16:bb:81:
36:3a:ed:38:52:83:fd:c5:91:2f:19:4d:a6:af:9d:55:bc:36:
0c:45:ea:cd:ed:f3:b2:41:b9:a1:24:93:88:bc:cf:75:0d:b3:
2c:a2:e5:66:c3:99:03:82:b6:c3:1c:d5:ae:e1:86:82:1c:d8:
73:41:10:b8:0c:ef:45:2f:f0:11:e8:2c:4b:8c:74:96:a1:f6:
c9:76:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:44:59 2026 by rpki-client