Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215030.roa
File: AS215030.roa (raw, json)
Hash identifier: ebIeJLQiXY1vAu6w3Nwu5f6uYhfI84ZYEzTc9T60Uio=
Subject key identifier: D8:BE:4B:43:A6:55:C3:91:54:94:F4:CD:69:64:43:EE:A8:16:95:9A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 16AABD5F93B407E229D71E7DAE59786520973062
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215030.roa
Signing time: Sat 11 Apr 2026 05:38:19 +0000
ROA not before: Sat 11 Apr 2026 05:33:19 +0000
ROA not after: Sat 10 Apr 2027 05:38:19 +0000
asID: 215030
IP address blocks: 147.78.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:aa:bd:5f:93:b4:07:e2:29:d7:1e:7d:ae:59:78:65:20:97:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 11 05:33:19 2026 GMT
Not After : Apr 10 05:38:19 2027 GMT
Subject: CN=D8BE4B43A655C3915494F4CD696443EEA816959A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:e2:b6:30:3a:7b:c0:7b:1d:c9:e1:90:52:
06:de:75:4f:44:d2:e1:88:42:d3:7b:2c:64:18:cc:
c6:b6:0c:be:c8:cf:cc:26:ca:16:85:95:71:07:89:
67:bf:d9:14:08:e5:da:af:aa:cb:40:d9:16:f1:c4:
b7:ca:58:e8:9f:02:c2:99:fd:80:83:32:a3:38:cf:
bc:44:60:1c:38:92:62:2e:51:42:ba:4e:78:f1:a5:
58:32:15:5b:17:11:f8:dd:89:e8:af:34:33:cd:7f:
f9:25:09:b1:5b:55:82:d0:52:aa:4a:3a:3b:28:fd:
a7:46:0c:38:2a:8a:15:a8:fc:e9:9d:67:d6:c6:19:
52:e1:ec:90:41:81:ce:1c:37:8d:ae:88:c4:ae:90:
74:dd:74:2a:47:27:f6:3b:48:0f:69:c8:ea:b7:25:
85:8f:bd:25:a0:65:00:1c:e6:f8:63:85:9e:99:38:
9b:8b:23:39:f4:57:8a:e4:84:fc:db:97:6c:19:e8:
5a:39:50:22:1b:14:99:77:32:61:fc:5d:40:f8:ab:
61:a1:45:09:64:46:e0:06:f6:2b:4d:9b:1c:f4:11:
5c:82:22:55:2d:87:a3:93:bd:6f:91:f2:ea:dc:5a:
16:3d:80:23:9e:65:38:14:f1:dd:47:f6:b7:75:8b:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BE:4B:43:A6:55:C3:91:54:94:F4:CD:69:64:43:EE:A8:16:95:9A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a6:9c:3b:3e:ee:67:0b:ca:a0:73:ca:48:aa:b3:5f:31:10:
59:5c:87:4f:67:d7:50:f7:d5:45:83:40:74:b9:ec:96:d5:67:
a0:57:ab:66:1d:44:86:06:cf:5e:4f:2f:0a:92:9e:d4:a2:dc:
65:be:0d:75:76:a6:af:10:57:4d:1a:21:4b:e3:95:0d:c3:bc:
d1:c4:3d:3d:5f:88:7d:7a:d3:22:08:8e:7c:47:96:aa:46:66:
50:4a:b8:3d:8a:bf:4b:72:33:02:5e:d2:3f:f9:08:e3:79:3a:
6c:f3:cb:bf:41:ce:e1:d0:c7:3d:43:db:70:fa:c1:4f:9a:f6:
8e:64:2f:27:37:b1:1b:bf:e8:9e:1b:b8:b2:e9:5b:24:bd:f8:
a1:7b:b1:ee:09:e9:82:42:c6:87:5e:80:01:45:ce:d3:1f:20:
93:b7:f0:70:42:4a:0f:65:56:83:c0:90:0a:af:68:c2:6d:90:
6b:a9:9c:0c:ad:90:89:53:47:c7:45:df:e4:41:a1:94:3c:1b:
54:04:99:05:fb:61:42:af:1a:da:63:4e:b6:bd:08:dd:52:4d:
53:d2:d4:16:c6:5a:ac:d0:dd:82:e3:fa:68:0a:96:ba:2e:11:
08:a9:ff:1d:56:99:de:22:44:8d:9c:31:67:8b:fe:d9:aa:4f:
39:a6:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:28 2026 by rpki-client