Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215152.roa
File: AS215152.roa (raw, json)
Hash identifier: OPz58gJB8uXeB9uzRlE/4R0USrMWEWOisZqG/xCynF4=
Subject key identifier: AE:18:E4:F6:11:4D:29:6A:A2:80:39:05:A0:84:57:64:B8:63:FF:2B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5672CA3B5CBC921F9FF88EADCE1E6EE0FB579B29
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215152.roa
Signing time: Sun 01 Mar 2026 05:35:57 +0000
ROA not before: Sun 01 Mar 2026 05:30:57 +0000
ROA not after: Sun 28 Feb 2027 05:35:57 +0000
asID: 215152
IP address blocks: 91.206.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:72:ca:3b:5c:bc:92:1f:9f:f8:8e:ad:ce:1e:6e:e0:fb:57:9b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 1 05:30:57 2026 GMT
Not After : Feb 28 05:35:57 2027 GMT
Subject: CN=AE18E4F6114D296AA2803905A0845764B863FF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:2c:69:fd:da:ea:69:1c:26:79:bc:79:a2:
df:f0:fe:76:68:5d:97:d9:f6:a8:88:72:33:6b:56:
50:1d:0b:60:4f:4f:73:68:53:17:72:cc:13:27:94:
c5:e4:71:a9:14:1b:4c:50:08:41:56:e9:52:08:4a:
bc:7f:cd:cc:90:21:10:24:2c:9b:22:10:22:12:81:
dd:c4:27:dc:1e:88:c0:de:9d:1b:83:65:7e:55:ed:
c1:82:71:78:23:fb:ec:5d:f5:5e:ec:42:09:54:9c:
4c:e6:6a:4f:21:42:40:35:dd:98:a6:9d:ee:7c:9a:
6a:33:ba:f1:79:12:67:46:d5:e6:58:9a:62:ed:f6:
1c:89:1b:df:e5:46:7b:25:bd:83:a4:5e:8f:a8:46:
c2:7a:02:3a:91:b1:94:15:e6:e8:85:c2:b2:af:7d:
9e:47:99:f5:c0:c3:77:09:7a:6b:2c:ba:7c:05:6f:
1b:00:de:3d:cc:f7:2e:32:06:85:65:cf:d5:a6:27:
c6:21:c6:f1:22:26:6e:9a:ad:88:22:80:c2:b2:a7:
51:cd:05:9d:c4:da:09:39:6b:6d:5b:83:b7:c4:c4:
8c:65:dc:79:97:62:f7:be:2e:5d:32:10:cb:04:12:
08:4d:9b:db:26:2b:66:48:3d:d7:be:99:a4:e1:f0:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:E4:F6:11:4D:29:6A:A2:80:39:05:A0:84:57:64:B8:63:FF:2B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
Signature Algorithm: sha256WithRSAEncryption
68:25:50:52:b7:2d:f3:f9:1f:b0:fa:b6:7a:3f:27:0d:55:f7:
b4:50:89:f0:63:49:d6:06:2e:43:d2:95:6b:ea:9d:36:d9:ba:
c7:d3:84:43:df:aa:11:dc:49:86:7b:55:1d:01:32:3e:25:19:
8d:5f:c5:90:d7:5b:9f:6f:f6:7d:09:61:aa:1b:46:10:77:33:
ff:3d:23:a1:00:a0:56:34:fd:28:b2:31:51:ed:7e:c1:dc:bd:
54:ad:4f:49:1a:a5:a4:81:95:b6:3c:43:a5:3f:eb:2e:6b:25:
95:a9:d2:b5:6b:19:44:ca:5a:ba:d0:68:6f:a8:8b:0c:54:95:
0d:23:88:97:7b:b7:64:5c:4f:6c:dc:31:18:ec:b1:32:ba:a4:
a0:7b:8c:d8:75:f6:e3:bf:4e:fe:74:b7:ce:a3:93:ff:da:c3:
b2:15:f2:b4:98:16:28:30:9f:82:3e:40:72:91:48:ef:e2:76:
8f:5d:9a:39:73:20:b8:85:b1:88:9b:04:4e:77:42:4f:e0:32:
10:de:64:5d:26:53:ac:ab:47:8e:fb:c8:e2:60:39:93:6f:45:
d4:8f:64:1f:b1:85:ec:08:88:3a:7c:eb:ac:9f:af:cc:ef:d2:
01:c3:06:39:f0:5e:21:a6:cd:3f:60:33:d3:51:9f:5a:7a:40:
42:88:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:56:13 2026 by rpki-client