Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: euYeMHLWE9WZDwXbz+zJCwOrs5WComKPp//8EGgS+m8=
Subject key identifier: 03:D8:F1:FB:91:D7:76:6C:7A:3A:81:23:9C:E4:3B:7A:37:9A:02:C1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 68F515A6E7AD05CFB13B871534232CDB4B75D4FA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215039.roa
Signing time: Fri 25 Jul 2025 08:07:44 +0000
ROA not before: Fri 25 Jul 2025 08:02:44 +0000
ROA not after: Fri 24 Jul 2026 08:07:44 +0000
asID: 215039
IP address blocks: 2a0f:85c1:3c9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f5:15:a6:e7:ad:05:cf:b1:3b:87:15:34:23:2c:db:4b:75:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:44 2025 GMT
Not After : Jul 24 08:07:44 2026 GMT
Subject: CN=03D8F1FB91D7766C7A3A81239CE43B7A379A02C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:d4:45:81:00:bf:2c:f4:32:ee:3c:01:35:
fb:08:20:95:8e:b7:30:b5:f6:a7:2d:4e:2e:98:eb:
1b:26:cb:e3:9f:fe:c5:7a:2d:73:d8:cd:b1:85:44:
61:e0:d7:e6:7d:6c:ef:35:b1:2a:e3:9e:29:60:26:
32:a2:ec:17:b1:d8:1a:59:ed:9d:54:0f:ee:39:fd:
73:ce:10:08:dc:d6:fc:1c:1c:cd:47:ce:41:0c:2f:
65:4c:d1:e4:12:8a:df:bc:30:c9:51:35:25:bb:bb:
90:05:fb:13:b7:a0:07:11:89:d1:08:49:f0:3c:cb:
8f:6b:86:c8:b3:8c:c3:c3:d1:c6:84:88:db:cd:4b:
92:4a:cc:4d:8e:56:02:f0:ba:f4:ad:36:26:5e:ff:
4f:c7:b3:8a:d6:f3:08:c7:ed:84:a6:69:f1:bf:d4:
08:83:98:20:4a:ca:b6:01:fd:85:c6:7a:b8:05:c0:
e6:01:2b:a7:58:fc:33:bf:b5:ad:3d:e4:4d:fc:59:
44:b8:b1:6c:c6:58:bb:d5:11:c4:d2:65:17:9d:40:
c4:6e:03:b7:89:14:42:d3:3f:b6:74:6e:3c:4b:a8:
ec:f3:47:e8:aa:06:eb:dd:51:db:e7:62:cd:58:5d:
3f:5d:a6:29:bf:40:6e:91:41:a5:88:94:48:e0:47:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:F1:FB:91:D7:76:6C:7A:3A:81:23:9C:E4:3B:7A:37:9A:02:C1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c9::/48
Signature Algorithm: sha256WithRSAEncryption
ee:9a:64:78:d9:28:a9:e7:e0:8c:3c:d5:02:81:d4:53:c4:eb:
a3:88:33:6b:da:a6:58:48:42:ba:60:9f:74:b1:cf:bc:40:6a:
e9:f5:70:50:72:29:a2:84:6d:5e:a2:71:ec:7d:10:57:de:78:
1b:46:b7:81:e2:a7:ab:7d:9d:6d:80:ba:3a:5a:d6:c1:1f:d3:
07:08:3d:34:1d:08:0b:4c:29:0c:da:7a:c5:9f:44:90:0d:2f:
0d:3e:cb:78:dd:f6:d2:4c:b4:42:43:09:ce:68:81:df:1c:55:
c8:fd:9d:2b:27:cb:2f:69:c3:8b:8c:8b:ea:73:1a:43:7e:77:
ad:8b:7b:b3:01:54:dc:73:2d:01:0b:91:0e:bc:14:bb:c5:f3:
11:e6:d2:a7:cb:24:f9:59:20:7c:d7:88:9e:e0:b8:8e:f6:52:
cd:54:fd:90:21:13:79:0a:ba:7b:21:50:06:16:69:11:bb:72:
ac:4b:b6:0d:a6:61:6d:e4:75:4c:ec:6d:30:4e:bb:f9:89:2d:
0f:a3:58:ce:9c:9e:89:b3:0a:4d:b2:20:1b:0b:78:c6:5c:77:
15:cc:f4:3c:b6:98:42:04:45:9c:61:99:64:0f:78:3b:5e:c9:
22:6f:c9:4f:2b:36:70:ec:03:58:01:87:d6:fc:be:c1:95:8a:
91:a7:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:40:40 2025 by rpki-client