Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215105.roa
File: AS215105.roa (raw, json)
Hash identifier: egWpJgLWVtI3bWJU2sSHrUjstbhhH8JiURb/5TUi+ks=
Subject key identifier: 35:B1:63:3A:2E:C2:19:E3:41:31:23:FD:F3:3D:55:52:1A:52:01:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5AA78760671444E0ED7A4EE390C05CEC7E004F2C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215105.roa
Signing time: Fri 25 Jul 2025 08:07:40 +0000
ROA not before: Fri 25 Jul 2025 08:02:40 +0000
ROA not after: Fri 24 Jul 2026 08:07:40 +0000
asID: 215105
IP address blocks: 2a0f:85c1:3b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a7:87:60:67:14:44:e0:ed:7a:4e:e3:90:c0:5c:ec:7e:00:4f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:40 2025 GMT
Not After : Jul 24 08:07:40 2026 GMT
Subject: CN=35B1633A2EC219E3413123FDF33D55521A52011C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:ce:3f:fd:73:8f:74:e8:00:8f:bf:ba:ae:
69:fd:77:25:0a:77:48:1b:71:8f:9e:17:48:09:58:
c4:17:73:46:da:69:15:e0:ad:6c:be:dd:d0:61:64:
ff:39:87:63:0c:2f:d1:5c:0b:e6:81:9d:30:53:fa:
3c:b7:25:d3:a1:e4:6e:34:e7:2a:8c:6e:45:70:cd:
9f:c0:9e:70:d5:05:98:f2:de:13:0c:c1:7a:96:e9:
e8:ae:57:f8:b7:2b:f3:b6:03:8f:a7:c3:64:29:60:
1f:9c:e2:fb:66:dc:8b:ce:ef:1b:45:ce:dc:65:19:
f4:84:7f:5f:3e:3e:75:4f:23:c9:5f:b4:ce:eb:db:
ec:29:21:92:aa:fe:d7:63:51:8d:0f:e0:89:3b:21:
b2:a3:f4:56:3a:ee:b5:93:af:f3:51:e1:94:d0:53:
33:dc:27:12:b6:f1:87:a9:3c:ec:01:a3:aa:63:34:
68:3c:e4:7a:3d:e0:ae:b1:0b:94:57:6b:b3:6d:b3:
61:c2:7e:d5:65:8d:93:62:dc:ad:be:44:b9:e2:61:
55:08:ce:b2:60:0c:01:11:f5:89:9b:0f:3a:d8:c4:
68:33:fe:ae:bf:18:46:8a:33:35:64:a2:55:df:90:
b2:9d:ba:4c:ad:6f:d4:cc:70:85:c8:2e:66:5b:f6:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:63:3A:2E:C2:19:E3:41:31:23:FD:F3:3D:55:52:1A:52:01:1C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b5::/48
Signature Algorithm: sha256WithRSAEncryption
61:9f:6c:64:8d:85:94:d2:c7:e5:17:52:36:2a:67:83:7c:cf:
06:2a:83:3d:c1:20:2e:58:14:b5:29:c5:fe:05:bc:a9:16:02:
0e:bf:46:8e:f0:6d:98:bf:44:6b:99:24:3e:a7:1f:7c:08:be:
17:bd:6b:d4:0b:e3:22:b0:c8:75:db:5c:97:4d:05:42:48:46:
c1:ad:b3:65:97:20:b6:91:9a:5c:72:74:2f:43:94:f0:17:66:
e9:5f:65:50:ba:25:af:c5:71:9e:f7:8f:66:20:21:fc:a3:37:
57:5b:85:fb:e6:52:d4:f6:c3:c5:69:9e:e5:2e:91:e1:84:77:
13:48:15:16:63:3c:e7:25:02:b8:30:83:82:34:5c:98:53:f7:
e1:c7:16:1a:be:71:08:c6:a5:fd:21:a1:ab:6e:e7:b2:fd:0d:
32:fd:7c:97:1a:8d:ce:a0:10:46:9a:1a:74:c4:88:43:84:83:
2d:54:51:06:68:49:04:38:0e:89:c1:62:e8:34:c5:18:89:97:
85:b2:ac:b8:32:48:4d:80:eb:a9:d9:95:cb:7c:35:6d:93:2f:
49:7a:e4:03:16:07:4a:77:1f:35:47:da:ee:5d:78:78:bb:ac:
bd:59:93:78:dc:df:4f:59:78:a3:5c:87:fd:46:67:e1:5f:72:
b0:f7:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:25:44 2025 by rpki-client