Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215111.roa
File: AS215111.roa (raw, json)
Hash identifier: y7qbHjbTm6nNJ4Tp9gpo8hoeefrDNfw2QIg1Ue/Ul7U=
Subject key identifier: 39:A9:85:55:7D:C0:76:0E:A7:BD:0D:69:CA:3E:51:9E:9E:CF:C6:BC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0A9F55D92017291A957DFADBB9E15ED01AEF77EB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215111.roa
Signing time: Fri 25 Jul 2025 08:07:41 +0000
ROA not before: Fri 25 Jul 2025 08:02:41 +0000
ROA not after: Fri 24 Jul 2026 08:07:41 +0000
asID: 215111
IP address blocks: 2a0f:85c1:3be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9f:55:d9:20:17:29:1a:95:7d:fa:db:b9:e1:5e:d0:1a:ef:77:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:41 2025 GMT
Not After : Jul 24 08:07:41 2026 GMT
Subject: CN=39A985557DC0760EA7BD0D69CA3E519E9ECFC6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:d6:bb:fb:dd:db:1a:86:50:0b:fd:d3:b0:
ec:de:39:6e:e0:1a:4f:6a:74:be:99:66:58:1c:d3:
2c:bc:2c:7b:fd:a1:2e:2a:bf:14:19:23:2a:76:d6:
b6:68:74:2a:14:68:50:8c:79:2c:8e:86:52:e3:ef:
b9:58:15:2c:af:fe:fe:d7:19:5e:34:91:17:45:10:
5b:97:29:45:d6:2f:0b:53:82:75:b7:3f:56:ed:f0:
f8:c7:c6:8c:46:16:02:09:cf:9e:9f:78:02:88:c0:
27:ae:8f:1d:81:47:91:e6:eb:24:36:30:a5:42:10:
ae:34:70:35:16:f9:4f:11:7e:1d:3b:06:2b:f7:85:
f3:6f:2d:a8:e8:d9:be:04:c1:f5:72:be:72:94:37:
a4:11:48:ec:9a:de:82:e4:c9:51:88:1b:87:76:82:
72:05:66:37:d9:90:30:63:9a:5b:ac:54:8b:09:77:
10:fa:72:57:5e:7d:88:d3:49:4e:9e:a7:3e:35:3c:
d5:25:bc:ae:77:78:19:85:9c:d2:43:58:58:2a:b8:
ad:85:4f:9f:f0:16:f7:be:d8:da:14:e9:00:b2:da:
51:6c:a7:4f:23:43:2c:ec:eb:77:ce:7f:35:0d:ee:
d0:e3:01:13:63:1e:bf:f8:ac:b0:21:5c:ed:57:1f:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:85:55:7D:C0:76:0E:A7:BD:0D:69:CA:3E:51:9E:9E:CF:C6:BC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3be::/48
Signature Algorithm: sha256WithRSAEncryption
b6:82:60:84:48:8a:0f:0b:55:8e:df:65:6b:fe:05:ee:7e:c6:
54:06:1a:84:8a:7f:cb:eb:24:59:b5:0e:9c:44:d1:b5:df:85:
6e:ee:14:ba:8c:5d:a2:13:e0:d9:51:e5:cb:fa:67:bb:8f:c1:
47:2d:29:dc:9e:5e:f7:e1:2e:3a:5c:75:d9:50:ac:65:46:48:
15:28:84:c9:5d:46:18:5d:66:42:4b:f6:ad:b4:16:cc:f1:46:
91:67:d9:b0:8b:7b:bd:77:2b:a4:b5:83:b4:62:52:d8:02:90:
f2:1c:03:39:42:b7:7e:55:9b:6c:dc:dc:b6:5e:6c:dc:06:de:
51:7e:c9:6b:b3:2c:f0:5f:36:df:17:e4:80:e7:71:3a:ec:66:
bb:00:c9:82:55:9f:73:ba:fb:19:47:49:6f:3b:7f:5c:64:aa:
77:ad:73:dc:d1:e5:97:2c:3a:0c:f8:be:b8:4f:fa:18:5a:a4:
43:60:04:08:ab:b3:6a:05:2b:2c:bb:f9:db:72:12:15:9e:ba:
20:4e:8d:3d:6f:6d:c2:88:81:b7:a5:31:d9:0c:91:78:3c:04:
72:f0:e3:17:7f:e8:68:3b:cf:55:64:fd:52:33:8c:4d:3a:b3:
4e:d5:e8:c3:86:e4:7b:cf:9d:1b:2c:53:68:6c:de:d3:e6:27:
28:f1:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:43 2025 by rpki-client