Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215153.roa
File: AS215153.roa (raw, json)
Hash identifier: VccTv0FVbi9Dz+c98wz+H3pzqApvH5tj7kc7yunCq5s=
Subject key identifier: A1:95:10:5F:02:45:83:16:6E:0F:F6:04:81:E0:EC:96:40:E7:16:BD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6CE27471FE674A8A2C0797307C12B835AB665A54
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215153.roa
Signing time: Fri 25 Jul 2025 08:07:44 +0000
ROA not before: Fri 25 Jul 2025 08:02:44 +0000
ROA not after: Fri 24 Jul 2026 08:07:44 +0000
asID: 215153
IP address blocks: 2a0f:85c1:3b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e2:74:71:fe:67:4a:8a:2c:07:97:30:7c:12:b8:35:ab:66:5a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:44 2025 GMT
Not After : Jul 24 08:07:44 2026 GMT
Subject: CN=A195105F024583166E0FF60481E0EC9640E716BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:54:68:92:6e:c5:99:f7:15:b1:10:f3:56:
72:3b:e5:02:6d:cb:41:cd:0d:17:3b:4e:32:12:89:
4b:78:b9:9f:1e:52:0a:5b:b5:2d:75:fe:ac:fb:f9:
45:7f:a3:50:57:75:5b:68:90:01:85:5d:2c:29:f9:
38:29:d9:f0:b0:1d:83:56:60:2f:c0:29:94:41:a9:
87:fd:83:ac:c1:a1:9e:ed:3c:b4:f4:25:5c:26:a1:
ce:e8:d2:eb:06:03:ca:02:3b:88:4e:09:7d:3c:29:
f3:50:0e:01:9e:0d:58:a0:93:00:8e:19:e0:cb:b2:
2e:e9:82:8d:1c:ea:68:fb:a3:4f:9a:3a:f1:7f:b8:
3b:6b:2b:ad:29:a6:59:81:61:3b:7a:50:27:ba:c2:
1c:f8:11:cc:d5:eb:36:e9:b7:83:c6:db:1b:f4:64:
23:1f:5b:f4:4a:1b:54:a0:76:d9:7e:f1:59:73:72:
8a:ba:f9:d5:98:8b:a7:ce:95:76:66:dc:2f:8a:a5:
ef:cb:b5:1b:d6:5c:4b:db:d9:c3:62:17:9f:b3:d7:
d5:34:74:57:ef:10:34:88:06:ee:69:f5:92:d1:95:
50:76:4c:0f:4c:e6:f9:31:30:95:09:76:26:84:6c:
20:0f:85:2a:39:e3:1b:a5:7a:4f:a5:be:3f:b5:03:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:10:5F:02:45:83:16:6E:0F:F6:04:81:E0:EC:96:40:E7:16:BD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215153.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:36:60:b2:6e:0b:6f:ce:ae:77:e9:93:53:7d:0c:fb:6c:7e:
9e:83:9a:56:93:aa:8d:db:64:de:61:30:8d:75:ca:04:3d:4c:
7f:1c:16:17:1f:e0:81:a5:ff:db:f9:00:83:53:9e:86:04:71:
df:94:56:24:52:f6:b9:71:92:a6:53:1b:84:e5:9b:2f:a5:ec:
32:4b:dc:61:5c:fc:b1:9b:03:0c:7d:1d:3d:9d:26:22:54:19:
8a:f8:41:8e:47:12:39:7c:de:53:b4:61:9e:e5:1a:5b:cc:b2:
db:31:a0:60:16:e6:72:d7:a8:f2:ba:ee:33:aa:c7:cb:35:59:
1c:07:02:df:ae:77:ed:b4:09:0f:d6:77:7c:30:94:05:52:c9:
fc:56:b8:c0:7e:3e:6b:e1:c4:29:64:ed:0e:d4:5b:d8:50:a4:
16:34:ec:7e:56:f2:ba:26:80:1c:1a:a7:d7:7c:5c:6b:ca:f6:
d4:af:0c:31:f1:0e:90:41:93:41:93:ba:06:c4:6d:9b:02:06:
99:75:93:7c:63:99:26:0d:1c:b8:31:37:9e:dc:ee:13:f6:c6:
a6:a0:6b:05:dc:42:15:f6:a2:d8:ba:2f:20:cc:90:d2:4c:44:
06:56:73:5a:83:08:b6:32:69:cc:d1:40:9e:3e:b7:ac:ed:10:
a5:5c:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:01 2025 by rpki-client