
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215172.roa
File: AS215172.roa (raw, json)
Hash identifier: dlLJWicx2HxqH6YdNkAucx1ak7ef7f3ha1cJ2Lxgk0w=
Subject key identifier: 8A:02:FA:70:AD:EB:68:B8:DA:CF:C9:EB:0D:B0:B1:5E:87:7A:82:00
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6F92673274C0EF85A7E1BD7BFF6605FC705BFBFE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215172.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 215172
IP address blocks: 2a0f:85c1:3ad::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:92:67:32:74:c0:ef:85:a7:e1:bd:7b:ff:66:05:fc:70:5b:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=8A02FA70ADEB68B8DACFC9EB0DB0B15E877A8200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:7d:ba:93:ec:d2:c6:fb:fb:65:26:85:fa:
7b:33:92:c7:37:e5:00:24:da:45:a8:9d:0c:b9:a0:
2e:2a:f1:2e:65:d8:87:a1:67:43:26:25:7c:e7:5f:
2d:65:c2:a5:41:6e:b0:96:5a:73:6f:f3:e6:ac:af:
11:8a:9d:75:50:0d:2a:b8:27:b7:30:85:c3:f6:ef:
28:4a:b8:4d:02:d4:d9:95:3b:92:a1:e4:ca:b5:61:
24:39:aa:07:6d:bd:f4:12:9b:13:ad:6b:8d:4d:e3:
cc:41:e7:fc:b0:0e:ea:57:4d:86:b5:bd:10:88:ee:
db:5a:f6:28:5f:37:90:cf:62:1c:bd:d6:4b:3b:35:
9a:16:3d:12:88:74:3b:3d:62:7b:70:40:ce:c4:ef:
fe:f4:84:d5:70:bb:a5:45:45:35:2b:ea:9b:b7:8f:
6b:d9:c1:9a:3a:79:1c:b0:a5:66:a0:66:0f:65:63:
97:7e:e8:c3:08:7d:38:a5:80:4c:15:6e:8e:2f:29:
21:e6:9a:1e:ae:2b:2b:6d:e7:d1:19:c1:ad:bc:29:
a2:a9:4e:a4:af:6f:56:0e:ab:9c:b6:ea:60:0e:c8:
ac:bc:fa:f4:98:4e:44:dc:40:df:7d:d6:2c:6d:9f:
af:6e:4b:53:25:e1:8b:c2:01:a9:68:80:d3:bd:5b:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:FA:70:AD:EB:68:B8:DA:CF:C9:EB:0D:B0:B1:5E:87:7A:82:00
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215172.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3ad::/48
Signature Algorithm: sha256WithRSAEncryption
c1:a7:ae:96:df:cf:29:38:02:29:16:63:ed:6b:d4:9d:f3:cd:
da:1d:a9:fc:81:c0:68:9b:d6:d2:39:55:11:86:02:b8:93:17:
4d:3f:48:49:74:af:0b:08:2f:19:dc:a3:ea:55:93:fb:2a:ff:
9a:14:90:8b:2e:12:b4:77:d4:47:8e:31:34:8b:b6:f8:14:dd:
66:ac:b0:92:eb:dc:5c:c6:d0:d9:4c:3d:20:bd:5a:d2:22:43:
d4:60:ef:15:2c:59:d1:8b:e3:2c:60:57:b2:57:55:1c:0b:3c:
00:1f:6c:a9:c7:42:cb:5c:5a:a3:13:6d:cd:6b:8b:b7:34:84:
f8:85:28:9c:fa:38:3b:02:ca:35:7a:1a:95:9c:8a:09:f0:f8:
58:15:6b:ed:55:e7:79:26:96:54:3d:fb:d8:f6:c2:4f:c3:72:
c2:f9:08:d3:61:07:a4:bf:40:33:af:77:22:6e:ed:24:2c:f8:
88:cc:d7:f2:2b:aa:95:80:47:00:07:1a:a0:2b:84:18:55:9f:
e3:6d:e8:6f:9f:b3:1e:81:2e:28:6b:28:b7:5a:a8:0e:08:1a:
50:fc:28:16:63:e3:ae:91:69:6c:6f:26:46:02:70:3a:5a:3b:
81:98:a0:3e:99:00:e0:53:63:bf:f4:fa:e2:f4:73:5e:6d:42:
0f:97:14:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUb5JnMnTA74Wn4b17/2YF/HBb+/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA3MjUwODAyNDVaFw0yNjA3MjQwODA3NDVaMDMxMTAvBgNV
BAMTKDhBMDJGQTcwQURFQjY4QjhEQUNGQzlFQjBEQjBCMTVFODc3QTgyMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3n26k+zSxvv7ZSaF+nszksc3
5QAk2kWonQy5oC4q8S5l2IehZ0MmJXznXy1lwqVBbrCWWnNv8+asrxGKnXVQDSq4
J7cwhcP27yhKuE0C1NmVO5Kh5Mq1YSQ5qgdtvfQSmxOta41N48xB5/ywDupXTYa1
vRCI7tta9ihfN5DPYhy91ks7NZoWPRKIdDs9YntwQM7E7/70hNVwu6VFRTUr6pu3
j2vZwZo6eRywpWagZg9lY5d+6MMIfTilgEwVbo4vKSHmmh6uKytt59EZwa28KaKp
TqSvb1YOq5y26mAOyKy8+vSYTkTcQN991ixtn69uS1Ml4YvCAalogNO9W3eDAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUigL6cK3raLjaz8nrDbCxXod6ggAwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MTcyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQOtMA0GCSqGSIb3DQEBCwUAA4IBAQDBp66W388pOAIpFmPta9Sd883aHan8gcBo
m9bSOVURhgK4kxdNP0hJdK8LCC8Z3KPqVZP7Kv+aFJCLLhK0d9RHjjE0i7b4FN1m
rLCS69xcxtDZTD0gvVrSIkPUYO8VLFnRi+MsYFeyV1UcCzwAH2ypx0LLXFqjE23N
a4u3NIT4hSic+jg7Aso1ehqVnIoJ8PhYFWvtVed5JpZUPfvY9sJPw3LC+QjTYQek
v0Azr3cibu0kLPiIzNfyK6qVgEcABxqgK4QYVZ/jbehvn7MegS4oayi3WqgOCBpQ
/CgWY+OukWlsbyZGAnA6WjuBmKA+mQDgU2O/9Pri9HNebUIPlxRO
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:18:08 2025 by rpki-client