Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215241.roa
File: AS215241.roa (raw, json)
Hash identifier: 0NzOpV2/rrXakkvF6dsnS5kMAvPD6dzr4F8UV1oNR9I=
Subject key identifier: 51:87:BA:3B:5C:99:F1:40:26:6A:EA:F6:3B:B2:67:33:BB:5A:62:04
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 42369403F64A617623BDC69078C0C53616C03EA6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215241.roa
Signing time: Fri 25 Jul 2025 08:07:43 +0000
ROA not before: Fri 25 Jul 2025 08:02:43 +0000
ROA not after: Fri 24 Jul 2026 08:07:43 +0000
asID: 215241
IP address blocks: 2a0f:85c1:3a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:36:94:03:f6:4a:61:76:23:bd:c6:90:78:c0:c5:36:16:c0:3e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:43 2025 GMT
Not After : Jul 24 08:07:43 2026 GMT
Subject: CN=5187BA3B5C99F140266AEAF63BB26733BB5A6204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:4a:f9:95:4a:49:26:07:da:04:6a:d6:6c:
44:05:ca:5d:34:d4:0f:d9:77:a6:7a:36:3f:4a:d4:
47:7e:81:04:d5:54:18:28:da:d5:58:d5:4b:ca:76:
7c:57:c3:2d:70:37:5e:1e:d4:4a:1b:57:59:92:e8:
01:d3:53:09:9e:26:ce:28:52:a2:05:ca:b5:30:8c:
81:19:ea:0d:5e:ab:e0:6e:d2:4c:84:c6:51:5a:e8:
86:6e:1d:ee:cf:12:c1:b3:35:bb:8e:17:22:ea:be:
8a:d6:f1:72:88:65:e8:40:97:5b:0c:98:e4:2d:2f:
59:74:1b:86:bc:8c:62:5d:0f:23:5d:36:31:0d:cd:
2f:29:60:12:37:d2:6f:88:18:e6:ac:20:a7:65:0c:
97:2a:7d:26:73:3b:c3:7a:ea:dc:60:75:64:68:a1:
89:15:7b:0e:5f:5d:73:22:1a:f9:24:8b:a4:fd:e2:
a5:59:35:e5:fc:e3:84:8b:ca:1c:11:f1:be:f2:36:
94:16:8a:20:65:1f:cf:b4:43:8c:56:e3:6a:5b:80:
9e:e4:ee:2f:33:ef:6f:ab:71:bf:59:00:f9:d5:71:
87:9c:2f:83:4a:71:dd:01:04:44:28:2e:6c:50:69:
25:5e:5f:fe:b7:31:cc:ea:1c:f2:eb:d1:30:45:b1:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:BA:3B:5C:99:F1:40:26:6A:EA:F6:3B:B2:67:33:BB:5A:62:04
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a4::/48
Signature Algorithm: sha256WithRSAEncryption
48:37:7b:e8:e9:f3:4d:25:7e:fd:87:77:26:ce:34:72:80:f1:
03:95:1f:7d:de:7a:5c:58:b9:07:29:4e:37:8e:25:5e:5e:89:
35:2b:bd:12:80:59:e8:7b:ab:67:da:bb:24:07:13:c0:73:3a:
b5:1c:70:3e:04:35:4f:a9:fc:e4:e0:37:c3:79:87:8b:bc:4c:
6a:91:db:cc:cf:c1:17:f1:05:74:01:bd:e8:1f:e3:06:41:a6:
75:f6:51:4c:25:0b:66:61:07:9b:6b:59:e8:50:62:e4:04:4a:
33:02:30:8b:c7:32:91:78:66:57:ff:5d:65:a4:7b:c5:97:80:
90:42:62:9b:41:6e:f7:2d:85:cc:88:e7:af:64:a0:13:ca:48:
fa:7c:02:2c:13:d5:f5:d0:25:fc:f0:78:cd:e2:36:71:0e:da:
65:62:cf:9a:73:c5:06:72:6f:a7:67:af:7a:63:17:ad:2e:7e:
d9:d2:0e:96:48:52:6f:64:7f:f0:54:29:fe:35:91:3e:16:2e:
4b:86:12:c9:ff:a6:58:32:71:ba:ab:8c:ed:0f:1b:23:c5:4e:
ae:fd:8a:7c:b4:37:c8:8b:07:45:f4:46:f0:c5:d9:41:d8:8b:
b8:1c:80:2e:0e:e6:83:b5:84:fd:4f:f8:19:77:61:48:83:bd:
3d:a2:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:46 2025 by rpki-client