Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215280.roa
File: AS215280.roa (raw, json)
Hash identifier: rLig+qgewg6Mqtyif/mAFi23GzPbray1fOiO8VH0+9I=
Subject key identifier: D1:26:7F:BB:87:0B:64:8E:CB:25:D0:87:F6:4E:3F:C9:0F:FC:BC:40
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7E8170229C9996DA3F8E030C76D29B334BC333EA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215280.roa
Signing time: Fri 25 Jul 2025 08:07:46 +0000
ROA not before: Fri 25 Jul 2025 08:02:46 +0000
ROA not after: Fri 24 Jul 2026 08:07:46 +0000
asID: 215280
IP address blocks: 2a0f:85c1:39d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:81:70:22:9c:99:96:da:3f:8e:03:0c:76:d2:9b:33:4b:c3:33:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:46 2025 GMT
Not After : Jul 24 08:07:46 2026 GMT
Subject: CN=D1267FBB870B648ECB25D087F64E3FC90FFCBC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:8e:38:e5:1b:cf:dc:2a:ba:2e:9e:ad:98:
9c:69:e5:25:cb:7d:86:bd:49:7d:8f:99:17:03:80:
2e:1f:d0:08:bd:33:6f:0a:0e:35:0c:fe:02:71:30:
31:8d:15:0f:d0:13:23:05:7a:cc:1f:ea:3a:dc:82:
97:64:bc:47:f0:3e:fa:05:5b:17:c3:d9:6e:64:f9:
c7:37:8f:b9:d2:5e:4b:6c:38:cb:27:2e:a1:1b:9d:
95:32:43:e4:39:51:cb:9c:2c:e7:56:49:7c:03:b6:
62:f9:bf:d4:e5:1a:91:37:d2:22:0d:4a:78:73:a1:
46:9c:0c:9e:8a:48:27:ed:66:dd:ba:ca:f4:a5:27:
34:99:c6:ce:89:10:9f:10:68:fa:2c:11:f8:e1:01:
a4:87:46:04:56:9d:49:86:04:b0:ce:be:cb:82:36:
e5:e3:f3:40:09:55:6d:3d:05:31:e6:2a:6e:42:b5:
df:a2:21:bb:28:5e:89:a5:cf:d4:2e:c9:bd:9f:48:
83:41:19:5d:16:f1:31:5c:02:ff:18:79:58:8b:0a:
7e:51:06:a4:2d:fd:f7:53:a2:31:4a:b9:ad:f6:f7:
bd:25:39:35:b0:dc:b6:eb:63:7a:c5:7d:01:32:db:
54:32:1a:3f:49:9a:67:52:98:eb:bd:75:c6:45:83:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:7F:BB:87:0B:64:8E:CB:25:D0:87:F6:4E:3F:C9:0F:FC:BC:40
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215280.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:39d::/48
Signature Algorithm: sha256WithRSAEncryption
a0:0d:60:75:ad:c2:8a:94:ca:27:95:60:23:7c:50:ce:18:4e:
bb:55:aa:f6:81:c5:c1:63:a1:6b:f4:04:38:ce:29:fe:ec:0c:
03:f6:80:62:fd:a5:84:be:9c:88:0b:b8:93:73:70:c6:2b:e6:
9e:37:d3:72:1d:77:d9:43:5c:f7:fd:d3:ac:ec:da:a3:5f:7c:
d4:3a:76:7c:a4:f2:52:f1:3e:b2:aa:1a:63:51:2f:04:48:b6:
91:d0:1f:0c:cc:41:f4:dc:2e:20:26:6b:8b:90:ee:06:ab:f7:
b1:fd:3a:1c:c0:3b:a4:77:63:3b:6f:99:be:23:05:a8:ec:51:
92:90:c6:49:63:1d:fb:fa:52:85:2a:a4:28:02:e3:2c:9d:60:
d8:4a:70:48:b5:04:f7:0c:5c:db:78:66:3e:60:c5:c5:39:41:
3a:fc:c6:9f:79:e7:de:de:6f:c7:ef:30:27:99:f7:2f:98:d3:
f0:95:89:5f:67:1e:3a:b5:54:42:6a:a7:f9:6e:1e:88:b3:5b:
1f:06:3e:b9:82:49:ba:f2:e6:b5:13:4a:33:1e:ed:e0:71:31:
3a:13:64:d3:33:0e:4e:6c:65:78:58:6a:be:92:d7:69:dc:2e:
c0:f6:74:e1:c3:3f:65:6c:c1:d1:f5:0a:c3:9e:d1:e8:66:ad:
5c:79:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:10 2025 by rpki-client