Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215470.roa
File: AS215470.roa (raw, json)
Hash identifier: e4taZtMtb5stIfT9IMpc2nqnV9+nR5QXGdDt63mavOg=
Subject key identifier: 45:0A:F0:96:51:34:83:01:72:E5:61:96:E8:4E:22:51:46:F6:70:5D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 20B3EBB064E8478FA88949EC16CEFA6FA2D707BF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215470.roa
Signing time: Wed 19 Aug 2026 03:09:05 +0000
ROA not before: Wed 19 Aug 2026 03:04:05 +0000
ROA not after: Wed 18 Aug 2027 03:09:05 +0000
asID: 215470
IP address blocks: 2a0f:85c1:390::/48 maxlen: 48
2a0f:85c1:8b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b3:eb:b0:64:e8:47:8f:a8:89:49:ec:16:ce:fa:6f:a2:d7:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:05 2026 GMT
Not After : Aug 18 03:09:05 2027 GMT
Subject: CN=450AF0965134830172E56196E84E225146F6705D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:39:08:be:0d:07:e4:d7:56:7d:e4:d7:fb:
19:73:d5:c6:05:b2:21:58:d6:04:17:bd:36:7b:f2:
00:42:7a:46:8c:5a:79:02:09:05:b4:d5:38:31:b0:
61:e3:61:0e:37:62:fb:21:d9:52:75:fa:b3:e5:be:
9d:06:2e:b6:d6:03:1d:3e:04:7c:95:9f:39:f6:76:
59:6f:a9:6e:34:90:94:39:05:0e:90:34:b0:86:f7:
6a:a3:d7:bd:7a:d1:f9:7b:03:bb:ac:52:28:26:0a:
0e:00:46:7c:77:6b:70:4b:c8:0a:13:56:f8:8e:f7:
2b:27:70:08:b2:60:35:b7:e6:08:43:18:9c:43:d5:
27:dc:28:85:48:4b:61:71:1a:2f:40:17:ba:63:5a:
83:2c:c5:73:43:39:51:3a:9c:03:24:0f:c8:38:c2:
dc:4f:d5:6d:43:9f:fe:25:ff:99:fd:83:37:e9:e8:
15:fe:cf:6a:7d:81:90:ba:51:c9:ff:f4:70:b6:7e:
fa:3c:4a:7a:54:da:b4:67:58:90:2c:d0:83:0d:7e:
f4:8a:ac:e6:9f:5b:a5:c7:2a:23:a6:86:d6:29:79:
19:6a:c4:b7:96:ad:bd:88:70:39:36:0f:43:7c:eb:
4b:b7:01:de:6c:cc:6a:c9:c6:e5:93:f4:8b:ef:c4:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:F0:96:51:34:83:01:72:E5:61:96:E8:4E:22:51:46:F6:70:5D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:390::/48
2a0f:85c1:8b7::/48
Signature Algorithm: sha256WithRSAEncryption
ad:0e:39:4a:25:10:79:7d:15:35:24:fd:a8:aa:17:6e:62:74:
4e:1b:c7:12:29:ad:24:db:4f:30:5e:26:cf:47:54:c7:9a:e4:
c2:37:cd:d8:ab:20:30:59:b1:d5:00:ab:1f:da:05:d2:15:99:
24:d0:5e:a3:23:3c:26:ad:a5:11:19:83:11:df:64:a7:b7:64:
cd:84:75:45:88:18:c1:b8:2e:a0:b6:9e:e5:43:47:b2:0e:a7:
a5:e2:dc:bd:51:50:ed:28:ec:88:b4:ca:c8:17:ef:8b:33:a4:
2f:c8:49:f5:99:a5:17:11:6a:ab:9b:6c:2e:8d:70:94:b3:f8:
a8:63:0b:ce:6e:23:43:42:19:39:82:49:20:ba:2c:c0:2f:d1:
01:d5:6b:17:56:b9:c9:76:88:be:c8:0b:fe:d8:19:95:63:99:
44:82:0d:89:9b:da:92:f2:44:4d:8a:1e:15:78:3a:6e:a9:4e:
f2:e1:a6:59:28:15:94:9d:65:43:20:39:b1:5e:f9:43:6c:77:
98:9f:d4:eb:b2:c7:6d:d5:b9:fe:59:e8:f3:f7:9f:57:77:fe:
15:87:7f:e4:92:97:f4:e6:ee:91:39:0d:6b:eb:af:42:1d:84:
0d:92:97:c5:2e:5b:15:54:5d:db:c0:62:0a:a5:2c:52:78:0e:
0f:48:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:36:19 2026 by rpki-client