Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215520.roa
File: AS215520.roa (raw, json)
Hash identifier: sRgG6bm3/Xok3Cse0ox03UjZppOVzfEqpc4jR/FHWY4=
Subject key identifier: 16:0F:39:5B:49:BD:F7:21:9F:9C:94:3A:FC:C0:6E:2F:91:17:69:0A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 504801EE1793CED82644AC57648432C570D578CF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215520.roa
Signing time: Fri 25 Jul 2025 08:07:37 +0000
ROA not before: Fri 25 Jul 2025 08:02:37 +0000
ROA not after: Fri 24 Jul 2026 08:07:37 +0000
asID: 215520
IP address blocks: 2a0f:85c1:368::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:48:01:ee:17:93:ce:d8:26:44:ac:57:64:84:32:c5:70:d5:78:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:37 2025 GMT
Not After : Jul 24 08:07:37 2026 GMT
Subject: CN=160F395B49BDF7219F9C943AFCC06E2F9117690A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:35:02:4c:bd:28:ff:d0:20:9e:58:3f:71:
40:45:79:32:d4:05:68:b8:75:3f:97:97:3d:74:da:
78:1a:43:67:85:1d:c3:35:42:8f:fd:4a:2f:2f:c3:
18:2c:39:22:4e:0e:3c:2d:86:73:f2:d7:74:03:70:
b8:eb:0b:af:39:ea:96:f9:c0:77:cf:49:3f:88:44:
a2:41:3f:fa:c7:9a:4c:ad:5e:25:23:d9:cc:ba:47:
98:65:ed:40:6e:62:39:12:5a:ec:7f:8c:58:6a:f0:
a9:3a:cd:88:0d:95:2b:1b:29:3f:41:25:50:9d:b8:
c9:dd:f0:15:a1:49:f2:41:b1:76:ad:ba:54:87:c3:
e3:83:6a:ff:5c:48:1b:97:23:ba:c0:48:b7:01:53:
45:04:58:64:e5:0f:4f:97:02:2d:5e:32:52:1e:82:
0b:0d:8d:00:93:02:2a:00:cc:f4:4b:b5:19:4f:94:
96:c5:6e:21:eb:04:52:75:57:11:cf:4a:ed:5e:53:
60:76:ea:6b:6a:4c:98:95:6a:aa:ae:4b:51:c1:e0:
67:7b:d6:61:46:8c:77:ba:b9:3e:7d:55:53:b0:44:
be:ff:e5:1d:03:04:30:a1:58:41:20:e3:76:6c:ff:
5d:07:2a:c1:ea:76:2a:9b:85:c5:92:4e:f3:07:a2:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:39:5B:49:BD:F7:21:9F:9C:94:3A:FC:C0:6E:2F:91:17:69:0A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:368::/48
Signature Algorithm: sha256WithRSAEncryption
4b:bd:5e:70:d8:33:48:e6:60:b2:2d:aa:5f:a7:ed:f8:52:34:
93:84:24:f9:5b:c9:a9:fd:35:df:2d:5e:aa:93:6f:ce:a7:04:
7b:0e:aa:2a:97:2b:65:9b:34:da:c7:7f:62:54:df:c4:ce:73:
93:64:be:8b:07:22:af:15:8a:fd:98:51:ec:28:c5:8c:32:29:
0e:ce:cf:21:59:67:93:11:34:2b:65:f7:e9:e6:8a:e3:23:cc:
74:9b:ef:70:de:d7:9b:ad:53:70:77:3d:0f:e0:4f:27:23:c1:
ad:7c:53:1c:4e:5f:e0:82:2f:4b:be:72:dd:f9:55:78:66:f9:
61:b2:d9:f8:fb:0c:69:77:03:56:42:20:97:79:2d:31:db:96:
a2:7c:9e:ab:86:44:e3:91:38:1b:bd:30:51:0b:87:fb:57:3f:
8c:ea:2e:c4:31:86:25:cb:a5:3a:a2:58:f3:7d:4f:11:e3:b7:
b8:94:08:04:df:d0:96:af:e5:9a:d3:4a:78:57:a9:55:d6:2f:
f6:70:a4:1c:2a:2a:5b:56:52:13:54:e2:50:7c:53:80:fd:0e:
e6:18:b0:72:56:68:8f:fc:d7:50:03:5a:0d:80:2a:0a:33:79:
76:f6:07:90:38:3a:68:14:fe:a6:59:75:39:4e:65:12:87:94:
54:d5:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:40 2025 by rpki-client