Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215605.roa
File: AS215605.roa (raw, json)
Hash identifier: G6dp9WK1HOzlejW7OGUfEGH9DB1cviF66Swl3HM4HH8=
Subject key identifier: EC:46:3A:8C:F8:E2:13:7C:22:42:34:BD:E6:5F:BD:C1:FC:AD:E2:C8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 09E99D8EC7D98F4418D9EED96322B8ECE46CF6E3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215605.roa
Signing time: Fri 25 Jul 2025 08:07:41 +0000
ROA not before: Fri 25 Jul 2025 08:02:41 +0000
ROA not after: Fri 24 Jul 2026 08:07:41 +0000
asID: 215605
IP address blocks: 2a0f:85c1:361::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e9:9d:8e:c7:d9:8f:44:18:d9:ee:d9:63:22:b8:ec:e4:6c:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:41 2025 GMT
Not After : Jul 24 08:07:41 2026 GMT
Subject: CN=EC463A8CF8E2137C224234BDE65FBDC1FCADE2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:ea:52:2f:06:65:b2:a5:a1:5b:38:7e:ee:
2f:a1:61:8b:e8:00:60:57:39:15:0d:16:f7:97:8b:
7b:24:2b:74:ed:1e:3e:b0:33:42:c3:83:9a:fd:7d:
f9:2d:09:10:da:07:19:90:11:23:ac:11:41:0b:2c:
5d:a4:61:a6:e3:76:af:81:86:c6:69:89:1d:59:e0:
dc:d2:83:35:15:53:39:f0:1b:f0:dc:08:e8:b1:31:
ba:cc:95:07:77:c2:9b:a2:ce:ee:ce:51:f2:13:68:
11:d6:6e:2d:ea:97:68:f2:af:84:d7:cb:7d:42:fa:
0d:57:7c:b1:94:69:28:24:f3:8b:3e:4a:90:04:f4:
bd:3d:24:35:6d:6a:92:ab:f4:0c:b4:d6:3c:11:9e:
f1:cf:77:de:7e:de:0e:ba:d7:83:36:ec:e1:d8:26:
03:8c:f9:ca:08:c5:62:49:b0:e2:a2:ad:a0:85:d2:
65:11:23:e8:f1:9c:b0:f9:a1:5a:62:5a:88:6d:23:
52:e1:78:66:2a:a1:1a:7d:c1:63:b9:6f:52:d9:33:
b8:93:05:41:cf:a7:8d:0f:56:5d:da:a4:02:86:40:
69:70:4a:19:58:fa:7e:7b:fe:0d:09:c8:f8:c5:9e:
eb:a2:f5:44:71:38:67:84:2c:dd:3f:41:b7:30:77:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:3A:8C:F8:E2:13:7C:22:42:34:BD:E6:5F:BD:C1:FC:AD:E2:C8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:361::/48
Signature Algorithm: sha256WithRSAEncryption
0b:78:14:d9:1c:10:82:4a:e7:e5:d9:2a:be:4a:8a:43:29:38:
4a:56:cd:9a:1e:a5:36:45:fc:0f:c5:ad:41:c5:3f:e0:12:18:
38:80:5b:7c:06:53:c6:51:47:96:14:48:06:16:2c:07:73:1d:
3c:7f:92:8b:3f:55:5a:d1:dc:70:94:84:f0:38:ef:3a:54:c9:
5b:5f:53:02:95:25:54:38:a1:26:ed:cd:9b:97:a5:0a:1f:29:
de:92:41:13:f2:2e:04:a6:ac:02:19:7a:a8:6a:5b:10:d4:ae:
f7:66:23:7f:33:55:9f:78:4c:7b:84:95:84:a3:1f:46:b1:ec:
21:5c:5d:41:c2:45:7d:2b:0a:64:ce:17:c8:37:f4:bf:7b:1d:
38:cf:15:ea:7c:99:36:83:12:b2:a8:ec:85:37:b4:66:8f:d5:
63:87:a4:c7:52:43:bd:cb:21:3d:11:12:58:61:bd:aa:a1:92:
c2:45:fe:ed:69:59:a2:3a:fc:b1:4a:fa:f0:ef:b2:dd:15:5a:
3c:0e:44:42:42:fa:ac:8e:79:0f:6f:a8:7b:d7:65:fc:79:c1:
ca:fe:58:16:b7:b4:36:67:1e:da:61:27:09:c0:60:5d:cc:05:
39:38:c4:c0:8e:01:56:fd:65:28:41:4a:10:fc:6e:bb:9e:8b:
e8:ff:09:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUCemdjsfZj0QY2e7ZYyK47ORs9uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA3MjUwODAyNDFaFw0yNjA3MjQwODA3NDFaMDMxMTAvBgNV
BAMTKEVDNDYzQThDRjhFMjEzN0MyMjQyMzRCREU2NUZCREMxRkNBREUyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOD+pSLwZlsqWhWzh+7i+hYYvo
AGBXORUNFveXi3skK3TtHj6wM0LDg5r9ffktCRDaBxmQESOsEUELLF2kYabjdq+B
hsZpiR1Z4NzSgzUVUznwG/DcCOixMbrMlQd3wpuizu7OUfITaBHWbi3ql2jyr4TX
y31C+g1XfLGUaSgk84s+SpAE9L09JDVtapKr9Ay01jwRnvHPd95+3g6614M27OHY
JgOM+coIxWJJsOKiraCF0mURI+jxnLD5oVpiWohtI1LheGYqoRp9wWO5b1LZM7iT
BUHPp40PVl3apAKGQGlwShlY+n57/g0JyPjFnuui9URxOGeELN0/QbcwdwxbAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU7EY6jPjiE3wiQjS95l+9wfyt4sgwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1NjA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQNhMA0GCSqGSIb3DQEBCwUAA4IBAQALeBTZHBCCSufl2Sq+SopDKThKVs2aHqU2
RfwPxa1BxT/gEhg4gFt8BlPGUUeWFEgGFiwHcx08f5KLP1Va0dxwlITwOO86VMlb
X1MClSVUOKEm7c2bl6UKHynekkET8i4EpqwCGXqoalsQ1K73ZiN/M1WfeEx7hJWE
ox9GsewhXF1BwkV9KwpkzhfIN/S/ex04zxXqfJk2gxKyqOyFN7Rmj9Vjh6THUkO9
yyE9ERJYYb2qoZLCRf7taVmiOvyxSvrw77LdFVo8DkRCQvqsjnkPb6h712X8ecHK
/lgWt7Q2Zx7aYScJwGBdzAU5OMTAjgFW/WUoQUoQ/G67novo/wm+
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:30 2025 by rpki-client