Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
File: AS215617.roa (raw, json)
Hash identifier: mfxkhx9154lz/8DBeGyBVRix1RL3sKj94NziaTuePXw=
Subject key identifier: ED:8E:2F:5A:EF:53:82:44:F4:F2:26:2D:AB:71:E8:01:B3:21:25:8F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 32B87C60B3F9742D38EE74B7A53B216D83D1DE38
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
Signing time: Fri 25 Jul 2025 08:07:35 +0000
ROA not before: Fri 25 Jul 2025 08:02:35 +0000
ROA not after: Fri 24 Jul 2026 08:07:35 +0000
asID: 215617
IP address blocks: 2a0f:85c1:357::/48 maxlen: 48
2a0f:85c1:363::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b8:7c:60:b3:f9:74:2d:38:ee:74:b7:a5:3b:21:6d:83:d1:de:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:35 2025 GMT
Not After : Jul 24 08:07:35 2026 GMT
Subject: CN=ED8E2F5AEF538244F4F2262DAB71E801B321258F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a5:0e:e5:59:56:2d:00:6e:fd:35:ea:8c:ee:
7e:b3:e0:b9:b4:3b:a1:5c:46:21:3f:70:f6:e6:10:
a4:28:15:83:49:b9:ed:9a:bb:8f:04:6a:7e:f2:7c:
85:b5:0e:9b:40:a0:b4:a4:78:75:c1:0d:7c:c9:e8:
84:79:f6:6b:ce:70:48:ae:53:3a:b4:a5:95:bc:fa:
0b:80:e4:bc:a5:06:12:ad:03:10:1b:4d:42:a2:44:
49:8e:bb:a4:2a:a4:4d:2b:f0:94:f4:02:a8:e5:97:
21:fa:ec:63:53:3c:78:53:0d:ae:27:4e:d0:bd:e9:
54:33:5e:3e:e2:b9:ff:d8:8b:10:84:de:1c:47:e1:
2b:91:61:43:cd:31:45:79:df:ab:07:f9:b3:87:a4:
6d:21:21:58:67:c2:f3:58:3b:69:85:27:9d:20:cb:
a6:c0:c4:b7:4b:61:d6:dc:b5:75:66:f1:01:dc:0f:
ed:a9:01:ff:a3:26:8b:e9:ad:6c:a9:77:6f:c4:f7:
d2:c6:e8:c3:d2:b6:e8:7f:bf:3a:ae:52:2d:15:c6:
28:73:a2:08:a4:50:09:63:44:ec:fb:9f:27:11:50:
89:01:57:42:4a:54:e9:c5:b7:ec:0f:99:eb:a0:5c:
9c:8d:61:ea:70:5c:87:f7:49:24:a7:2b:06:6e:44:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:2F:5A:EF:53:82:44:F4:F2:26:2D:AB:71:E8:01:B3:21:25:8F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:357::/48
2a0f:85c1:363::/48
Signature Algorithm: sha256WithRSAEncryption
ee:08:dc:9f:96:30:56:72:b9:9e:2e:e0:fa:dd:bb:82:a2:a6:
95:58:ae:38:1f:8e:12:a9:27:8d:91:f1:59:6a:10:be:93:bf:
eb:20:c5:f4:d6:ca:0f:ff:8a:93:99:9c:34:8e:63:cd:c7:e9:
35:b2:d8:5d:34:a9:d7:d5:b1:19:86:8f:92:ba:3b:57:82:4f:
bb:ba:af:2e:60:0c:8c:79:e5:58:69:1a:4b:24:8c:f1:63:9e:
23:f4:40:d8:d4:24:ce:fa:82:db:7a:2d:7a:33:e7:2d:67:2f:
a5:63:60:4e:76:46:58:51:33:1f:1a:04:f8:35:a9:26:a9:e7:
c0:9e:18:8e:3a:77:46:a4:00:5a:e4:ba:b9:e1:6e:c0:be:86:
c7:87:bf:c2:c3:0c:ec:17:ac:28:41:af:c4:6c:7f:63:18:9e:
8b:5a:8a:f7:8c:4f:96:11:3c:81:dd:1a:9e:70:f4:e7:4a:b4:
a1:1b:71:a2:53:21:33:c6:70:0e:a1:ec:93:a4:28:e5:76:e0:
52:58:78:02:e9:21:f9:3f:2f:e0:b3:ae:2a:43:8b:57:9d:e6:
74:09:1d:16:19:a6:cb:ec:97:ff:19:ca:f2:a4:73:c1:6e:00:
a2:22:8a:7a:15:2f:5a:83:65:8a:f5:06:eb:2c:75:36:91:86:
03:95:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:18 2025 by rpki-client