
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
File: AS215729.roa (raw, json)
Hash identifier: afJl2mn0FUCJNnYX2wbl96uu/dXz+I7mO75IPqp18kA=
Subject key identifier: 77:72:5A:6D:6D:BF:76:C5:69:54:76:BF:5D:A6:9F:D4:57:00:FE:E7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0AAB7687887187783DB99EDF8ACB0BC2180E68D6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
Signing time: Fri 25 Jul 2025 08:07:44 +0000
ROA not before: Fri 25 Jul 2025 08:02:44 +0000
ROA not after: Fri 24 Jul 2026 08:07:44 +0000
asID: 215729
IP address blocks: 2a0f:85c1:351::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ab:76:87:88:71:87:78:3d:b9:9e:df:8a:cb:0b:c2:18:0e:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:44 2025 GMT
Not After : Jul 24 08:07:44 2026 GMT
Subject: CN=77725A6D6DBF76C5695476BF5DA69FD45700FEE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:22:c2:76:7a:c1:54:9e:aa:73:ad:61:cb:
0b:4c:e2:eb:12:b7:3e:66:5a:6c:6f:5f:95:e6:03:
ac:6b:2a:e6:82:72:b8:4e:49:c3:b9:bd:08:be:50:
d6:45:f2:9e:5c:50:1b:40:4e:47:bd:dd:de:52:2e:
d7:e8:aa:fb:52:b5:71:71:d6:4d:66:53:cf:f3:db:
22:96:4f:43:f2:df:11:ee:88:ad:f6:ee:74:ce:4f:
97:7b:15:33:b7:b0:aa:f4:14:80:99:e0:58:89:e1:
4d:35:cc:1c:63:b9:37:be:d9:e1:3b:e8:57:76:b2:
9d:21:ce:4f:e7:b2:fb:5b:57:fd:d3:e1:02:85:c5:
9a:2d:c1:70:76:1a:ea:d1:d4:29:93:31:d8:f0:44:
2a:2c:49:37:6b:be:50:60:f0:34:1e:a6:a7:87:7f:
08:cf:64:24:88:5e:d7:54:10:9b:12:05:ab:c7:77:
46:5d:d2:00:b3:8b:0d:80:8e:e1:4f:e4:11:71:98:
94:f5:28:e0:ce:cd:14:3a:62:ac:3c:21:2b:28:b1:
fa:6d:c5:aa:a7:7a:7f:63:5c:3e:75:1c:68:6c:a3:
76:6f:90:7c:b4:6b:8c:bd:d5:d3:ef:9c:08:d9:ae:
e8:36:f5:5d:54:b4:68:f3:8b:8d:30:e0:64:63:e1:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:5A:6D:6D:BF:76:C5:69:54:76:BF:5D:A6:9F:D4:57:00:FE:E7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:351::/48
Signature Algorithm: sha256WithRSAEncryption
18:9e:c7:0c:1a:00:d1:14:85:c7:bf:ce:a5:83:dc:f4:24:38:
22:fd:39:25:9e:f0:6d:40:4a:99:ab:27:99:be:95:83:d3:1c:
c4:25:66:c4:8e:9c:fb:e5:9b:9a:f3:df:33:4e:a2:71:2a:e0:
42:07:6e:be:8b:d6:b5:33:87:06:8b:84:6f:39:06:79:ec:f1:
e2:99:a3:2a:3d:2f:c7:1e:c1:b7:f5:6a:4f:3a:2e:a9:10:35:
c5:fd:2b:42:d6:5f:7e:99:18:87:30:e7:7e:5e:ac:50:e3:5a:
c2:56:12:b9:e2:f5:93:02:62:fd:a8:43:0a:60:0e:4f:bf:50:
e9:8a:93:02:fd:5a:5a:e2:39:b2:ed:2c:f0:81:ac:cd:f6:04:
58:d7:7f:7a:9f:89:b7:9a:bf:ea:7a:d1:4b:ca:bc:b7:02:15:
76:f6:a3:02:3a:0c:f3:e3:98:f7:de:b0:72:5a:0f:12:78:3b:
d7:84:25:4a:dd:7c:b6:58:4e:87:d1:4c:9a:4b:07:eb:0c:fa:
73:4e:e6:27:57:50:0e:05:34:8f:2c:3a:4a:6b:ec:50:69:6f:
65:01:3e:7a:88:68:49:26:7c:63:7f:9d:df:00:0c:27:da:7b:
2f:a3:a5:ab:41:d0:59:99:3f:8a:f7:7a:86:6a:08:78:ac:4c:
c8:22:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:53 2025 by rpki-client