Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
File:                     AS215729.roa (raw, json)
Hash identifier:          afJl2mn0FUCJNnYX2wbl96uu/dXz+I7mO75IPqp18kA=
Subject key identifier:   77:72:5A:6D:6D:BF:76:C5:69:54:76:BF:5D:A6:9F:D4:57:00:FE:E7
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       0AAB7687887187783DB99EDF8ACB0BC2180E68D6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
Signing time:             Fri 25 Jul 2025 08:07:44 +0000
ROA not before:           Fri 25 Jul 2025 08:02:44 +0000
ROA not after:            Fri 24 Jul 2026 08:07:44 +0000
asID:                     215729
IP address blocks:        2a0f:85c1:351::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ab:76:87:88:71:87:78:3d:b9:9e:df:8a:cb:0b:c2:18:0e:68:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Jul 25 08:02:44 2025 GMT
            Not After : Jul 24 08:07:44 2026 GMT
        Subject: CN=77725A6D6DBF76C5695476BF5DA69FD45700FEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:22:c2:76:7a:c1:54:9e:aa:73:ad:61:cb:
                    0b:4c:e2:eb:12:b7:3e:66:5a:6c:6f:5f:95:e6:03:
                    ac:6b:2a:e6:82:72:b8:4e:49:c3:b9:bd:08:be:50:
                    d6:45:f2:9e:5c:50:1b:40:4e:47:bd:dd:de:52:2e:
                    d7:e8:aa:fb:52:b5:71:71:d6:4d:66:53:cf:f3:db:
                    22:96:4f:43:f2:df:11:ee:88:ad:f6:ee:74:ce:4f:
                    97:7b:15:33:b7:b0:aa:f4:14:80:99:e0:58:89:e1:
                    4d:35:cc:1c:63:b9:37:be:d9:e1:3b:e8:57:76:b2:
                    9d:21:ce:4f:e7:b2:fb:5b:57:fd:d3:e1:02:85:c5:
                    9a:2d:c1:70:76:1a:ea:d1:d4:29:93:31:d8:f0:44:
                    2a:2c:49:37:6b:be:50:60:f0:34:1e:a6:a7:87:7f:
                    08:cf:64:24:88:5e:d7:54:10:9b:12:05:ab:c7:77:
                    46:5d:d2:00:b3:8b:0d:80:8e:e1:4f:e4:11:71:98:
                    94:f5:28:e0:ce:cd:14:3a:62:ac:3c:21:2b:28:b1:
                    fa:6d:c5:aa:a7:7a:7f:63:5c:3e:75:1c:68:6c:a3:
                    76:6f:90:7c:b4:6b:8c:bd:d5:d3:ef:9c:08:d9:ae:
                    e8:36:f5:5d:54:b4:68:f3:8b:8d:30:e0:64:63:e1:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:72:5A:6D:6D:BF:76:C5:69:54:76:BF:5D:A6:9F:D4:57:00:FE:E7
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:351::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:c7:0c:1a:00:d1:14:85:c7:bf:ce:a5:83:dc:f4:24:38:
         22:fd:39:25:9e:f0:6d:40:4a:99:ab:27:99:be:95:83:d3:1c:
         c4:25:66:c4:8e:9c:fb:e5:9b:9a:f3:df:33:4e:a2:71:2a:e0:
         42:07:6e:be:8b:d6:b5:33:87:06:8b:84:6f:39:06:79:ec:f1:
         e2:99:a3:2a:3d:2f:c7:1e:c1:b7:f5:6a:4f:3a:2e:a9:10:35:
         c5:fd:2b:42:d6:5f:7e:99:18:87:30:e7:7e:5e:ac:50:e3:5a:
         c2:56:12:b9:e2:f5:93:02:62:fd:a8:43:0a:60:0e:4f:bf:50:
         e9:8a:93:02:fd:5a:5a:e2:39:b2:ed:2c:f0:81:ac:cd:f6:04:
         58:d7:7f:7a:9f:89:b7:9a:bf:ea:7a:d1:4b:ca:bc:b7:02:15:
         76:f6:a3:02:3a:0c:f3:e3:98:f7:de:b0:72:5a:0f:12:78:3b:
         d7:84:25:4a:dd:7c:b6:58:4e:87:d1:4c:9a:4b:07:eb:0c:fa:
         73:4e:e6:27:57:50:0e:05:34:8f:2c:3a:4a:6b:ec:50:69:6f:
         65:01:3e:7a:88:68:49:26:7c:63:7f:9d:df:00:0c:27:da:7b:
         2f:a3:a5:ab:41:d0:59:99:3f:8a:f7:7a:86:6a:08:78:ac:4c:
         c8:22:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:53 2025 by rpki-client