Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215743.roa
File: AS215743.roa (raw, json)
Hash identifier: E5SOLJyicZLm9/YbfYByow0zbPjXdO3m6mCjsY6F+co=
Subject key identifier: D9:D7:94:E7:8E:98:7D:57:77:9B:0D:C3:4D:4E:BE:9C:76:31:A1:91
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 077028D887E510EAB35F1B892D100484E0AD1569
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215743.roa
Signing time: Fri 25 Jul 2025 08:07:41 +0000
ROA not before: Fri 25 Jul 2025 08:02:41 +0000
ROA not after: Fri 24 Jul 2026 08:07:41 +0000
asID: 215743
IP address blocks: 2a0f:85c1:347::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:70:28:d8:87:e5:10:ea:b3:5f:1b:89:2d:10:04:84:e0:ad:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:41 2025 GMT
Not After : Jul 24 08:07:41 2026 GMT
Subject: CN=D9D794E78E987D57779B0DC34D4EBE9C7631A191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:54:5c:5d:22:df:f3:0c:68:ba:4f:a1:03:
dd:63:e7:45:b2:e9:9a:6d:cf:03:68:a7:27:aa:7f:
4e:36:b3:0f:09:7e:a8:6d:8b:7d:10:f3:bd:51:37:
49:40:0a:ad:6f:7c:f3:5d:74:6d:f1:10:16:f1:75:
03:50:79:79:7d:18:18:27:51:ea:e0:77:3a:1c:e7:
cb:4e:ab:75:dc:af:6f:ac:c2:26:0f:8a:6e:b4:15:
f6:87:7c:1a:dd:f0:71:e4:6a:e8:0d:3e:2a:21:d0:
16:05:2e:4d:f7:5e:63:04:10:f8:15:9d:eb:3f:d1:
2d:0e:6c:35:78:44:3f:c9:0a:77:b4:d0:c8:db:56:
04:43:a8:66:d9:48:bc:83:80:e3:37:3d:1d:fe:1f:
94:22:ab:21:92:07:4d:84:fe:db:8f:39:02:9d:8c:
0f:f9:c8:0e:a4:0f:ed:0b:51:e3:9a:61:2f:05:3f:
ee:14:ed:c3:99:27:2c:40:0e:33:72:e8:3f:7c:05:
52:9e:a5:2b:69:6f:23:7b:a1:47:c7:e3:36:11:11:
a9:a5:2d:7b:40:8f:60:79:00:3b:d8:20:77:79:43:
36:b5:75:71:b3:bb:76:4a:a3:84:c2:61:8e:5e:d4:
f8:70:5a:5d:9a:b7:ea:7a:e6:38:ae:fa:ae:c4:0c:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:94:E7:8E:98:7D:57:77:9B:0D:C3:4D:4E:BE:9C:76:31:A1:91
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215743.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:347::/48
Signature Algorithm: sha256WithRSAEncryption
31:96:a0:a5:70:61:15:c9:50:75:4a:e6:7b:58:06:5d:7f:d0:
dd:25:bb:2b:85:98:57:53:08:7f:5f:ba:8e:30:05:19:e8:97:
b0:b5:0b:bb:82:3e:2e:35:2f:08:6d:60:92:56:7e:96:2e:8a:
b9:0c:c2:40:12:18:0b:77:3b:74:01:f5:0b:5e:5a:82:ec:ad:
a9:7c:50:11:70:4e:4b:ac:2c:44:8f:44:d7:a1:06:83:20:f8:
52:9f:55:fa:0a:03:0c:bf:89:41:7e:3b:90:44:ce:c2:46:17:
22:c7:62:80:55:37:70:36:30:1f:26:7e:8a:ac:2c:f7:93:ca:
7f:bd:24:78:36:58:99:5d:9e:0c:21:9d:21:99:de:e7:bd:8b:
ca:1e:8d:c7:3c:bc:6e:76:e3:10:a2:83:27:80:40:21:71:7c:
89:cd:09:78:07:50:21:99:ff:f2:bf:73:e6:46:db:11:7e:02:
70:f6:c8:81:d6:9e:ff:a9:43:fe:6e:d3:b0:ce:bb:74:9e:47:
c1:04:a1:77:b0:bc:0a:b2:e7:c2:fc:93:79:e1:36:5e:a6:1d:
92:69:24:b4:bc:fc:2b:c6:97:20:2f:04:e6:64:6e:00:58:a2:
9a:2e:a4:cd:d8:16:23:1e:ba:0c:1a:00:9c:2a:14:0d:a1:6c:
f8:20:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:19 2025 by rpki-client