Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215323.roa
File: AS215323.roa (raw, json)
Hash identifier: axuag5DtgmVSoC49udAQiILxIAwywIxZmgF9Dv6qsjQ=
Subject key identifier: E7:80:42:8B:2C:F6:93:88:58:9F:D5:00:C3:7E:78:23:B2:A8:E9:F4
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 162941D3A2779CF4CA397EA4420678022A2951D8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215323.roa
Signing time: Sat 23 May 2026 07:14:24 +0000
ROA not before: Sat 23 May 2026 07:09:24 +0000
ROA not after: Sat 22 May 2027 07:14:24 +0000
asID: 215323
IP address blocks: 2a14:7583:6000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:29:41:d3:a2:77:9c:f4:ca:39:7e:a4:42:06:78:02:2a:29:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 23 07:09:24 2026 GMT
Not After : May 22 07:14:24 2027 GMT
Subject: CN=E780428B2CF69388589FD500C37E7823B2A8E9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:8f:e7:13:f3:e1:29:b6:7b:56:47:ee:0c:
76:9b:a7:a8:05:1c:14:11:0e:fe:a7:7f:76:cb:1a:
59:1d:11:b8:80:e0:2c:37:6e:2e:9b:99:35:05:56:
ad:83:ce:89:5d:b3:b8:63:d0:98:a4:51:13:3f:c1:
08:c9:84:57:0d:8a:ac:e9:9f:99:02:a8:4a:34:67:
35:5e:19:3f:76:7f:65:50:6a:3b:64:56:c8:2f:92:
ab:34:8a:ea:12:00:b0:31:61:8f:ae:57:0f:63:e3:
7a:fd:af:c9:ea:b8:03:82:de:33:0e:71:c2:5c:3a:
50:e1:66:79:aa:c1:37:9b:87:ef:38:9a:cf:d7:46:
5d:19:fb:e6:c2:78:c2:2c:06:8b:97:7c:54:f7:6a:
6b:de:1e:55:51:2a:b1:b2:ad:61:2e:77:0c:1d:12:
15:61:38:04:a6:e7:e6:ea:21:e0:d0:4c:74:5e:8d:
d7:72:99:d3:04:f4:64:a4:b7:8b:e1:09:71:f8:c6:
a9:09:14:c0:9e:d8:03:a5:56:c3:37:16:1b:36:0c:
b8:c2:9f:bd:47:2b:c4:a1:92:f4:c8:55:1c:28:9e:
e6:0f:87:18:4b:85:a0:e4:c9:cb:30:ce:ae:ec:4a:
dc:c2:df:6f:17:a7:de:70:f6:f8:af:e5:22:af:0a:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:80:42:8B:2C:F6:93:88:58:9F:D5:00:C3:7E:78:23:B2:A8:E9:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:6000::/36
Signature Algorithm: sha256WithRSAEncryption
67:8c:59:77:ab:b5:51:12:d8:1c:72:d9:c6:3c:b9:77:75:df:
3c:fe:a7:c2:d1:e0:7f:39:87:63:d9:79:4e:f9:8f:d9:b4:80:
1a:1a:4e:09:d8:2b:b2:cb:da:90:15:fb:cf:2b:c7:c9:95:ee:
53:6e:d1:5b:2e:ee:b7:ab:ae:d2:8b:4c:a0:10:50:f8:ec:32:
23:01:aa:ac:ca:3b:a4:35:fd:61:84:2e:83:d2:fc:4d:21:04:
5b:d7:48:e2:9d:e3:e2:33:ad:14:62:fe:43:60:58:58:1a:9f:
f8:09:ce:f5:91:bd:dd:47:aa:02:ba:7d:f2:82:39:e4:d7:aa:
c3:a7:3d:68:f4:11:5d:74:55:74:40:6d:f3:1c:28:f5:3a:ca:
1b:f3:81:8b:34:88:ef:9a:be:94:13:05:9c:7e:42:db:36:ef:
49:82:68:de:8d:4f:09:c9:bc:5f:a7:71:f9:ef:2a:cf:21:86:
35:6f:8d:d5:ca:51:32:3a:0a:9a:ef:8d:fa:0b:0e:02:ba:ba:
97:ef:68:7e:42:53:c9:7e:50:d6:b0:49:22:b9:ed:69:53:4f:
0e:d5:81:0f:5c:e0:12:57:7b:09:5d:ff:38:87:93:b2:4e:82:
0f:b3:4c:87:6a:de:f9:bf:95:73:b4:f1:ea:ba:98:90:88:02:
7d:45:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:46:47 2026 by rpki-client