Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215666.roa
File: AS215666.roa (raw, json)
Hash identifier: WtGFl7f+hKqR+ANwKSMHfoIbjesSBDnatFFfoNTX2xo=
Subject key identifier: 84:D5:14:FF:15:0A:68:6F:F3:12:B8:87:AE:9C:8B:6E:79:22:F9:47
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 53E9C396DD43544218EA43DE80C42F266A0E5836
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215666.roa
Signing time: Fri 21 Aug 2026 07:00:10 +0000
ROA not before: Fri 21 Aug 2026 06:55:10 +0000
ROA not after: Fri 20 Aug 2027 07:00:10 +0000
asID: 215666
IP address blocks: 2a14:7581:9e00::/40 maxlen: 40
2a14:7583:ee00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e9:c3:96:dd:43:54:42:18:ea:43:de:80:c4:2f:26:6a:0e:58:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 21 06:55:10 2026 GMT
Not After : Aug 20 07:00:10 2027 GMT
Subject: CN=84D514FF150A686FF312B887AE9C8B6E7922F947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:8a:7b:99:52:31:de:08:bb:a0:15:87:1f:
7d:b2:92:3b:53:38:a8:e7:89:4c:9e:d4:fb:fb:33:
da:63:30:ad:fd:ad:15:77:84:28:8d:91:f1:87:ff:
70:08:06:f5:2b:f8:c0:24:0f:f2:e6:1f:d1:c4:e9:
00:a5:b9:46:a9:03:0b:97:b0:a3:f4:ae:fd:c8:75:
7b:85:79:bf:b8:a8:cc:46:49:40:fd:89:df:62:0b:
42:62:69:0b:9d:af:69:8d:d2:bd:d7:5e:ce:83:6b:
92:76:48:80:99:3f:fc:f6:73:c5:e5:5b:fb:34:27:
91:30:0d:cc:70:75:82:6b:23:cf:fe:e9:23:ab:14:
46:7d:4d:61:31:bc:84:70:f6:03:26:6a:d6:75:fd:
dd:bc:1c:c2:19:f4:09:ec:e4:9f:e6:77:dc:d0:f4:
d5:9b:52:93:36:de:e3:92:b4:fa:8b:fa:9b:df:9a:
d8:dd:12:80:4c:bf:0c:cb:ef:5a:9c:52:71:0b:9a:
67:7a:51:84:ab:f6:59:47:7a:7c:7c:ff:eb:a5:71:
1f:6d:61:53:8c:51:5d:8e:da:bd:cd:14:7b:9e:8a:
ff:0e:5d:80:a8:c6:67:44:2d:77:57:fa:a2:64:0d:
57:43:24:3d:b4:43:f9:3a:de:1a:c0:1e:64:db:63:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:14:FF:15:0A:68:6F:F3:12:B8:87:AE:9C:8B:6E:79:22:F9:47
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9e00::/40
2a14:7583:ee00::/40
Signature Algorithm: sha256WithRSAEncryption
60:78:2c:83:03:f4:f8:2d:b5:51:51:a0:a6:59:b5:de:d6:0f:
53:d9:f3:4b:4d:c6:64:8e:ce:44:db:c0:ca:3b:71:d2:1d:02:
8b:a8:6d:07:b8:d4:25:a4:07:52:a2:c6:a4:e7:ff:e6:58:c5:
db:d0:58:36:cd:69:e4:29:52:09:30:85:b9:9b:b2:32:29:a2:
89:27:20:5a:df:8b:bd:f7:29:7f:f7:7c:b4:c2:9f:f9:e1:c1:
4a:5d:62:48:38:59:1d:6c:94:e7:92:18:34:b2:60:d6:59:13:
d2:7f:00:17:89:e3:59:f6:c8:19:44:0d:9e:5b:03:38:78:7a:
df:44:fd:13:89:c6:5b:1d:a2:e0:51:de:e0:d0:44:3a:18:de:
bc:25:2a:44:de:ba:84:6b:1e:fe:0c:98:a3:b7:4e:47:bc:9a:
6f:3f:95:b6:ab:be:85:4b:e4:be:9a:15:d4:72:fc:06:b7:85:
2a:44:db:94:0b:b4:92:96:e8:33:84:a4:a4:03:ec:af:38:0b:
82:f3:4c:3a:96:e1:a9:ef:6a:2f:52:3c:ad:c5:12:9f:96:e8:
d5:f1:ad:c8:a9:e7:d6:bf:6a:9a:49:ef:d9:47:43:12:0a:50:
a3:ef:46:23:cc:dc:23:f3:da:84:9c:4e:90:97:39:0a:1e:c3:
ca:6c:62:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:05:55 2026 by rpki-client