Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215731.roa
File: AS215731.roa (raw, json)
Hash identifier: n+qEntBRM5Yk6yhy13zYN7iu9WXxCAtmwJy7HF6aoUI=
Subject key identifier: BA:87:69:55:18:D3:67:02:D6:40:DC:4A:06:22:EC:86:8C:A9:DB:74
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7ECA4DC3AB4804E65D8972B8C1BA58651BF838C2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215731.roa
Signing time: Wed 21 Oct 2026 08:49:37 +0000
ROA not before: Wed 21 Oct 2026 08:44:37 +0000
ROA not after: Wed 20 Oct 2027 08:49:37 +0000
asID: 215731
IP address blocks: 2a14:7580:ffe2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ca:4d:c3:ab:48:04:e6:5d:89:72:b8:c1:ba:58:65:1b:f8:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 21 08:44:37 2026 GMT
Not After : Oct 20 08:49:37 2027 GMT
Subject: CN=BA87695518D36702D640DC4A0622EC868CA9DB74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:1d:73:4b:f4:2c:65:03:0e:75:1d:29:4f:
c1:1b:12:10:8e:2d:65:d4:64:8a:8d:c3:70:08:b6:
4e:1e:b8:5e:8a:aa:8e:41:eb:17:44:52:b8:04:62:
f9:12:fc:a1:cd:77:b6:33:a1:eb:94:34:fa:51:9a:
c3:da:40:dc:a6:58:99:fd:f3:35:1a:44:21:10:06:
82:8e:9c:a2:7f:f7:5e:ad:f3:a9:ce:dc:3e:ff:61:
3c:56:27:7a:26:98:90:4f:98:d3:14:6d:30:90:99:
5a:b1:13:f5:37:e5:b5:ae:45:d3:2f:99:b1:51:52:
fc:39:d3:de:7f:4f:2a:bf:65:05:64:92:13:46:fb:
bf:2c:4f:c1:25:84:38:46:99:e4:2f:07:29:78:d0:
40:1c:b3:a0:8e:b4:da:33:80:53:f8:f2:e4:01:8b:
c5:af:88:24:85:77:5f:0b:a3:0c:05:80:71:a1:f3:
61:7c:71:56:ee:06:fa:e8:b2:20:f9:13:ae:4e:38:
75:0f:e2:de:1f:f1:83:8a:0a:15:09:d2:02:b7:54:
84:c2:b1:d3:a8:20:d6:2b:f5:4c:07:d9:97:15:83:
82:8b:61:66:0f:2f:c4:aa:47:77:5c:a0:b9:25:24:
98:2c:cf:8d:e0:6f:cb:85:7f:e1:ce:01:6b:f0:a6:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:69:55:18:D3:67:02:D6:40:DC:4A:06:22:EC:86:8C:A9:DB:74
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffe2::/48
Signature Algorithm: sha256WithRSAEncryption
3f:4d:ab:35:25:6c:1c:93:bd:81:ce:4a:7c:d5:ec:96:a9:6b:
85:bd:a0:85:13:f1:79:9c:1b:e4:f0:a6:15:f4:3a:10:45:e5:
e9:ca:3b:30:c7:da:cd:19:ed:2b:d0:d1:cb:81:3e:b4:df:0d:
8f:c8:69:8c:c3:0a:4d:bf:96:26:62:9a:c4:dc:c8:b4:91:cf:
43:c5:37:d7:a8:8a:df:c2:a2:9e:35:1e:56:e4:e8:76:e4:90:
fb:c3:13:61:bd:ef:6f:31:19:86:7a:fb:df:eb:53:08:40:8c:
82:1c:31:4b:dd:ce:60:1f:a6:52:c4:af:8c:4b:89:6c:30:0d:
4c:ac:8e:25:a9:da:1e:09:da:46:55:91:0d:df:c2:f0:c2:9a:
cc:b6:cb:ff:98:f1:bb:00:72:ce:d8:0f:00:4e:ac:f8:6a:55:
1c:67:e3:eb:54:e1:76:6c:0b:0a:3b:8d:b2:e2:74:87:cd:11:
14:7b:ab:c2:1f:27:4f:4f:0e:91:c5:ef:52:fa:4f:cc:77:76:
78:74:0f:96:5a:30:5e:be:a8:96:31:f5:e7:f9:9a:ac:a4:fa:
5c:45:34:ca:55:62:98:8b:c7:38:d3:5f:87:81:70:18:20:76:
1b:56:68:26:f3:12:40:85:61:bd:0d:24:81:ca:c1:fb:f0:b5:
7f:9e:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:21:10 2026 by rpki-client