Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
File: AS215849.roa (raw, json)
Hash identifier: R4EyRSktfNRvS/NCsYXGy898hZl7Z5I2CrfO78stkUY=
Subject key identifier: 33:34:93:09:94:56:32:2D:A5:60:50:EF:CE:38:FB:EE:16:8B:92:32
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2665C5B7113D23ED7D68D3FDB3577C5C68D93377
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
Signing time: Sat 06 Jun 2026 18:32:41 +0000
ROA not before: Sat 06 Jun 2026 18:27:41 +0000
ROA not after: Sat 05 Jun 2027 18:32:41 +0000
asID: 215849
IP address blocks: 2a14:7585::/32 maxlen: 32
2a14:7585:6000::/36 maxlen: 36
2a14:7585:f000::/36 maxlen: 48
2a14:7587::/32 maxlen: 32
2a14:7587:5000::/36 maxlen: 36
2a14:7587:6000::/36 maxlen: 36
2a14:7587:7000::/36 maxlen: 36
2a14:7587:8000::/36 maxlen: 36
2a14:7587:9000::/36 maxlen: 36
2a14:7587:e000::/36 maxlen: 36
2a14:7587:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 18:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:65:c5:b7:11:3d:23:ed:7d:68:d3:fd:b3:57:7c:5c:68:d9:33:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 6 18:27:41 2026 GMT
Not After : Jun 5 18:32:41 2027 GMT
Subject: CN=333493099456322DA56050EFCE38FBEE168B9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:e5:5c:7c:87:40:fb:32:47:82:4d:50:93:
e3:0c:35:4b:1c:e0:4c:fc:1b:9e:42:33:67:ea:d7:
84:df:70:1f:3a:3f:58:dd:6c:61:33:9e:bd:1e:bd:
9e:8b:12:4a:db:59:8a:bc:9a:12:5f:47:b6:df:cd:
62:e6:2b:4b:7a:99:29:d5:ef:6f:69:57:e4:57:6f:
f7:44:76:85:fd:5d:4d:f2:7d:3b:e9:9e:d7:db:77:
25:e8:73:05:6e:7e:2a:13:f5:8d:73:d3:5d:1f:4d:
79:b5:a4:60:0d:47:5b:98:2f:1b:55:9f:86:aa:5e:
78:06:17:44:2a:31:36:14:b5:b5:f5:fb:92:2e:fd:
29:05:a8:87:a9:c7:30:f0:03:ba:dd:c2:24:fa:3b:
96:4c:3c:30:e5:68:ff:e8:1a:b0:c5:46:4a:f7:8a:
1c:9d:d8:b1:5d:d3:80:7c:e8:ad:11:ae:a8:9e:b1:
4c:d1:c9:ac:1c:ba:c1:11:f1:8a:33:37:7d:2b:00:
c0:9b:d0:11:ef:55:ff:39:93:f2:f3:1b:85:35:8e:
28:93:ff:32:d6:3b:58:d7:c6:a6:b7:ba:4d:f1:16:
d9:f4:67:01:5f:25:55:c2:8a:55:4f:47:22:25:0f:
67:3e:f8:49:35:41:e0:bd:10:95:00:15:d3:5c:e0:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:93:09:94:56:32:2D:A5:60:50:EF:CE:38:FB:EE:16:8B:92:32
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585::/32
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
38:cf:93:a2:71:d0:30:80:7b:c5:38:2e:e0:a0:99:c7:7e:df:
38:cc:11:f7:d9:85:0e:3c:76:3b:d7:b8:ad:cd:1e:06:fa:a3:
08:50:c6:f6:2e:44:75:f9:4b:24:a7:aa:70:5a:f9:6c:fb:46:
0f:50:8b:99:1a:70:ee:59:cb:af:11:73:5d:c1:f1:02:6a:ad:
1a:00:e4:73:70:74:55:40:c4:83:59:76:c7:18:a1:85:ae:96:
f5:80:b4:72:a1:f3:1a:ec:40:c4:6f:6b:4a:31:20:8c:b5:83:
ee:54:d4:74:75:9a:c4:8e:12:98:51:0a:8c:d0:59:17:63:1b:
c6:ed:cc:f7:6d:6b:99:0c:ac:52:6c:2a:ae:5a:f8:2f:c4:f9:
ba:ca:0b:26:b9:90:8c:10:26:87:d2:35:ad:fa:76:dd:32:bf:
b6:8d:d9:97:94:19:46:a1:12:b7:1a:8b:f0:52:ee:bb:55:71:
fc:e5:13:38:0b:9d:4d:5e:99:21:65:07:b2:22:19:b4:e2:d0:
86:47:41:28:9b:60:1d:43:7b:0c:2c:8e:7f:8c:24:57:d3:21:
09:0b:af:64:f3:7e:61:ed:6d:dd:e2:48:dd:af:b6:3c:6d:69:
a8:3d:c5:c2:13:f9:4d:e3:81:d1:3b:6a:a0:d8:c2:ca:65:e6:
4d:71:83:d0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUJmXFtxE9I+19aNP9s1d8XGjZM3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA2MDYxODI3NDFaFw0yNzA2MDUxODMyNDFaMDMxMTAvBgNV
BAMTKDMzMzQ5MzA5OTQ1NjMyMkRBNTYwNTBFRkNFMzhGQkVFMTY4QjkyMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNb+VcfIdA+zJHgk1Qk+MMNUsc
4Ez8G55CM2fq14TfcB86P1jdbGEznr0evZ6LEkrbWYq8mhJfR7bfzWLmK0t6mSnV
729pV+RXb/dEdoX9XU3yfTvpntfbdyXocwVufioT9Y1z010fTXm1pGANR1uYLxtV
n4aqXngGF0QqMTYUtbX1+5Iu/SkFqIepxzDwA7rdwiT6O5ZMPDDlaP/oGrDFRkr3
ihyd2LFd04B86K0RrqiesUzRyawcusER8YozN30rAMCb0BHvVf85k/LzG4U1jiiT
/zLWO1jXxqa3uk3xFtn0ZwFfJVXCilVPRyIlD2c++Ek1QeC9EJUAFdNc4HS1AgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUMzSTCZRWMi2lYFDvzjj77haLkjIwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1ODQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhR1
hQMFACoUdYcwDQYJKoZIhvcNAQELBQADggEBADjPk6Jx0DCAe8U4LuCgmcd+3zjM
EffZhQ48djvXuK3NHgb6owhQxvYuRHX5SySnqnBa+Wz7Rg9Qi5kacO5Zy68Rc13B
8QJqrRoA5HNwdFVAxINZdscYoYWulvWAtHKh8xrsQMRva0oxIIy1g+5U1HR1msSO
EphRCozQWRdjG8btzPdta5kMrFJsKq5a+C/E+brKCya5kIwQJofSNa36dt0yv7aN
2ZeUGUahErcai/BS7rtVcfzlEzgLnU1emSFlB7IiGbTi0IZHQSibYB1Dewwsjn+M
JFfTIQkLr2TzfmHtbd3iSN2vtjxtaag9xcIT+U3jgdE7aqDYwspl5k1xg9A=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:44 2026 by rpki-client