Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215120.roa
File: AS215120.roa (raw, json)
Hash identifier: lZwulFcAWQ/QJOYIlMrUCGpYSnZUFayiyoO6GdkhUU0=
Subject key identifier: 47:3D:BE:D8:94:89:03:78:F0:A8:67:34:A5:C7:65:97:30:5B:22:6E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26BBA057DE6AD8C89B8211B2F1932EC5F6E02D61
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215120.roa
Signing time: Wed 09 Sep 2026 12:25:23 +0000
ROA not before: Wed 09 Sep 2026 12:20:23 +0000
ROA not after: Wed 08 Sep 2027 12:25:23 +0000
asID: 215120
IP address blocks: 188.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bb:a0:57:de:6a:d8:c8:9b:82:11:b2:f1:93:2e:c5:f6:e0:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 9 12:20:23 2026 GMT
Not After : Sep 8 12:25:23 2027 GMT
Subject: CN=473DBED894890378F0A86734A5C76597305B226E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:26:1e:f0:d6:3f:70:3c:0d:67:17:63:dc:
6a:75:ae:76:2b:a5:39:ac:50:15:98:92:5d:e5:08:
c7:3c:6e:1b:52:ab:5d:74:e3:c4:b1:d5:98:2d:c4:
a2:e3:c8:16:b0:52:b5:d7:49:5f:df:6e:9a:f8:7d:
f9:47:98:34:b5:ca:de:0f:e3:c1:b7:56:1c:55:36:
3f:76:4b:01:ce:58:a7:84:e7:e0:0a:2b:be:8e:e4:
98:25:f9:82:6e:bf:60:81:3d:2b:c7:54:3a:0b:89:
59:5f:67:d7:ab:80:82:ea:f8:c8:b8:81:46:71:fa:
99:40:d7:ee:7d:20:11:40:91:35:b0:44:c9:0d:77:
c4:2c:4c:32:05:db:e9:6a:df:ab:4b:c7:9a:02:89:
33:3a:44:52:bb:72:f5:a2:de:b9:2b:cd:1c:35:1c:
d5:5f:eb:a8:6e:4c:ed:ee:41:d5:c7:c3:9e:69:1e:
2c:45:3c:84:8f:03:08:d9:21:8f:cb:5d:1a:c6:fe:
2a:20:b5:a1:72:25:47:8b:78:ec:be:bf:d7:a1:d6:
97:be:1f:fa:1f:3d:95:20:a4:4c:24:60:5d:fe:68:
7e:ec:e9:14:7b:5d:e8:b2:ee:56:e1:b7:29:61:d9:
12:4f:8e:c0:8a:4e:4f:a5:c2:02:7f:af:0f:28:13:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:BE:D8:94:89:03:78:F0:A8:67:34:A5:C7:65:97:30:5B:22:6E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1a:df:46:65:26:30:14:92:2b:58:ac:93:9d:2a:90:f5:00:
b6:7e:94:2e:5a:c0:d0:0d:21:6a:1b:c9:eb:f9:48:bb:e8:c0:
5b:61:d9:6d:83:42:34:26:29:1e:21:ec:98:26:71:83:23:01:
9e:a3:f8:c4:43:9f:38:51:fd:7b:58:59:21:cc:19:cc:9f:c3:
28:c4:eb:60:04:d3:cb:11:1c:54:4a:ae:60:50:90:48:c2:71:
28:77:9e:39:d2:46:a7:69:e9:f9:53:49:6f:e8:1a:69:d4:10:
fd:cb:a4:33:55:ac:c5:67:32:db:42:a8:fd:4a:6d:dc:22:32:
37:57:b2:86:ad:f7:97:96:d0:56:b9:a2:f7:e6:0e:77:12:f8:
93:8f:50:13:fe:a7:b4:e9:a4:32:0a:38:49:27:ca:d7:eb:26:
24:00:94:bc:58:cd:33:8a:ba:63:9b:ce:5d:ff:9f:1a:ec:cd:
89:07:97:57:3a:2f:b7:45:f5:09:90:9e:1c:9e:d4:0b:d8:2f:
62:61:50:c9:f9:89:a7:f3:e6:c2:97:e2:13:27:62:77:5c:50:
e8:d2:eb:ec:5b:fe:09:39:14:e8:c4:d7:b0:dd:f5:76:6c:70:
3d:85:a6:bf:04:8b:a9:ae:2e:7b:de:4e:f5:7b:69:08:83:b6:
73:52:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:53:52 2026 by rpki-client