Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: fyj6q1c4yvlniIB80w+nZgvJiHG+tD4TSg2sFiTIY/g=
Subject key identifier: 69:A3:6B:C6:1C:FB:FC:9B:0C:DB:2C:74:91:EA:D6:51:96:10:4D:F1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 49D5D06891CDA92B70350A1EF69632D44AF259F8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
Signing time: Fri 18 Sep 2026 15:45:27 +0000
ROA not before: Fri 18 Sep 2026 15:40:27 +0000
ROA not after: Fri 17 Sep 2027 15:45:27 +0000
asID: 215607
IP address blocks: 51.241.188.0/24 maxlen: 24
94.118.16.0/24 maxlen: 24
94.118.31.0/24 maxlen: 24
94.118.68.0/24 maxlen: 24
94.118.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d5:d0:68:91:cd:a9:2b:70:35:0a:1e:f6:96:32:d4:4a:f2:59:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 18 15:40:27 2026 GMT
Not After : Sep 17 15:45:27 2027 GMT
Subject: CN=69A36BC61CFBFC9B0CDB2C7491EAD65196104DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:47:13:56:d6:87:d8:db:64:12:3f:5c:29:
0b:07:fd:df:1b:53:43:38:cb:c6:61:23:aa:40:b3:
db:32:3c:2c:38:68:ff:ba:ea:14:08:9e:89:84:36:
d3:77:ad:d9:fc:2a:12:d9:d8:05:fd:f6:a5:48:a3:
ff:3a:23:eb:82:f0:eb:b0:bf:6c:c4:ad:5f:1e:a4:
e2:a4:17:7c:c9:10:ca:a8:6d:49:b2:fd:63:4b:3b:
9c:c5:0e:ca:1d:17:5b:ec:ce:62:bd:6d:c2:99:ff:
b4:4a:e4:21:06:91:80:67:c8:a4:18:d4:86:f2:70:
b0:50:78:8e:e7:d8:ae:9d:de:6b:f3:ed:e1:c5:42:
6e:b0:d9:fc:5e:a8:7f:a1:93:89:0f:d0:48:57:dd:
52:86:dd:96:40:af:73:8b:da:3a:24:6b:da:45:b3:
1e:38:5a:fd:7d:61:c9:c5:a4:a3:1d:cc:19:78:36:
78:63:bb:55:06:6a:2e:ad:3c:1c:76:b9:e5:8b:4a:
ea:b2:d4:7d:ae:b0:53:c1:e6:2c:b7:bd:45:67:03:
97:b9:f0:1d:5d:33:0a:15:9b:f1:e8:a3:24:9b:f1:
dd:ee:af:30:ec:2e:a0:d8:00:7f:65:78:b6:98:08:
66:d3:81:4a:bc:ed:5c:64:0d:22:0c:7d:34:d3:29:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:6B:C6:1C:FB:FC:9B:0C:DB:2C:74:91:EA:D6:51:96:10:4D:F1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.188.0/24
94.118.16.0/24
94.118.31.0/24
94.118.68.0/24
94.118.73.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2c:72:4b:f4:84:67:90:e1:8c:83:5e:12:84:0b:61:3b:d8:
d6:0b:83:98:24:a1:1f:40:6e:8a:df:71:00:18:6a:a9:cc:81:
85:a0:22:69:72:aa:01:ad:ee:4e:c9:0d:8e:a2:c7:11:7b:df:
35:22:94:21:67:2f:76:a8:d4:c2:81:a9:20:d4:77:f0:cc:93:
5b:c8:43:6b:a2:bb:71:f3:1d:77:dd:c8:8c:95:0d:f1:de:65:
07:bc:e7:25:ce:15:12:87:88:9c:a2:f1:ff:25:86:4a:c9:64:
93:60:ff:3c:79:29:bf:4f:c0:87:d3:eb:af:62:0f:7c:af:fc:
1a:7b:55:75:3d:87:2e:86:c5:3a:00:ed:81:73:87:81:04:cd:
85:29:8c:3a:15:1d:50:ab:bb:36:6d:ab:18:2f:89:87:28:6b:
70:36:d0:d6:4c:ca:bd:52:e8:02:fa:90:6d:1c:13:66:aa:53:
14:8c:e4:32:e4:3f:94:60:bb:dd:1d:b9:cd:dc:ba:df:92:45:
9a:6f:c4:9c:f5:be:7e:6c:45:19:24:30:c4:9e:bc:d1:11:aa:
e9:df:21:c7:b1:d1:16:0e:14:a8:19:75:46:35:39:ea:70:b3:
74:3d:67:0f:29:ea:dc:89:08:99:17:30:7e:da:a4:2c:2c:e4:
af:41:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:34 2026 by rpki-client