Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215192.roa
File:                     AS215192.roa (raw, json)
Hash identifier:          shr4/ToZMmEclO5K4JVPb0NUp9ZTmMfG2+/HbvFK6Ns=
Subject key identifier:   21:B3:0A:8C:A3:11:3E:67:EF:E4:01:00:C3:5D:E4:D2:8F:A4:EE:DE
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       18E56094266854295EEC3A5154F234EC39B433F1
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215192.roa
Signing time:             Fri 05 Jun 2026 08:45:51 +0000
ROA not before:           Fri 05 Jun 2026 08:40:51 +0000
ROA not after:            Fri 04 Jun 2027 08:45:51 +0000
asID:                     215192
IP address blocks:        2a07:54c1:c200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:60:94:26:68:54:29:5e:ec:3a:51:54:f2:34:ec:39:b4:33:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:51 2026 GMT
            Not After : Jun  4 08:45:51 2027 GMT
        Subject: CN=21B30A8CA3113E67EFE40100C35DE4D28FA4EEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:55:0a:3e:c0:56:81:6e:ba:8a:92:13:33:
                    6d:eb:07:fc:41:e2:3b:c5:52:6e:4c:5d:ed:5b:5f:
                    e6:61:38:64:e1:8e:90:ca:71:2b:f8:58:90:3e:13:
                    3e:ec:06:c7:0d:96:7e:5d:4d:19:5a:bc:7d:fc:bd:
                    ac:d2:8c:75:05:8b:25:66:cf:18:6c:00:86:4d:c0:
                    61:f6:70:5a:0c:98:39:b2:c5:58:8b:26:b9:51:22:
                    47:ff:b8:3f:98:ad:71:7e:b0:19:b4:76:1b:fd:c7:
                    f6:86:ac:7b:8b:ef:8d:e4:27:77:d6:63:db:0d:69:
                    83:37:fd:2d:9b:c7:1c:31:4e:c3:d7:82:cb:a2:f9:
                    bb:f1:ed:13:92:ef:77:d6:2a:d4:7d:ed:bf:46:ad:
                    5f:aa:1b:51:31:ab:c9:55:df:ee:b9:81:7d:f2:09:
                    9a:32:7d:85:36:bf:f3:e3:ec:fb:57:60:ed:f5:bf:
                    3e:4e:64:7e:bc:9d:a0:7e:fe:97:c0:ef:e0:3a:38:
                    19:55:89:02:d0:15:c5:89:66:d1:6f:3a:22:84:5e:
                    d9:d5:03:80:43:be:04:01:41:38:79:6b:52:9c:f3:
                    26:d8:d7:86:79:b2:1a:0d:25:60:f4:0a:da:a0:f5:
                    d2:e7:a8:4c:49:5b:85:f0:19:66:9d:57:6a:2c:1d:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B3:0A:8C:A3:11:3E:67:EF:E4:01:00:C3:5D:E4:D2:8F:A4:EE:DE
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215192.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:7d:40:34:e9:7d:c9:b8:c3:ad:bf:db:8a:9d:53:79:0c:
         53:d4:4e:66:6e:01:b0:f8:4c:e5:cd:f6:b4:b1:ca:6c:83:d4:
         b0:ed:ad:b8:34:79:22:a9:f4:66:af:50:0a:34:ff:83:93:7b:
         4d:78:2f:11:41:7b:2d:65:ff:a7:ff:79:19:59:ff:86:c6:82:
         26:d6:b6:cb:a8:e6:76:79:c3:e5:eb:a4:2f:6e:6c:d3:61:e1:
         23:b3:5c:c9:fd:73:2c:fd:5c:74:84:57:89:fc:35:eb:b9:4b:
         6c:79:8b:f5:38:16:c1:00:df:8d:84:94:bf:40:47:0e:0f:e7:
         7e:ea:9d:af:e3:53:46:d5:fb:1f:dd:e5:cb:dc:70:0e:71:b0:
         cc:e7:c3:08:75:b9:d3:fb:6a:8f:fa:70:a3:a9:10:46:a1:d7:
         76:f2:79:52:84:98:bf:a1:de:b2:fd:94:2d:63:d9:b7:d1:9b:
         d9:e1:59:79:df:9c:65:4b:a6:53:4d:e6:d6:66:5f:da:ce:b9:
         2d:85:5e:01:b4:55:74:3e:e9:01:18:a4:5c:30:46:9d:1f:8f:
         f3:36:c3:93:a0:5c:6d:8f:25:b3:89:9a:c5:fd:93:89:92:09:
         4d:3f:1a:0b:af:c3:12:4a:39:2f:3a:14:d5:ef:f3:8f:ec:ad:
         6d:61:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:16 2026 by rpki-client