
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215192.roa
File: AS215192.roa (raw, json)
Hash identifier: shr4/ToZMmEclO5K4JVPb0NUp9ZTmMfG2+/HbvFK6Ns=
Subject key identifier: 21:B3:0A:8C:A3:11:3E:67:EF:E4:01:00:C3:5D:E4:D2:8F:A4:EE:DE
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 18E56094266854295EEC3A5154F234EC39B433F1
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215192.roa
Signing time: Fri 05 Jun 2026 08:45:51 +0000
ROA not before: Fri 05 Jun 2026 08:40:51 +0000
ROA not after: Fri 04 Jun 2027 08:45:51 +0000
asID: 215192
IP address blocks: 2a07:54c1:c200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e5:60:94:26:68:54:29:5e:ec:3a:51:54:f2:34:ec:39:b4:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jun 5 08:40:51 2026 GMT
Not After : Jun 4 08:45:51 2027 GMT
Subject: CN=21B30A8CA3113E67EFE40100C35DE4D28FA4EEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:55:0a:3e:c0:56:81:6e:ba:8a:92:13:33:
6d:eb:07:fc:41:e2:3b:c5:52:6e:4c:5d:ed:5b:5f:
e6:61:38:64:e1:8e:90:ca:71:2b:f8:58:90:3e:13:
3e:ec:06:c7:0d:96:7e:5d:4d:19:5a:bc:7d:fc:bd:
ac:d2:8c:75:05:8b:25:66:cf:18:6c:00:86:4d:c0:
61:f6:70:5a:0c:98:39:b2:c5:58:8b:26:b9:51:22:
47:ff:b8:3f:98:ad:71:7e:b0:19:b4:76:1b:fd:c7:
f6:86:ac:7b:8b:ef:8d:e4:27:77:d6:63:db:0d:69:
83:37:fd:2d:9b:c7:1c:31:4e:c3:d7:82:cb:a2:f9:
bb:f1:ed:13:92:ef:77:d6:2a:d4:7d:ed:bf:46:ad:
5f:aa:1b:51:31:ab:c9:55:df:ee:b9:81:7d:f2:09:
9a:32:7d:85:36:bf:f3:e3:ec:fb:57:60:ed:f5:bf:
3e:4e:64:7e:bc:9d:a0:7e:fe:97:c0:ef:e0:3a:38:
19:55:89:02:d0:15:c5:89:66:d1:6f:3a:22:84:5e:
d9:d5:03:80:43:be:04:01:41:38:79:6b:52:9c:f3:
26:d8:d7:86:79:b2:1a:0d:25:60:f4:0a:da:a0:f5:
d2:e7:a8:4c:49:5b:85:f0:19:66:9d:57:6a:2c:1d:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B3:0A:8C:A3:11:3E:67:EF:E4:01:00:C3:5D:E4:D2:8F:A4:EE:DE
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:c200::/40
Signature Algorithm: sha256WithRSAEncryption
2f:11:7d:40:34:e9:7d:c9:b8:c3:ad:bf:db:8a:9d:53:79:0c:
53:d4:4e:66:6e:01:b0:f8:4c:e5:cd:f6:b4:b1:ca:6c:83:d4:
b0:ed:ad:b8:34:79:22:a9:f4:66:af:50:0a:34:ff:83:93:7b:
4d:78:2f:11:41:7b:2d:65:ff:a7:ff:79:19:59:ff:86:c6:82:
26:d6:b6:cb:a8:e6:76:79:c3:e5:eb:a4:2f:6e:6c:d3:61:e1:
23:b3:5c:c9:fd:73:2c:fd:5c:74:84:57:89:fc:35:eb:b9:4b:
6c:79:8b:f5:38:16:c1:00:df:8d:84:94:bf:40:47:0e:0f:e7:
7e:ea:9d:af:e3:53:46:d5:fb:1f:dd:e5:cb:dc:70:0e:71:b0:
cc:e7:c3:08:75:b9:d3:fb:6a:8f:fa:70:a3:a9:10:46:a1:d7:
76:f2:79:52:84:98:bf:a1:de:b2:fd:94:2d:63:d9:b7:d1:9b:
d9:e1:59:79:df:9c:65:4b:a6:53:4d:e6:d6:66:5f:da:ce:b9:
2d:85:5e:01:b4:55:74:3e:e9:01:18:a4:5c:30:46:9d:1f:8f:
f3:36:c3:93:a0:5c:6d:8f:25:b3:89:9a:c5:fd:93:89:92:09:
4d:3f:1a:0b:af:c3:12:4a:39:2f:3a:14:d5:ef:f3:8f:ec:ad:
6d:61:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:16 2026 by rpki-client