Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: pHKEW0iaw43+pNRBcT8CItoDjmsLeVI7JOHcf6Viz9c=
Subject key identifier: CF:39:39:45:FC:82:2C:FA:8B:5C:36:F8:F8:5D:40:30:87:64:B6:88
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 75918AF316D0E737833CC1A52767A67C78771D35
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215607.roa
Signing time: Thu 30 Oct 2025 21:19:22 +0000
ROA not before: Thu 30 Oct 2025 21:14:22 +0000
ROA not after: Thu 29 Oct 2026 21:19:22 +0000
asID: 215607
IP address blocks: 178.94.211.0/24 maxlen: 24
178.94.219.0/24 maxlen: 24
178.94.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:91:8a:f3:16:d0:e7:37:83:3c:c1:a5:27:67:a6:7c:78:77:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 30 21:14:22 2025 GMT
Not After : Oct 29 21:19:22 2026 GMT
Subject: CN=CF393945FC822CFA8B5C36F8F85D40308764B688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:dd:78:c8:87:93:cc:e7:95:f0:c6:34:2a:
3d:fd:e8:e1:26:c5:9f:df:1d:49:fc:62:b2:c2:6f:
0d:81:bf:cd:cc:99:b9:57:14:b4:2e:58:ea:a9:05:
87:6c:05:2c:44:51:5a:da:20:cc:ae:c2:79:7f:ba:
88:1b:a0:05:57:6f:92:7a:eb:83:8e:73:8d:da:3f:
54:f5:f2:7b:8f:4c:b6:13:ea:ef:41:23:99:16:4f:
e4:89:d5:21:25:de:dc:3e:cf:59:c0:b7:b1:9f:cb:
5b:1d:46:1c:6e:8e:e0:ab:6d:ec:f5:1d:d8:61:66:
7e:a9:df:5f:2c:c6:a2:a6:13:55:c7:cb:6b:d8:a9:
6d:80:c7:3a:45:e0:39:ec:50:a0:fa:b8:0e:72:fc:
06:d1:04:80:7c:2b:33:42:c8:2c:e2:f4:62:40:fd:
ae:7b:ec:97:7f:cf:cd:79:68:62:0a:8c:8a:e7:bd:
4e:12:62:a4:29:8f:bc:18:e5:ab:03:f0:5c:04:60:
91:eb:fb:a6:2c:2d:cb:69:5a:1d:3c:f5:e6:6e:23:
c2:97:b6:b3:3a:52:e3:79:6d:b5:a6:1d:3f:5c:cd:
9c:8a:70:86:f3:f0:ed:e7:4e:71:6f:ef:35:53:59:
cb:da:40:5d:6d:57:42:2d:97:2c:1c:ce:2d:06:9e:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:39:45:FC:82:2C:FA:8B:5C:36:F8:F8:5D:40:30:87:64:B6:88
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.211.0/24
178.94.219.0/24
178.94.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b0:65:bd:b8:17:83:20:3c:cf:93:77:4d:59:a1:b3:50:ff:
2b:83:8c:02:45:4d:df:ee:41:96:1a:a3:40:eb:fe:01:a0:cb:
57:20:09:ac:68:2c:10:ca:e7:32:69:0e:1f:ab:14:de:98:61:
52:e7:ef:15:0f:e6:bb:01:9e:aa:ac:df:ff:e7:37:c6:37:7f:
b9:59:55:fe:de:29:fa:cf:82:d1:e7:a5:1d:18:87:2c:e8:90:
13:15:73:72:a2:b5:82:9e:c7:b3:5f:5e:36:90:ac:f3:f0:30:
6f:4b:32:b5:03:66:70:0c:40:6c:11:3e:3a:c6:51:e3:46:04:
9d:02:f9:02:ba:b4:65:61:15:6b:16:5f:27:ef:73:55:32:34:
57:4b:e3:f1:31:76:13:3e:27:3d:64:7b:19:d1:67:ff:2a:05:
77:e8:41:7a:32:16:2a:ef:5b:86:ec:88:c3:97:5b:46:66:ab:
44:cf:c8:2c:ee:60:73:c4:86:fc:50:b8:8d:98:3a:ba:26:5f:
99:04:27:79:2f:d5:1d:51:0c:98:57:0a:04:b9:3f:7e:65:4e:
f9:d5:17:36:b2:89:94:31:19:58:6d:60:15:6a:30:3c:e8:31:
ab:58:75:da:fb:1a:fc:50:ea:24:f8:15:63:c2:00:d0:6d:3e:
b3:1b:08:c2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUdZGK8xbQ5zeDPMGlJ2emfHh3HTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTEwMzAyMTE0MjJaFw0yNjEwMjkyMTE5MjJaMDMxMTAvBgNV
BAMTKENGMzkzOTQ1RkM4MjJDRkE4QjVDMzZGOEY4NUQ0MDMwODc2NEI2ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFt14yIeTzOeV8MY0Kj396OEm
xZ/fHUn8YrLCbw2Bv83MmblXFLQuWOqpBYdsBSxEUVraIMyuwnl/uogboAVXb5J6
64OOc43aP1T18nuPTLYT6u9BI5kWT+SJ1SEl3tw+z1nAt7Gfy1sdRhxujuCrbez1
HdhhZn6p318sxqKmE1XHy2vYqW2AxzpF4DnsUKD6uA5y/AbRBIB8KzNCyCzi9GJA
/a577Jd/z815aGIKjIrnvU4SYqQpj7wY5asD8FwEYJHr+6YsLctpWh089eZuI8KX
trM6UuN5bbWmHT9czZyKcIbz8O3nTnFv7zVTWcvaQF1tV0Itlywczi0Gnt0LAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUzzk5RfyCLPqLXDb4+F1AMIdktogwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1NjA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsl7T
AwQAsl7bAwQAsl7yMA0GCSqGSIb3DQEBCwUAA4IBAQCnsGW9uBeDIDzPk3dNWaGz
UP8rg4wCRU3f7kGWGqNA6/4BoMtXIAmsaCwQyucyaQ4fqxTemGFS5+8VD+a7AZ6q
rN//5zfGN3+5WVX+3in6z4LR56UdGIcs6JATFXNyorWCnsezX142kKzz8DBvSzK1
A2ZwDEBsET46xlHjRgSdAvkCurRlYRVrFl8n73NVMjRXS+PxMXYTPic9ZHsZ0Wf/
KgV36EF6MhYq71uG7IjDl1tGZqtEz8gs7mBzxIb8ULiNmDq6Jl+ZBCd5L9UdUQyY
VwoEuT9+ZU751Rc2somUMRlYbWAVajA86DGrWHXa+xr8UOok+BVjwgDQbT6zGwjC
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:48 2025 by rpki-client