Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215703.roa
File: AS215703.roa (raw, json)
Hash identifier: 6b+5HYAK090dDisKvf1l+mRcnvq0o1mDrbd0HzPySIE=
Subject key identifier: 4B:17:D5:DB:DF:55:F8:82:42:DF:64:9D:E7:E4:7F:5F:F8:DA:14:37
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 48B76EDC4FF347602121B4B965F6764E081F1AE3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215703.roa
Signing time: Fri 02 Oct 2026 22:49:35 +0000
ROA not before: Fri 02 Oct 2026 22:44:35 +0000
ROA not after: Fri 01 Oct 2027 22:49:35 +0000
asID: 215703
IP address blocks: 46.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b7:6e:dc:4f:f3:47:60:21:21:b4:b9:65:f6:76:4e:08:1f:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 2 22:44:35 2026 GMT
Not After : Oct 1 22:49:35 2027 GMT
Subject: CN=4B17D5DBDF55F88242DF649DE7E47F5FF8DA1437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:28:27:25:26:02:f5:de:e8:df:53:86:ea:
7a:8c:b9:20:c1:4c:7f:5e:00:d5:2a:cb:99:60:95:
db:29:40:5d:c8:11:5b:75:01:c1:85:d8:e0:b0:02:
c2:c4:72:18:76:5e:ec:8e:e0:17:82:7f:04:d4:f0:
86:54:19:5a:52:a1:a1:c0:d7:fe:9e:40:2d:c1:a1:
fc:b6:89:95:b7:b8:b6:bf:57:8e:c8:45:41:dd:ed:
af:01:4d:11:0a:64:f8:4e:82:56:53:6b:06:7b:e2:
c2:ef:75:a7:aa:8b:36:1a:06:44:6a:e9:70:15:7c:
e5:45:f3:a2:03:52:33:fe:cb:24:28:42:14:da:d6:
18:a7:fc:96:0e:00:03:a9:80:03:57:74:0a:fd:dd:
ff:97:a2:0d:78:9e:30:82:e7:99:45:70:4e:e6:a3:
e8:d3:0d:25:51:88:a0:21:16:1f:c3:cf:1e:3e:53:
a3:24:95:4e:3d:2c:52:74:ee:df:21:5f:04:f1:81:
35:12:2d:d6:d5:02:2e:55:0b:4b:29:b7:89:60:cc:
3d:37:7f:93:27:75:47:55:11:0e:40:d9:bb:df:65:
9c:51:4f:c9:09:a1:59:3c:6f:56:24:3e:d4:c2:dc:
7a:62:ca:92:3d:be:e1:b6:11:fd:8b:6a:e4:da:cc:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:17:D5:DB:DF:55:F8:82:42:DF:64:9D:E7:E4:7F:5F:F8:DA:14:37
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.233.0/24
Signature Algorithm: sha256WithRSAEncryption
97:84:b4:27:32:c2:21:21:ef:d1:db:3c:00:eb:47:f0:64:02:
7d:38:61:da:1c:55:69:3f:69:9a:ed:cc:48:6b:55:bf:a8:d6:
1d:50:c1:44:18:f5:c1:9a:74:63:c1:84:f6:b6:24:8f:ed:1b:
a4:a7:c5:c6:9d:cc:74:51:85:e3:bf:6a:b0:13:0f:68:cb:f3:
dd:8c:83:27:d3:ae:b6:c8:e6:fd:5d:6d:f5:d6:7f:3f:ab:37:
3e:1d:9c:59:d3:a0:30:a2:ba:ca:b7:bb:b8:45:96:6c:74:71:
35:02:5b:4f:9c:cd:4f:28:e7:f0:bc:d5:e8:fd:bd:36:9a:20:
51:b7:9c:e7:17:bb:cf:03:02:6b:8f:30:9d:84:15:5a:44:44:
c8:a2:93:60:07:3e:18:0e:e4:a7:0d:c2:6a:26:5f:46:14:b8:
80:dc:8b:3a:c2:98:fa:23:ab:13:f5:42:e6:40:f1:43:c0:9f:
b4:a4:bf:cd:05:54:dd:03:ae:6d:b4:10:11:d5:b1:e5:12:42:
31:c1:06:ad:7f:81:81:50:93:b5:91:be:bd:bc:ca:2a:9f:a5:
b4:ea:a8:45:64:e8:34:f2:21:af:51:9b:7c:9e:76:47:25:fd:
2a:24:d6:cd:47:de:6a:f3:67:61:0f:60:bc:da:65:b2:9e:0e:
3d:7b:72:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:23:22 2026 by rpki-client