Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215703.roa
File: AS215703.roa (raw, json)
Hash identifier: Wku4QTuRysNJM3/lyqyve3hLcdD9r/I9o9e4j6KuwW8=
Subject key identifier: 35:99:DC:14:4F:5C:E7:9A:DF:86:B0:65:03:B4:1F:58:0D:DB:21:09
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5EA432F15AA096F4448DBDCEF32425D350DE9348
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215703.roa
Signing time: Fri 31 Oct 2025 21:55:11 +0000
ROA not before: Fri 31 Oct 2025 21:50:11 +0000
ROA not after: Fri 30 Oct 2026 21:55:11 +0000
asID: 215703
IP address blocks: 46.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a4:32:f1:5a:a0:96:f4:44:8d:bd:ce:f3:24:25:d3:50:de:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 31 21:50:11 2025 GMT
Not After : Oct 30 21:55:11 2026 GMT
Subject: CN=3599DC144F5CE79ADF86B06503B41F580DDB2109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:aa:05:ba:d1:10:91:81:06:33:b8:83:65:72:
63:96:7a:97:b7:16:c9:58:86:48:e5:cd:b2:c3:2f:
27:3c:e0:31:e7:88:9d:cd:e2:e4:94:28:41:5b:be:
36:16:c1:50:99:f0:32:5d:97:dc:50:b7:3e:73:2b:
3f:40:91:08:07:06:70:97:b2:8b:6c:1c:fa:f2:bb:
9b:30:a4:15:d0:b7:3d:d5:cf:4c:97:37:d4:94:df:
d3:97:69:18:44:ca:ac:1e:e8:48:c1:fd:53:77:a8:
59:b7:b4:e1:74:fa:1c:01:d1:2a:d0:56:ad:67:fd:
56:f3:17:c8:0b:54:2b:aa:ca:d5:08:d4:62:f6:fc:
a5:c2:46:5b:af:c2:23:b9:15:5f:f4:47:6a:5f:47:
69:8d:09:44:be:c4:78:7b:a1:55:47:0a:fc:76:34:
96:28:ed:fa:5a:e0:a4:03:e3:dd:f8:1d:d9:75:fd:
71:7c:c8:34:8c:aa:89:e3:6e:9a:59:0d:6f:d5:e7:
00:c9:55:a3:aa:4a:60:36:c1:88:46:ff:75:30:64:
1e:06:8d:de:eb:1e:bb:89:29:06:c0:41:61:85:fd:
d4:74:60:d3:59:ba:92:21:e3:c0:4b:8c:91:e7:0e:
ae:2b:92:8c:4b:39:8c:7b:b5:b1:44:78:bb:4c:a9:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:DC:14:4F:5C:E7:9A:DF:86:B0:65:03:B4:1F:58:0D:DB:21:09
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a3:d6:12:af:00:60:60:9b:a7:6a:6b:fd:ad:4f:42:d1:91:
78:83:8f:94:7b:6d:f6:d5:34:02:3a:c7:60:3e:65:fc:d5:e3:
8b:0a:d6:bc:a6:5d:09:6c:71:65:68:8b:66:d0:f0:c6:7e:39:
1e:0a:e4:b7:37:da:cc:c0:19:19:31:d1:b9:c7:a6:c4:d1:6f:
16:61:9d:b8:68:15:e0:d1:87:6c:87:21:eb:1b:17:d5:24:bc:
7e:34:80:24:6b:c9:28:6b:c8:df:cd:96:17:7d:81:67:6a:56:
4f:d1:f8:14:d0:71:bd:e5:4f:40:84:a9:d3:1f:97:19:81:f7:
ac:23:cc:1b:13:b5:b1:c5:18:4e:df:6f:df:ea:a3:5c:ef:25:
1c:3b:58:fc:87:05:ab:5e:88:aa:5e:36:dc:40:2b:92:e2:b3:
85:4b:ee:dc:5d:6d:75:7a:dd:bf:03:73:de:eb:cc:85:08:bb:
49:9e:cb:e2:39:5f:5c:00:b6:6e:0c:55:51:76:52:6b:44:e5:
e5:d0:e4:48:1b:c3:95:67:40:fd:2b:eb:b4:a7:58:a9:dd:b2:
04:4a:0c:5e:c1:02:96:bd:7a:a1:66:69:5e:b2:05:9d:d7:27:
0e:20:1a:cf:9f:70:24:69:b7:bd:07:34:c1:39:9c:ce:ba:e9:
1f:8f:c7:4d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXqQy8VqglvREjb3O8yQl01Dek0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTEwMzEyMTUwMTFaFw0yNjEwMzAyMTU1MTFaMDMxMTAvBgNV
BAMTKDM1OTlEQzE0NEY1Q0U3OUFERjg2QjA2NTAzQjQxRjU4MEREQjIxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2qgW60RCRgQYzuINlcmOWepe3
FslYhkjlzbLDLyc84DHniJ3N4uSUKEFbvjYWwVCZ8DJdl9xQtz5zKz9AkQgHBnCX
sotsHPryu5swpBXQtz3Vz0yXN9SU39OXaRhEyqwe6EjB/VN3qFm3tOF0+hwB0SrQ
Vq1n/VbzF8gLVCuqytUI1GL2/KXCRluvwiO5FV/0R2pfR2mNCUS+xHh7oVVHCvx2
NJYo7fpa4KQD4934Hdl1/XF8yDSMqonjbppZDW/V5wDJVaOqSmA2wYhG/3UwZB4G
jd7rHruJKQbAQWGF/dR0YNNZupIh48BLjJHnDq4rkoxLOYx7tbFEeLtMqY2nAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUNZncFE9c55rfhrBlA7QfWA3bIQkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1NzAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALsvp
MA0GCSqGSIb3DQEBCwUAA4IBAQAao9YSrwBgYJunamv9rU9C0ZF4g4+Ue2321TQC
OsdgPmX81eOLCta8pl0JbHFlaItm0PDGfjkeCuS3N9rMwBkZMdG5x6bE0W8WYZ24
aBXg0YdshyHrGxfVJLx+NIAka8koa8jfzZYXfYFnalZP0fgU0HG95U9AhKnTH5cZ
gfesI8wbE7WxxRhO32/f6qNc7yUcO1j8hwWrXoiqXjbcQCuS4rOFS+7cXW11et2/
A3Pe68yFCLtJnsviOV9cALZuDFVRdlJrROXl0ORIG8OVZ0D9K+u0p1ip3bIESgxe
wQKWvXqhZmlesgWd1ycOIBrPn3Akabe9BzTBOZzOuukfj8dN
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:43 2025 by rpki-client