Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: Od6t481SSXCfKstSpFhlh/26cSt+jFl1/J/X/UXHLpI=
Subject key identifier: 9F:02:BF:67:EB:1C:45:AA:9B:FD:C9:FC:60:DA:76:93:50:BC:42:C1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 21EEB929B1DC2B9FD837091FE1B5B3C7A7225DF3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Thu 01 Oct 2026 07:36:04 +0000
ROA not before: Thu 01 Oct 2026 07:31:04 +0000
ROA not after: Thu 30 Sep 2027 07:36:04 +0000
asID: 215294
IP address blocks: 51.146.0.0/22 maxlen: 24
51.146.7.0/24 maxlen: 24
51.146.10.0/23 maxlen: 24
51.146.12.0/24 maxlen: 24
51.146.17.0/24 maxlen: 24
51.146.40.0/22 maxlen: 24
51.146.68.0/24 maxlen: 24
51.146.71.0/24 maxlen: 24
51.146.72.0/24 maxlen: 24
51.146.76.0/23 maxlen: 24
51.146.79.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.95.0/24 maxlen: 24
51.146.100.0/24 maxlen: 24
51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.53.0/24 maxlen: 24
51.194.66.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.78.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.172.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.201.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.247.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
51.194.252.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.20.0/24 maxlen: 24
51.241.84.0/24 maxlen: 24
51.241.118.0/24 maxlen: 24
51.241.119.0/24 maxlen: 24
51.241.144.0/24 maxlen: 24
51.241.215.0/24 maxlen: 24
78.105.101.0/24 maxlen: 24
78.105.113.0/24 maxlen: 24
78.105.115.0/24 maxlen: 24
78.105.150.0/24 maxlen: 24
78.105.157.0/24 maxlen: 24
78.105.192.0/24 maxlen: 24
78.105.239.0/24 maxlen: 24
188.220.30.0/24 maxlen: 24
188.220.77.0/24 maxlen: 24
188.220.136.0/24 maxlen: 24
188.220.138.0/24 maxlen: 24
188.220.219.0/24 maxlen: 24
188.221.72.0/24 maxlen: 24
188.221.92.0/22 maxlen: 24
188.221.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:b9:29:b1:dc:2b:9f:d8:37:09:1f:e1:b5:b3:c7:a7:22:5d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 1 07:31:04 2026 GMT
Not After : Sep 30 07:36:04 2027 GMT
Subject: CN=9F02BF67EB1C45AA9BFDC9FC60DA769350BC42C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:b2:76:14:1b:b3:57:c7:c4:c6:ca:97:79:
2a:65:f6:cc:a2:2d:39:90:eb:8a:59:22:fb:e3:47:
67:95:60:31:eb:5f:c6:9d:2e:9f:e1:b1:0e:c5:a2:
e6:11:70:12:3f:31:60:10:e9:ba:9f:cc:88:a5:d5:
7d:71:bc:b0:d8:10:9d:ea:37:f5:ba:47:e9:f7:1b:
7f:10:4f:ca:c6:22:1a:71:3e:c7:7f:36:02:33:4d:
b4:1b:be:a5:29:17:23:22:35:cb:59:43:a1:6a:85:
1f:0d:8c:d5:df:24:50:24:f7:8d:c1:6d:6c:12:47:
97:4b:1a:dc:3a:87:8f:65:3b:db:5d:bc:50:7b:58:
18:87:43:d0:94:23:59:a8:12:bb:25:bd:88:29:d8:
65:8d:bb:45:df:de:54:6c:45:11:51:ae:68:9e:6b:
ef:9d:a8:94:64:7f:e2:e1:57:af:9e:88:fc:2c:d9:
31:43:ba:0f:cf:03:40:0e:42:78:a1:43:ca:f5:65:
49:59:2d:09:b1:7c:56:71:c7:a7:05:33:17:ba:70:
e6:10:fd:a3:c1:6c:33:c4:77:a7:ce:49:20:51:56:
08:40:6d:d5:06:15:da:77:52:eb:80:2a:d0:e9:98:
b8:38:bc:3f:dc:4a:54:ed:36:f8:0e:b6:86:22:49:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:BF:67:EB:1C:45:AA:9B:FD:C9:FC:60:DA:76:93:50:BC:42:C1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/22
51.146.7.0/24
51.146.10.0-51.146.12.255
51.146.17.0/24
51.146.40.0/22
51.146.68.0/24
51.146.71.0-51.146.72.255
51.146.76.0/23
51.146.79.0/24
51.146.83.0/24
51.146.95.0/24
51.146.100.0/24
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/23
51.194.39.0/24
51.194.53.0/24
51.194.66.0/23
51.194.71.0/24
51.194.77.0-51.194.78.255
51.194.81.0/24
51.194.96.0/23
51.194.142.0/24
51.194.172.0/24
51.194.195.0/24
51.194.201.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.242.0/24
51.194.246.0-51.194.248.255
51.194.252.0/24
51.241.2.0/24
51.241.20.0/24
51.241.84.0/24
51.241.118.0/23
51.241.144.0/24
51.241.215.0/24
78.105.101.0/24
78.105.113.0/24
78.105.115.0/24
78.105.150.0/24
78.105.157.0/24
78.105.192.0/24
78.105.239.0/24
188.220.30.0/24
188.220.77.0/24
188.220.136.0/24
188.220.138.0/24
188.220.219.0/24
188.221.72.0/24
188.221.92.0/22
188.221.156.0/24
Signature Algorithm: sha256WithRSAEncryption
43:73:c8:02:46:1d:f0:a4:62:e5:00:05:26:33:ee:ef:f8:06:
89:1d:bb:a4:62:b0:c6:ca:00:71:5d:95:25:a2:27:9e:48:91:
f0:c7:a5:a0:12:9e:0c:5d:0e:f9:44:af:ef:e6:95:36:dd:ff:
83:cd:12:91:a5:0f:1a:46:e5:05:08:8a:3f:bc:f4:4a:c8:30:
55:a7:65:be:0c:36:39:46:e4:3a:20:b6:7c:7a:17:c4:5e:ac:
1d:40:ff:40:b0:22:bf:ef:cb:30:35:d8:3d:a6:d6:e6:17:4b:
f5:72:2c:dc:c3:07:a4:3e:6e:c8:ff:39:95:74:54:8f:d4:10:
1c:85:85:9b:b1:e9:46:e0:23:c1:38:a6:5b:f0:87:ec:89:2a:
76:bd:05:a7:01:94:75:c6:11:29:9a:55:4c:b6:dd:06:28:8b:
56:b1:18:88:55:45:4b:d2:dd:c9:82:fb:40:d1:34:3a:4f:f9:
3b:66:39:de:4e:5b:29:80:38:ed:c1:b6:19:5b:b1:8f:57:2e:
64:cb:91:c3:d5:8c:d1:cf:bb:ac:3c:47:10:46:36:f4:71:51:
e8:bf:09:7c:1c:94:0d:84:0a:b0:a8:4f:74:f7:7a:e0:21:ef:
13:3d:5d:43:cb:3d:64:d9:c2:55:3e:a6:03:8c:62:3b:ad:71:
33:98:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:43:19 2026 by rpki-client