Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: RdL8DjWCTmbU3J0jCQ2+Unm09NtXZFJzSWyp77k8qD4=
Subject key identifier: 37:D3:55:7F:93:DC:94:A1:42:1F:98:8B:24:68:D2:ED:87:24:81:1E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 762859955A67B354CBD89DCDCD1BA9C6C0B1B3A3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
Signing time: Sun 18 Oct 2026 15:44:29 +0000
ROA not before: Sun 18 Oct 2026 15:39:29 +0000
ROA not after: Sun 17 Oct 2027 15:44:29 +0000
asID: 215607
IP address blocks: 94.118.68.0/24 maxlen: 24
94.118.114.0/24 maxlen: 24
94.118.164.0/24 maxlen: 24
94.118.173.0/24 maxlen: 24
94.118.190.0/24 maxlen: 24
94.118.192.0/24 maxlen: 24
94.118.223.0/24 maxlen: 24
94.118.244.0/24 maxlen: 24
188.221.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:28:59:95:5a:67:b3:54:cb:d8:9d:cd:cd:1b:a9:c6:c0:b1:b3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 18 15:39:29 2026 GMT
Not After : Oct 17 15:44:29 2027 GMT
Subject: CN=37D3557F93DC94A1421F988B2468D2ED8724811E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:a1:a0:c4:4e:28:1e:c8:d8:b4:be:a2:fd:
32:98:ee:1d:3a:43:3e:59:d4:72:b8:6e:83:9d:7a:
03:01:68:da:0f:02:7e:86:8c:c8:a4:a3:ca:04:45:
c7:2d:5e:20:b2:20:73:fb:a8:42:94:69:f7:9a:0f:
fa:55:be:ed:b8:c4:bd:b1:63:60:28:c8:a7:c0:18:
b7:08:a4:83:95:0d:d4:04:f7:01:5c:11:6d:c4:6f:
cc:f5:4d:25:78:b4:65:cc:04:ed:e0:32:a0:a7:77:
a1:54:51:ef:95:a1:53:b7:6f:63:c6:2c:83:4f:04:
8c:c0:42:4b:52:ff:c8:0b:a7:cb:25:dd:1c:b7:9a:
dd:6c:f7:e3:b5:b5:94:61:a9:cd:e2:f5:a8:a0:d4:
d8:2b:0b:99:63:17:03:08:9b:9a:40:a2:b6:35:ca:
51:68:d5:27:c9:1e:7a:4c:99:91:b3:b9:6a:77:d0:
29:7e:ff:ac:29:8b:69:cb:d2:91:0b:98:2d:4f:f4:
b3:5a:ca:38:0a:91:70:7d:8b:ce:96:fc:44:4c:64:
29:9a:dd:28:39:c6:63:fd:78:85:74:39:cd:fd:c6:
6e:c8:f4:a9:e4:9d:b9:8c:08:58:36:ae:3a:99:75:
be:c2:58:46:f1:89:1d:20:cc:63:53:34:f5:75:7a:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:55:7F:93:DC:94:A1:42:1F:98:8B:24:68:D2:ED:87:24:81:1E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.68.0/24
94.118.114.0/24
94.118.164.0/24
94.118.173.0/24
94.118.190.0/24
94.118.192.0/24
94.118.223.0/24
94.118.244.0/24
188.221.119.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6b:be:1b:2b:bb:41:5a:a2:cf:89:be:1b:f3:0f:2d:a3:3a:
9b:3f:cb:37:74:73:69:a4:ea:ff:46:4b:2b:93:76:8e:b6:d5:
4a:d3:e7:57:c5:ca:09:9c:eb:62:20:71:7c:52:e2:ec:c3:4f:
7d:10:33:2b:bc:d8:9d:8a:4f:56:7e:61:01:78:d9:14:f6:99:
fb:25:8d:bf:02:15:bb:21:9d:39:f5:fe:64:ab:75:74:c8:d3:
31:a9:b5:db:09:f8:53:99:47:07:e7:c4:a0:ae:9d:02:4e:3d:
cf:2e:49:c8:c3:af:3e:47:36:42:89:0a:5b:31:cd:0b:8f:7a:
39:f0:84:66:f8:32:df:10:b9:63:a6:07:a9:d9:1a:32:82:d7:
95:e6:d3:bc:2c:12:52:f7:16:1b:7e:a3:4a:e8:3b:56:2b:dc:
c9:d0:1f:2b:1a:17:34:b8:21:4c:45:fd:55:06:67:6c:7e:b6:
5f:b2:c3:31:5a:e8:7a:34:29:89:93:66:2c:0a:47:e6:98:ac:
94:29:a0:8a:15:2b:5b:1c:00:ab:d0:4e:b2:c1:53:cf:45:d7:
3e:0f:99:7a:83:1f:e0:57:a0:30:04:e7:d8:06:1f:54:c7:0c:
f2:fc:10:1e:cc:e2:b9:4d:74:ed:52:85:4d:5d:2a:b6:a9:83:
24:c6:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:21 2026 by rpki-client