Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215059.roa
File: AS215059.roa (raw, json)
Hash identifier: up8I/h0L1zakATWRFvTzNhhQVZfi+Mf82/amQr+rrCg=
Subject key identifier: 6C:0F:3F:6E:23:E5:F0:73:3F:84:CD:83:AF:48:3D:C1:F8:2B:11:28
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4303C5E88E7752F46C5B106B034D823A63715435
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215059.roa
Signing time: Thu 27 Aug 2026 10:23:10 +0000
ROA not before: Thu 27 Aug 2026 10:18:10 +0000
ROA not after: Thu 26 Aug 2027 10:23:10 +0000
asID: 215059
IP address blocks: 78.105.193.0/24 maxlen: 24
78.105.208.0/24 maxlen: 24
78.105.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:03:c5:e8:8e:77:52:f4:6c:5b:10:6b:03:4d:82:3a:63:71:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 27 10:18:10 2026 GMT
Not After : Aug 26 10:23:10 2027 GMT
Subject: CN=6C0F3F6E23E5F0733F84CD83AF483DC1F82B1128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:b9:43:8e:d3:03:d6:35:5b:2f:db:b3:08:
5b:39:58:46:82:3c:bf:d0:bb:9c:62:82:36:ef:a9:
1a:5e:3e:9c:67:3d:f5:95:6a:4b:a0:50:c3:11:38:
0e:5c:23:f1:ee:22:f2:3e:25:76:c4:47:2c:c3:d3:
6b:8d:27:da:cb:04:2b:78:12:92:89:66:4f:f2:fd:
1b:4d:d8:1d:63:ff:17:a4:9c:61:d9:a1:e8:5b:97:
2e:fd:a0:8a:bb:de:d6:e4:aa:d2:13:5e:f4:94:93:
9a:ca:e5:2a:ce:5d:2e:e5:a1:99:a4:5d:68:74:20:
0d:52:23:f3:b1:e7:7b:66:8a:bf:bb:1b:8b:5a:e2:
36:c9:9f:78:21:18:35:e5:35:3d:c0:af:0a:45:3b:
af:f7:1c:f5:3b:aa:ce:b8:87:d5:75:c5:0a:ae:05:
3f:d8:83:bc:25:e7:39:3b:ee:0d:a2:13:34:1e:dc:
63:d0:5e:1b:78:c2:50:d9:61:b1:ec:6b:b6:d1:19:
48:d0:9f:df:25:1e:d7:bd:52:2c:fe:36:5d:4e:f4:
13:82:b2:d6:9a:5e:f3:48:94:46:cb:d8:28:13:79:
1a:22:fc:80:6f:a2:7c:b6:93:59:f2:6d:dd:71:6d:
98:29:0e:8f:b2:b0:84:66:f8:c4:b2:71:87:b4:b0:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:3F:6E:23:E5:F0:73:3F:84:CD:83:AF:48:3D:C1:F8:2B:11:28
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.193.0/24
78.105.208.0/24
78.105.210.0/24
Signature Algorithm: sha256WithRSAEncryption
39:85:a9:52:b3:55:4c:6f:52:f4:02:84:37:d5:3f:6d:00:f2:
45:dd:e9:9f:9b:c6:67:ec:52:81:16:e6:a8:5f:28:c1:1c:68:
64:8c:bc:31:c7:15:84:d1:72:3a:ea:82:99:56:c1:54:83:4e:
cd:22:6f:4e:eb:8a:72:b0:dc:8e:78:5c:5e:1a:1c:fe:17:0d:
25:69:3f:83:80:49:b3:d4:6e:c5:6b:3f:f1:94:37:a6:12:16:
b8:df:75:a7:4c:12:a8:8a:c8:09:8e:df:da:b7:3f:c6:e7:8b:
55:30:00:81:90:ff:6d:4d:3b:6a:8f:e1:76:35:ca:ab:72:00:
96:98:1d:dc:31:ce:67:5c:de:26:06:49:f0:2b:eb:3c:c7:77:
92:3b:cd:49:f0:46:ae:8e:19:ec:d9:75:8b:d6:e9:e8:dd:c7:
6b:e3:82:76:ed:1e:0a:eb:43:f5:13:1e:30:b9:07:03:28:bb:
b8:63:76:91:d7:fb:e8:d9:08:69:ed:99:1d:6c:87:f3:95:0f:
95:3b:84:10:08:35:d0:66:46:14:c5:cb:d6:c4:d9:12:96:f4:
73:71:14:a8:d0:2f:89:36:da:cc:df:9b:59:e3:56:cc:18:57:
50:15:52:62:cd:40:df:5a:bb:06:37:b0:8f:6b:d4:fa:2b:dc:
ef:fe:ba:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUQwPF6I53UvRsWxBrA02COmNxVDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjcxMDE4MTBaFw0yNzA4MjYxMDIzMTBaMDMxMTAvBgNV
BAMTKDZDMEYzRjZFMjNFNUYwNzMzRjg0Q0Q4M0FGNDgzREMxRjgyQjExMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+k7lDjtMD1jVbL9uzCFs5WEaC
PL/Qu5xigjbvqRpePpxnPfWVakugUMMROA5cI/HuIvI+JXbERyzD02uNJ9rLBCt4
EpKJZk/y/RtN2B1j/xeknGHZoehbly79oIq73tbkqtITXvSUk5rK5SrOXS7loZmk
XWh0IA1SI/Ox53tmir+7G4ta4jbJn3ghGDXlNT3ArwpFO6/3HPU7qs64h9V1xQqu
BT/Yg7wl5zk77g2iEzQe3GPQXht4wlDZYbHsa7bRGUjQn98lHte9Uiz+Nl1O9BOC
staaXvNIlEbL2CgTeRoi/IBvony2k1nybd1xbZgpDo+ysIRm+MSycYe0sCfrAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUbA8/biPl8HM/hM2Dr0g9wfgrESgwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1MDU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATmnB
AwQATmnQAwQATmnSMA0GCSqGSIb3DQEBCwUAA4IBAQA5halSs1VMb1L0AoQ31T9t
APJF3emfm8Zn7FKBFuaoXyjBHGhkjLwxxxWE0XI66oKZVsFUg07NIm9O64pysNyO
eFxeGhz+Fw0laT+DgEmz1G7Faz/xlDemEha433WnTBKoisgJjt/atz/G54tVMACB
kP9tTTtqj+F2NcqrcgCWmB3cMc5nXN4mBknwK+s8x3eSO81J8Eaujhns2XWL1uno
3cdr44J27R4K60P1Ex4wuQcDKLu4Y3aR1/vo2Qhp7ZkdbIfzlQ+VO4QQCDXQZkYU
xcvWxNkSlvRzcRSo0C+JNtrM35tZ41bMGFdQFVJizUDfWrsGN7CPa9T6K9zv/rpr
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:48 2026 by rpki-client