Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: 7490reNZ/epSWSxQEAg1sKmMGo/E2Orus/Lchj+maZM=
Subject key identifier: F4:8A:FD:D3:7A:6D:C9:4F:E1:F7:31:99:79:32:72:B2:18:FD:A8:2A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0CEDDA99A8176F3A63555477049CE111C231868E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Thu 09 Jul 2026 06:17:40 +0000
ROA not before: Thu 09 Jul 2026 06:12:40 +0000
ROA not after: Thu 08 Jul 2027 06:17:40 +0000
asID: 215294
IP address blocks: 51.146.7.0/24 maxlen: 24
51.146.12.0/24 maxlen: 24
51.146.17.0/24 maxlen: 24
51.146.68.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.78.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.201.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.20.0/24 maxlen: 24
51.241.84.0/24 maxlen: 24
51.241.215.0/24 maxlen: 24
78.105.113.0/24 maxlen: 24
78.105.115.0/24 maxlen: 24
78.105.239.0/24 maxlen: 24
188.221.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ed:da:99:a8:17:6f:3a:63:55:54:77:04:9c:e1:11:c2:31:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 9 06:12:40 2026 GMT
Not After : Jul 8 06:17:40 2027 GMT
Subject: CN=F48AFDD37A6DC94FE1F73199793272B218FDA82A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:c0:45:4c:0b:e9:1d:b5:02:a1:8b:92:ba:
d8:55:c7:bd:ba:a2:6d:6f:3f:bd:eb:1b:38:84:a3:
03:89:04:14:c9:7f:2c:4b:b0:d7:48:28:73:21:b8:
99:c3:80:d0:4a:f9:30:55:e9:f9:0b:74:e6:10:30:
b2:e0:ce:2f:5e:8c:de:91:f1:3b:ef:c8:7f:df:41:
7f:f5:73:27:b5:b3:d4:8d:06:0c:83:d5:3d:04:9f:
bd:ca:4e:83:25:21:a2:5c:ac:5f:c2:8c:90:ee:ea:
e1:d7:b6:ae:5f:bd:df:5d:e1:0d:2d:1d:e5:03:8c:
53:13:39:b5:72:45:1a:95:dc:bd:61:93:ef:4a:9c:
52:a5:26:f1:e6:d3:be:e8:87:2b:ad:44:a9:ba:34:
99:17:d8:c9:a0:77:6f:99:5c:4e:e0:99:8b:64:e6:
52:29:97:26:9f:0a:d9:bd:c9:77:ec:5d:c2:97:d4:
4c:6c:21:22:88:69:52:10:4d:ff:76:40:ba:da:7a:
6c:c0:da:2c:be:15:ac:b5:80:a8:4f:6b:a8:68:1a:
5a:fd:cb:b3:81:ed:6b:e6:17:a1:6c:a0:da:b6:ad:
04:39:e9:71:37:cf:9e:30:e3:47:35:95:65:90:1d:
2e:a2:8c:ae:d3:70:05:10:77:54:b8:6a:ec:18:30:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:FD:D3:7A:6D:C9:4F:E1:F7:31:99:79:32:72:B2:18:FD:A8:2A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.7.0/24
51.146.12.0/24
51.146.17.0/24
51.146.68.0/24
51.146.83.0/24
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/24
51.194.39.0/24
51.194.67.0/24
51.194.71.0/24
51.194.77.0-51.194.78.255
51.194.81.0/24
51.194.96.0/23
51.194.142.0/24
51.194.195.0/24
51.194.201.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.242.0/24
51.194.246.0/24
51.194.248.0/24
51.241.2.0/24
51.241.20.0/24
51.241.84.0/24
51.241.215.0/24
78.105.113.0/24
78.105.115.0/24
78.105.239.0/24
188.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:03:33:f2:a5:4e:0d:1b:4a:f3:6c:03:91:83:26:39:c5:d3:
df:f0:86:a3:28:0b:93:fb:da:b8:c6:9a:55:d7:ec:ed:7d:50:
7e:32:45:b0:81:69:6f:69:3e:48:2f:72:91:96:60:30:f5:ff:
7f:59:2a:6f:60:92:9d:8e:d9:49:a8:86:ca:26:75:36:11:1b:
c3:3e:97:b3:8f:f2:3c:71:7f:f3:a8:3b:ca:f5:3e:29:cd:78:
b3:6b:71:8a:77:3b:26:b1:f7:65:15:cf:8c:f8:8d:0d:35:fd:
3f:a9:ed:87:e8:04:9e:08:59:33:0b:82:4f:ba:8b:19:a6:98:
4a:46:53:aa:12:98:58:c0:f5:b0:97:b8:f2:12:b2:97:81:2d:
46:79:b6:d6:6d:2f:3e:12:ae:32:5a:92:68:41:8e:ca:80:f4:
05:24:09:24:81:e0:a8:a8:e5:c8:ba:36:cd:01:8a:e7:a3:6a:
c8:b8:05:49:9f:2d:a3:92:3b:c1:e3:d3:5e:5c:26:7f:51:ba:
96:a0:5d:5d:cf:c6:77:43:07:07:86:6e:6f:ef:5d:88:7b:bd:
49:7d:73:9c:92:10:73:5c:79:f8:21:99:b7:b7:17:6f:92:71:
98:4d:31:50:d3:2d:8e:8d:f9:56:f1:08:be:93:f4:09:02:57:
9e:2f:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:23 2026 by rpki-client