Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: sms0yrbXZk2QQOkhf/Ps131N/WnP6QiK8vQRF/83jSY=
Subject key identifier: 9B:33:59:A8:F4:74:A1:0F:41:1C:1D:02:F5:62:25:9B:F3:3D:7E:5A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 67CD2E006EE0F0A1E87C7A6C93C4CEB665FA2B20
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Fri 14 Aug 2026 09:20:15 +0000
ROA not before: Fri 14 Aug 2026 09:15:15 +0000
ROA not after: Fri 13 Aug 2027 09:20:15 +0000
asID: 215294
IP address blocks: 51.146.0.0/22 maxlen: 24
51.146.7.0/24 maxlen: 24
51.146.10.0/23 maxlen: 24
51.146.12.0/24 maxlen: 24
51.146.17.0/24 maxlen: 24
51.146.40.0/22 maxlen: 24
51.146.68.0/24 maxlen: 24
51.146.71.0/24 maxlen: 24
51.146.72.0/24 maxlen: 24
51.146.76.0/23 maxlen: 24
51.146.79.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.95.0/24 maxlen: 24
51.146.100.0/24 maxlen: 24
51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.53.0/24 maxlen: 24
51.194.66.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.78.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.172.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.201.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
51.194.252.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.20.0/24 maxlen: 24
51.241.84.0/24 maxlen: 24
51.241.144.0/24 maxlen: 24
51.241.215.0/24 maxlen: 24
78.105.101.0/24 maxlen: 24
78.105.113.0/24 maxlen: 24
78.105.115.0/24 maxlen: 24
78.105.192.0/24 maxlen: 24
78.105.239.0/24 maxlen: 24
188.220.30.0/24 maxlen: 24
188.220.77.0/24 maxlen: 24
188.220.138.0/24 maxlen: 24
188.221.92.0/22 maxlen: 24
188.221.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:cd:2e:00:6e:e0:f0:a1:e8:7c:7a:6c:93:c4:ce:b6:65:fa:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 14 09:15:15 2026 GMT
Not After : Aug 13 09:20:15 2027 GMT
Subject: CN=9B3359A8F474A10F411C1D02F562259BF33D7E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:b5:32:49:d4:12:3e:e8:d0:05:fc:68:fa:
25:34:9b:42:d4:69:5f:b9:23:90:1f:96:23:cc:fe:
95:b7:11:de:13:08:0e:d5:d9:23:7a:94:77:df:72:
1b:50:ee:f6:7a:8e:b6:ae:71:dc:e5:6d:5e:c6:8a:
3f:58:6c:7a:02:da:5a:bf:b8:13:b8:4c:db:4a:8f:
13:cb:85:19:c0:a1:a9:eb:f9:47:39:ae:5c:70:49:
35:2b:b1:a8:cd:11:18:2d:de:0b:17:9d:7b:ed:d2:
79:0e:71:e6:c2:a8:67:3f:61:67:24:4a:46:b2:7c:
49:7c:39:4b:c1:b7:08:17:00:eb:46:f2:58:81:26:
17:79:75:ed:7e:6d:a7:85:dc:61:45:74:5c:ed:15:
2e:eb:90:3a:46:dd:d2:58:14:4d:90:2e:db:44:49:
6f:92:ff:3e:6f:bb:0c:21:68:c7:12:ce:cf:64:a3:
7c:67:00:9d:65:03:b1:23:9f:ba:86:54:1f:e0:08:
46:52:9b:17:a5:b0:76:1d:2c:b4:54:57:58:2a:c5:
5f:ab:03:e0:5e:a3:4a:8d:12:cb:46:a0:2e:25:da:
d4:45:ba:30:87:67:4e:48:4d:54:28:a8:dc:87:29:
64:82:51:d1:f1:b1:3e:95:83:df:f3:f3:08:13:5b:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:59:A8:F4:74:A1:0F:41:1C:1D:02:F5:62:25:9B:F3:3D:7E:5A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/22
51.146.7.0/24
51.146.10.0-51.146.12.255
51.146.17.0/24
51.146.40.0/22
51.146.68.0/24
51.146.71.0-51.146.72.255
51.146.76.0/23
51.146.79.0/24
51.146.83.0/24
51.146.95.0/24
51.146.100.0/24
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/23
51.194.39.0/24
51.194.53.0/24
51.194.66.0/23
51.194.71.0/24
51.194.77.0-51.194.78.255
51.194.81.0/24
51.194.96.0/23
51.194.142.0/24
51.194.172.0/24
51.194.195.0/24
51.194.201.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.242.0/24
51.194.246.0/24
51.194.248.0/24
51.194.252.0/24
51.241.2.0/24
51.241.20.0/24
51.241.84.0/24
51.241.144.0/24
51.241.215.0/24
78.105.101.0/24
78.105.113.0/24
78.105.115.0/24
78.105.192.0/24
78.105.239.0/24
188.220.30.0/24
188.220.77.0/24
188.220.138.0/24
188.221.92.0/22
188.221.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2a:02:b9:51:1e:ca:63:0a:d5:3b:04:4e:28:c5:84:43:f5:
12:18:3c:b5:36:ea:09:da:10:8e:b2:1d:48:6e:d2:c3:94:7d:
69:b7:1f:cb:9c:0e:32:23:91:80:6d:e4:09:e1:74:be:d0:39:
cc:97:d1:7b:4c:38:6e:91:c1:81:2e:02:42:b7:f6:b5:3d:92:
19:2f:db:30:6f:e4:e0:41:df:bc:7a:f6:ff:c5:ae:fe:3a:05:
0e:f1:cc:48:ef:3d:f0:01:16:92:68:af:a6:a5:a7:23:c3:77:
ab:63:4c:53:b2:dc:ad:4e:40:52:51:fa:52:78:f9:a7:87:3b:
78:6b:8a:82:9d:9f:4c:9a:50:40:5f:e2:f7:4c:e2:76:fd:17:
a4:84:55:3a:91:9d:9f:e1:95:a2:f0:60:7e:8f:83:db:8f:06:
01:75:f2:cb:0e:a0:3a:bd:88:40:90:b2:12:ee:52:1d:eb:82:
ca:ef:1c:a3:1d:46:2c:7e:7f:24:d4:39:42:93:97:19:73:8e:
cc:02:f5:c0:63:43:f7:e0:8a:5f:17:9c:35:b5:16:77:b3:85:
27:19:d4:3f:2b:dd:96:d5:2d:bd:8f:fd:6c:9d:c5:6d:af:9b:
3b:25:6b:43:31:8b:a8:a8:36:33:e0:7d:f0:71:ba:38:e7:d4:
3e:bb:97:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:11 2026 by rpki-client