Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: 7nDHaix5+pVhIAbB6ekdcdOibaCq4TqdqfhTHFA7a4Y=
Subject key identifier: CE:8E:CF:3B:A0:3C:24:B6:79:E6:44:9D:A8:74:B0:FF:96:1D:8B:D8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3426C1055CA48B6491747BAB0D1D8730E320A543
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Tue 02 Jun 2026 12:54:37 +0000
ROA not before: Tue 02 Jun 2026 12:49:37 +0000
ROA not after: Tue 01 Jun 2027 12:54:37 +0000
asID: 215294
IP address blocks: 51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:26:c1:05:5c:a4:8b:64:91:74:7b:ab:0d:1d:87:30:e3:20:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 2 12:49:37 2026 GMT
Not After : Jun 1 12:54:37 2027 GMT
Subject: CN=CE8ECF3BA03C24B679E6449DA874B0FF961D8BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:32:e3:ec:6d:8f:1d:2b:ff:54:95:fa:86:
91:d8:13:9d:02:73:ab:04:2b:98:50:c8:36:f4:7b:
10:90:be:62:2a:04:72:9c:1a:ac:e1:c0:2a:06:17:
ac:72:28:04:25:bc:2a:10:0a:30:c4:3b:31:45:27:
e4:15:18:e2:42:dc:e7:52:ca:a3:0c:ee:56:a8:fc:
5c:13:d7:9e:e8:4e:6b:42:ce:a9:8c:f7:f3:ef:04:
d6:1b:a3:77:58:b4:a1:05:3d:cb:e9:b3:3c:45:d4:
ca:de:4b:19:60:65:3b:08:9a:e5:76:14:ab:88:bd:
d6:71:13:3d:81:91:a5:18:87:e2:9d:e4:29:9d:11:
d6:4c:8a:35:63:e4:b1:49:db:df:56:21:02:95:c4:
1c:fd:3d:0e:4b:4c:76:9c:2d:c3:16:27:d7:45:6b:
68:9b:aa:ba:50:4f:4d:62:41:54:60:9f:e2:3e:a2:
3b:58:a8:ca:5e:0e:14:75:29:31:89:fd:f2:8e:dd:
cd:66:14:9e:d0:a6:6b:16:01:f4:c1:83:b7:27:c0:
2e:2c:8f:b0:f9:45:31:59:06:81:f1:07:54:b2:b9:
8f:3b:25:18:22:d3:6a:28:0e:6c:36:16:7e:35:28:
c0:3c:c9:40:2d:fd:df:22:71:f3:17:bc:d2:ad:d9:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:CF:3B:A0:3C:24:B6:79:E6:44:9D:A8:74:B0:FF:96:1D:8B:D8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/24
51.194.39.0/24
51.194.67.0/24
51.194.71.0/24
51.194.77.0/24
51.194.81.0/24
51.194.96.0/23
51.194.142.0/24
51.194.195.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.242.0/24
51.194.246.0/24
51.194.248.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d0:e1:47:64:fe:23:a0:94:8c:a2:bf:f7:16:6d:73:f5:31:
bd:0e:fc:91:4b:0d:66:bb:0d:8d:73:eb:84:55:eb:83:08:eb:
6a:08:01:bf:cd:b7:0d:25:ab:0c:8e:69:89:b8:4e:ed:a4:11:
5b:34:65:5d:9a:fa:38:fd:77:e8:09:75:0b:ea:d2:f2:55:4e:
c2:13:30:7f:95:75:e6:09:b1:31:e7:2e:3e:0c:68:6b:a7:19:
00:a7:94:d0:79:6e:74:4d:85:84:73:0a:f0:16:eb:af:0f:e1:
3a:a8:c8:29:3a:a2:89:17:a4:eb:62:30:89:18:ac:fa:c9:73:
09:27:86:4d:96:9b:b9:c5:37:ea:ca:2e:c0:3d:6a:c7:6a:52:
82:79:a6:6f:3f:e6:d0:bf:95:6f:ea:3e:f1:64:41:f7:6c:de:
70:44:c1:59:e6:04:e7:ff:01:8e:7d:11:b9:7f:d7:2e:fc:65:
87:61:67:f1:26:cf:61:e3:8e:c3:90:a1:38:47:70:3e:bc:c6:
96:d1:3d:fb:29:fa:0d:d2:40:6b:cf:83:63:9b:42:97:d8:55:
94:6d:77:8a:c2:01:42:9d:cb:f7:57:ef:1b:81:ff:c1:a6:a6:
75:04:c5:18:da:e0:2e:f3:b9:7b:2a:63:f8:11:4c:a7:95:84:
82:0f:25:a9
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUNCbBBVyki2SRdHurDR2HMOMgpUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MDIxMjQ5MzdaFw0yNzA2MDExMjU0MzdaMDMxMTAvBgNV
BAMTKENFOEVDRjNCQTAzQzI0QjY3OUU2NDQ5REE4NzRCMEZGOTYxRDhCRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVTLj7G2PHSv/VJX6hpHYE50C
c6sEK5hQyDb0exCQvmIqBHKcGqzhwCoGF6xyKAQlvCoQCjDEOzFFJ+QVGOJC3OdS
yqMM7lao/FwT157oTmtCzqmM9/PvBNYbo3dYtKEFPcvpszxF1MreSxlgZTsImuV2
FKuIvdZxEz2BkaUYh+Kd5CmdEdZMijVj5LFJ299WIQKVxBz9PQ5LTHacLcMWJ9dF
a2ibqrpQT01iQVRgn+I+ojtYqMpeDhR1KTGJ/fKO3c1mFJ7QpmsWAfTBg7cnwC4s
j7D5RTFZBoHxB1SyuY87JRgi02ooDmw2Fn41KMA8yUAt/d8icfMXvNKt2QnhAgMB
AAGjggKxMIICrTAdBgNVHQ4EFgQUzo7PO6A8JLZ55kSdqHSw/5Ydi9gwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagD
BAAzkpgwDAMEAzOSuAMEADOSugMEADOS7TAMAwQAM5L3AwQAM5L4AwQAM8IgAwQA
M8InAwQAM8JDAwQAM8JHAwQAM8JNAwQAM8JRAwQBM8JgAwQAM8KOAwQAM8LDAwQA
M8LLAwQAM8LNAwQAM8LTAwQAM8LbAwQAM8LhAwQAM8LjMAwDBAAzwucDBAAzwugD
BAAzwuoDBAAzwvIDBAAzwvYDBAAzwvgwDQYJKoZIhvcNAQELBQADggEBAITQ4Udk
/iOglIyiv/cWbXP1Mb0O/JFLDWa7DY1z64RV64MI62oIAb/Ntw0lqwyOaYm4Tu2k
EVs0ZV2a+jj9d+gJdQvq0vJVTsITMH+VdeYJsTHnLj4MaGunGQCnlNB5bnRNhYRz
CvAW668P4TqoyCk6ookXpOtiMIkYrPrJcwknhk2Wm7nFN+rKLsA9asdqUoJ5pm8/
5tC/lW/qPvFkQfds3nBEwVnmBOf/AY59Ebl/1y78ZYdhZ/Emz2HjjsOQoThHcD68
xpbRPfsp+g3SQGvPg2ObQpfYVZRtd4rCAUKdy/dX7xuB/8GmpnUExRja4C7zuXsq
Y/gRTKeVhIIPJak=
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:22 2026 by rpki-client