Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: W5ZQ9G56h2GksXVNMgp2Ei8//uQSIo5nnrARMt235hU=
Subject key identifier: F4:70:82:70:CF:97:70:C2:6F:71:E6:2D:DF:62:53:F5:30:D7:83:B2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0A2170A9D3A13D503A46C5ECD531E651C03ED73A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215728.roa
Signing time: Sun 11 Oct 2026 13:06:39 +0000
ROA not before: Sun 11 Oct 2026 13:01:39 +0000
ROA not after: Sun 10 Oct 2027 13:06:39 +0000
asID: 215728
IP address blocks: 51.194.173.0/24 maxlen: 24
51.194.241.0/24 maxlen: 24
94.118.26.0/24 maxlen: 24
94.118.96.0/24 maxlen: 24
188.220.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:21:70:a9:d3:a1:3d:50:3a:46:c5:ec:d5:31:e6:51:c0:3e:d7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 11 13:01:39 2026 GMT
Not After : Oct 10 13:06:39 2027 GMT
Subject: CN=F4708270CF9770C26F71E62DDF6253F530D783B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:4e:d0:8f:89:5e:83:53:ae:a8:9c:d7:11:
79:60:18:cc:25:87:a5:29:08:22:42:ae:6c:59:f8:
27:c8:d5:31:9d:be:cf:c8:c4:a1:f9:6b:d9:8a:66:
ab:4a:f7:16:f4:7f:b1:db:b2:ca:6f:93:64:68:c8:
a2:3d:29:83:35:74:a5:91:a2:97:6e:fa:d1:14:f6:
8d:e0:46:0e:d7:de:fb:9c:cf:79:aa:25:85:17:c4:
07:7a:bb:9e:27:74:a3:8a:0c:53:d0:e1:41:63:93:
c3:43:6c:e0:35:7f:76:5a:2c:2a:e6:dc:29:23:c0:
4a:b6:bb:63:e3:2a:2b:14:f8:95:7e:b2:fe:46:93:
e2:c5:34:65:93:ff:08:1d:7a:e5:15:5c:75:e8:ee:
46:15:fa:39:bf:83:22:ea:20:d8:5a:a7:b6:ca:82:
be:a0:ab:66:93:a9:54:8c:ee:f7:f3:87:3a:e0:62:
4f:b3:f1:e8:e4:18:d3:f9:8e:8a:89:26:19:a2:f0:
e1:67:3a:da:fd:69:de:d7:52:19:23:2c:d0:2a:18:
5a:b5:84:11:8b:3b:3b:09:86:5b:29:e2:df:3b:80:
4e:f3:3c:c9:b7:ef:75:de:71:47:6b:2e:d5:7e:f0:
6c:f6:a1:00:45:99:2e:5c:3a:9b:54:30:c3:b8:84:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:82:70:CF:97:70:C2:6F:71:E6:2D:DF:62:53:F5:30:D7:83:B2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.173.0/24
51.194.241.0/24
94.118.26.0/24
94.118.96.0/24
188.220.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:17:d6:ac:07:3c:ce:75:ea:13:b0:3c:3e:9c:78:f9:49:24:
e4:8c:96:ec:d0:d2:c8:79:de:be:46:e2:b3:48:26:34:81:68:
f2:75:b0:7b:82:e0:4c:0f:f4:60:6a:9b:4d:bc:09:d1:e1:99:
b8:07:72:5f:50:7b:86:eb:49:73:c5:fb:f0:69:0a:b3:ff:a7:
fd:35:d1:32:96:0a:73:ad:cd:18:38:f6:3e:59:5e:ab:d4:1e:
ad:5d:b1:fa:d3:b6:e0:c1:41:63:5f:a5:0f:d0:18:bd:66:3b:
65:f8:a0:35:66:c4:f0:22:e4:32:84:43:0d:94:fb:5e:21:2e:
48:70:ed:8c:3f:dd:fb:60:aa:f4:13:87:c5:2e:44:cc:cc:59:
cd:d1:7e:2f:57:5d:32:cc:28:ed:57:80:42:c8:f5:d6:97:7c:
f2:8c:5e:48:9b:7f:50:3c:90:22:74:4c:2f:95:2c:f2:39:92:
08:a3:25:d7:a3:4e:6f:f9:d5:11:e3:57:4b:d6:c6:53:e3:04:
db:73:16:39:3c:f1:a5:80:d9:a0:6e:5b:82:43:f5:06:65:8b:
78:34:91:08:20:5b:3f:3c:05:23:7a:4d:7e:f8:c3:78:6a:bf:
59:f3:c0:f4:8c:bd:ff:60:c1:57:e5:44:66:ab:db:07:d8:cc:
58:79:3e:93
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUCiFwqdOhPVA6RsXs1THmUcA+1zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMTExMzAxMzlaFw0yNzEwMTAxMzA2MzlaMDMxMTAvBgNV
BAMTKEY0NzA4MjcwQ0Y5NzcwQzI2RjcxRTYyRERGNjI1M0Y1MzBENzgzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpU7Qj4leg1OuqJzXEXlgGMwl
h6UpCCJCrmxZ+CfI1TGdvs/IxKH5a9mKZqtK9xb0f7Hbsspvk2RoyKI9KYM1dKWR
opdu+tEU9o3gRg7X3vucz3mqJYUXxAd6u54ndKOKDFPQ4UFjk8NDbOA1f3ZaLCrm
3CkjwEq2u2PjKisU+JV+sv5Gk+LFNGWT/wgdeuUVXHXo7kYV+jm/gyLqINhap7bK
gr6gq2aTqVSM7vfzhzrgYk+z8ejkGNP5joqJJhmi8OFnOtr9ad7XUhkjLNAqGFq1
hBGLOzsJhlsp4t87gE7zPMm373XecUdrLtV+8Gz2oQBFmS5cOptUMMO4hKg1AgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQU9HCCcM+XcMJvceYt32JT9TDXg7IwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1NzI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAM8Kt
AwQAM8LxAwQAXnYaAwQAXnZgAwQAvNxaMA0GCSqGSIb3DQEBCwUAA4IBAQCKF9as
BzzOdeoTsDw+nHj5SSTkjJbs0NLIed6+RuKzSCY0gWjydbB7guBMD/RgaptNvAnR
4Zm4B3JfUHuG60lzxfvwaQqz/6f9NdEylgpzrc0YOPY+WV6r1B6tXbH607bgwUFj
X6UP0Bi9Zjtl+KA1ZsTwIuQyhEMNlPteIS5IcO2MP937YKr0E4fFLkTMzFnN0X4v
V10yzCjtV4BCyPXWl3zyjF5Im39QPJAidEwvlSzyOZIIoyXXo05v+dUR41dL1sZT
4wTbcxY5PPGlgNmgbluCQ/UGZYt4NJEIIFs/PAUjek1++MN4ar9Z88D0jL3/YMFX
5URmq9sH2MxYeT6T
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:32 2026 by rpki-client