Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: w2UScqNvFxUGkt2wMvuZZ963Xj4GMCDO+QCZ4LipSe4=
Subject key identifier: 58:89:C9:8C:70:AA:49:40:E8:53:37:70:B8:71:DB:20:E2:33:9B:09
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 081AF855D787E7C8F2B8EEA3E34F2E1484B2BD55
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Wed 10 Sep 2025 08:49:24 +0000
ROA not before: Wed 10 Sep 2025 08:44:24 +0000
ROA not after: Wed 09 Sep 2026 08:49:24 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1a:f8:55:d7:87:e7:c8:f2:b8:ee:a3:e3:4f:2e:14:84:b2:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 08:44:24 2025 GMT
Not After : Sep 9 08:49:24 2026 GMT
Subject: CN=5889C98C70AA4940E8533770B871DB20E2339B09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:78:3c:7a:09:91:0a:0d:f1:40:be:18:3c:
ed:48:c2:b7:02:22:f4:8c:de:32:fe:fd:39:f7:54:
7c:92:ef:b5:51:9a:43:72:b0:d8:c3:57:fd:e3:7c:
dd:dd:53:85:0c:7e:0d:fd:07:78:a9:cf:b5:31:14:
6a:88:08:4f:05:d4:c4:f5:f5:b8:9d:38:2c:3a:84:
34:0f:74:d9:71:62:4d:1f:55:6c:17:cc:8c:8b:29:
56:d1:f4:2f:60:fb:a7:78:1c:25:50:74:7f:08:78:
8c:64:da:42:30:e6:0e:8a:58:13:0f:51:67:29:eb:
7e:b6:2c:10:41:3a:f7:36:9e:f8:51:87:52:1f:f6:
c9:fc:41:eb:7b:95:06:ae:45:0b:8c:23:e4:86:03:
8f:e8:33:0a:0f:ed:ec:77:1f:5b:c2:18:4a:e8:0e:
5c:0b:3f:27:06:7f:b6:b2:54:bc:88:2f:27:78:91:
5d:7a:d0:8f:82:7e:09:ad:94:3d:24:6f:d4:b6:69:
ba:5d:2a:1f:00:4f:51:5e:cf:3b:f4:bf:89:71:cb:
17:ab:b3:d3:af:61:ef:c3:96:78:56:1c:ea:17:25:
c5:67:9a:bb:0d:f2:f3:0f:16:68:df:73:67:9e:d7:
0d:b9:d6:03:48:2f:93:37:20:be:74:e3:c9:a3:5e:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:89:C9:8C:70:AA:49:40:E8:53:37:70:B8:71:DB:20:E2:33:9B:09
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.214.0/24
46.203.234.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
178.92.61.0/24
178.93.74.0/24
178.94.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fd:88:5a:3e:98:6c:02:54:1e:b5:d8:70:1f:7f:c1:04:5d:
11:91:10:96:b7:73:3a:70:2b:fb:f7:ef:a8:32:12:76:7c:b9:
3a:bc:b4:e7:d9:27:ff:3e:83:af:4f:06:b2:7d:3e:e2:a2:af:
2c:21:89:9f:98:cd:4b:05:b2:47:5d:9c:5a:6a:32:27:45:39:
a1:96:40:0f:0a:47:36:dc:9b:48:59:56:db:e0:e9:9c:9a:4b:
f3:2e:77:85:e6:d8:93:23:98:c0:1f:7e:89:17:ab:d6:88:12:
3f:08:ab:be:d2:db:9e:ce:2a:f3:52:3b:e4:4d:1f:49:db:2d:
24:17:ab:2c:af:51:00:1c:7b:81:81:1c:86:2d:3e:32:a1:d2:
a2:9e:22:a6:02:67:c2:0f:25:fb:67:11:d7:b3:30:b4:d2:24:
77:55:ba:14:e9:b3:05:c0:b3:90:a9:f2:c9:dc:1c:34:e3:43:
b4:92:87:20:54:29:bd:cb:f2:78:9a:28:81:8a:15:de:7a:e6:
6b:16:3d:12:12:2d:80:98:26:94:ff:39:f6:4b:46:7a:06:9f:
ab:28:95:cd:e7:43:4b:a9:45:b9:ae:ec:d0:4a:a8:76:6a:90:
a4:ef:13:31:d1:a5:64:40:89:b9:19:1a:a3:a6:92:b8:04:63:
9e:b7:82:f0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUCBr4VdeH58jyuO6j408uFISyvVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MTAwODQ0MjRaFw0yNjA5MDkwODQ5MjRaMDMxMTAvBgNV
BAMTKDU4ODlDOThDNzBBQTQ5NDBFODUzMzc3MEI4NzFEQjIwRTIzMzlCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCHg8egmRCg3xQL4YPO1IwrcC
IvSM3jL+/Tn3VHyS77VRmkNysNjDV/3jfN3dU4UMfg39B3ipz7UxFGqICE8F1MT1
9bidOCw6hDQPdNlxYk0fVWwXzIyLKVbR9C9g+6d4HCVQdH8IeIxk2kIw5g6KWBMP
UWcp6362LBBBOvc2nvhRh1If9sn8Qet7lQauRQuMI+SGA4/oMwoP7ex3H1vCGEro
DlwLPycGf7ayVLyILyd4kV160I+CfgmtlD0kb9S2abpdKh8AT1Fezzv0v4lxyxer
s9OvYe/DlnhWHOoXJcVnmrsN8vMPFmjfc2ee1w251gNIL5M3IL5048mjXjQrAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUWInJjHCqSUDoUzdwuHHbIOIzmwkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQALstN
AwQALst4AwQALsuWAwQALsvWAwQALsvqAwQDXHGwAwQAXHHAAwQAXHHDAwQCXHHM
AwQCXHHYAwQAslw9AwQAsl1KAwQAsl6UMA0GCSqGSIb3DQEBCwUAA4IBAQBN/Yha
PphsAlQetdhwH3/BBF0RkRCWt3M6cCv79++oMhJ2fLk6vLTn2Sf/PoOvTwayfT7i
oq8sIYmfmM1LBbJHXZxaajInRTmhlkAPCkc23JtIWVbb4OmcmkvzLneF5tiTI5jA
H36JF6vWiBI/CKu+0tuezirzUjvkTR9J2y0kF6ssr1EAHHuBgRyGLT4yodKiniKm
AmfCDyX7ZxHXszC00iR3VboU6bMFwLOQqfLJ3Bw040O0kocgVCm9y/J4miiBihXe
euZrFj0SEi2AmCaU/zn2S0Z6Bp+rKJXN50NLqUW5ruzQSqh2apCk7xMx0aVkQIm5
GRqjppK4BGOet4Lw
-----END CERTIFICATE-----
Generated at Mon Sep 15 20:35:49 2025 by rpki-client