Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: T+eFFJapytrJY7wrw+ekrYTe3UJrcbNtnoUpScL33CA=
Subject key identifier: B4:68:85:5A:00:08:E0:74:A6:5E:AD:84:BB:50:81:82:B4:75:D0:D6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5AEBDD99A01A17CFC814FC963C1DC6F892501B65
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Wed 05 Aug 2026 08:16:05 +0000
ROA not before: Wed 05 Aug 2026 08:11:05 +0000
ROA not after: Wed 04 Aug 2027 08:16:05 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.188.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.215.0/24 maxlen: 24
46.203.217.0/24 maxlen: 24
46.203.219.0/24 maxlen: 24
46.203.221.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
46.203.251.0/24 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.66.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
95.134.0.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.112.0/24 maxlen: 24
95.135.113.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.92.64.0/24 maxlen: 24
178.92.65.0/24 maxlen: 24
178.92.67.0/24 maxlen: 24
178.92.68.0/24 maxlen: 24
178.92.70.0/24 maxlen: 24
178.92.71.0/24 maxlen: 24
178.92.124.0/24 maxlen: 24
178.93.7.0/24 maxlen: 24
178.93.10.0/24 maxlen: 24
178.93.12.0/24 maxlen: 24
178.93.13.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
178.93.24.0/24 maxlen: 24
178.93.25.0/24 maxlen: 24
178.93.26.0/24 maxlen: 24
178.93.29.0/24 maxlen: 24
178.93.32.0/24 maxlen: 24
178.93.43.0/24 maxlen: 24
178.93.44.0/24 maxlen: 24
178.93.57.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.93.240.0/24 maxlen: 24
178.94.31.0/24 maxlen: 24
178.94.39.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.198.0/24 maxlen: 24
178.94.222.0/24 maxlen: 24
178.94.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:eb:dd:99:a0:1a:17:cf:c8:14:fc:96:3c:1d:c6:f8:92:50:1b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 5 08:11:05 2026 GMT
Not After : Aug 4 08:16:05 2027 GMT
Subject: CN=B468855A0008E074A65EAD84BB508182B475D0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:95:61:de:83:ea:ea:fc:93:5f:90:bf:49:
f1:33:84:7d:dc:bd:f6:31:9b:4a:ce:44:da:e2:13:
60:2c:67:30:94:4b:ac:22:02:0d:46:19:c2:a4:6b:
e2:d2:72:53:c3:ff:ff:96:ad:e2:86:57:bf:1d:08:
27:4e:b7:f5:95:21:c1:e9:1c:3b:44:7d:2f:67:90:
7f:e9:7a:60:86:c5:70:40:63:e0:c5:0d:c1:71:ef:
17:a7:e3:1f:01:02:72:35:43:e7:ff:d9:2e:b4:ae:
01:3f:54:9a:05:58:c2:86:2a:a1:e8:89:fa:82:b3:
51:0a:66:06:d4:83:75:b6:f9:3b:13:d7:68:9d:99:
89:4e:a5:a2:ee:0b:a1:32:40:0c:9e:ed:e4:f1:52:
e4:a9:98:15:24:73:f9:ec:25:26:15:56:39:2c:d1:
50:61:a8:62:13:50:7a:65:06:0b:62:6b:3f:35:4c:
a1:2c:90:e6:0c:4c:b5:a7:6d:54:db:32:9d:e6:da:
eb:bb:73:d2:0d:f8:f7:14:9d:6b:22:67:26:12:b0:
65:f3:ae:fd:46:2a:33:34:70:f7:e3:91:5b:89:d6:
d0:6e:b2:5e:79:1d:01:2d:ab:d2:9f:52:ad:79:6e:
cf:b1:9a:8f:77:cf:f6:48:9d:68:69:27:37:b8:5c:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:85:5A:00:08:E0:74:A6:5E:AD:84:BB:50:81:82:B4:75:D0:D6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.188.0/24
46.203.214.0/23
46.203.217.0/24
46.203.219.0/24
46.203.221.0/24
46.203.234.0/24
46.203.251.0/24
92.112.157.0/24
92.113.66.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
95.134.0.0/24
95.135.111.0-95.135.113.255
178.92.61.0/24
178.92.64.0/23
178.92.67.0-178.92.68.255
178.92.70.0/23
178.92.124.0/24
178.93.7.0/24
178.93.10.0/24
178.93.12.0/23
178.93.21.0/24
178.93.24.0-178.93.26.255
178.93.29.0/24
178.93.32.0/24
178.93.43.0-178.93.44.255
178.93.57.0/24
178.93.74.0/24
178.93.240.0/24
178.94.31.0/24
178.94.39.0/24
178.94.148.0/24
178.94.150.0/24
178.94.198.0/24
178.94.222.0/24
178.94.233.0/24
Signature Algorithm: sha256WithRSAEncryption
59:44:e0:a7:a3:ef:59:e8:61:d2:ff:5e:24:57:df:6a:d2:21:
c8:f8:3e:60:df:91:f6:66:ce:eb:a6:60:1d:14:ba:9e:80:c2:
8a:60:7a:0b:f4:ce:33:28:22:5b:97:45:75:8e:eb:9f:10:ed:
ed:23:59:86:d9:20:fa:c0:47:26:80:5e:ff:d9:1d:e2:34:3e:
1d:42:31:e5:25:8f:87:b9:36:c5:ad:33:31:57:80:0b:2f:61:
98:08:22:14:fe:f3:62:02:5d:c2:67:89:65:77:29:bc:21:e3:
a9:f5:e9:b3:1a:4d:08:dd:d5:3a:c7:14:4f:2f:0e:af:b5:e1:
4e:9b:ef:34:60:e8:a7:c6:86:c2:c5:91:d7:13:df:16:12:52:
d5:68:45:34:29:0f:2b:5a:dc:d3:9f:04:af:05:7d:dd:c5:f6:
7a:a9:7d:9b:67:20:d8:a4:be:60:12:a5:69:e9:da:c3:bb:38:
73:66:75:af:1f:62:cf:a6:9a:ed:72:42:1c:36:f1:28:8d:f9:
6c:40:da:ea:db:2e:94:29:98:3c:e5:fc:c2:82:e0:1a:55:fd:
9b:ea:48:27:9d:fa:ad:e3:5b:8b:3e:eb:74:f4:28:45:62:b5:
4a:19:1e:ad:18:6c:7f:bb:2e:ec:2a:d0:da:b6:3f:6b:9d:67:
65:4a:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 22:34:17 2026 by rpki-client