Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: 5n+ft6IWsudL+z3krRJJEC/gw6vTE7maynBxjzEXRaA=
Subject key identifier: 7E:AD:BA:6B:5F:0F:E7:BD:6C:24:8C:A4:F5:D6:22:65:F7:A5:94:46
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 51781B3E8C427E6A3477A47390CE4822FD546533
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Mon 26 Oct 2026 08:45:28 +0000
ROA not before: Mon 26 Oct 2026 08:40:28 +0000
ROA not after: Mon 25 Oct 2027 08:45:28 +0000
asID: 215294
IP address blocks: 46.202.46.0/24 maxlen: 24
46.202.126.0/23 maxlen: 24
46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.188.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.215.0/24 maxlen: 24
46.203.217.0/24 maxlen: 24
46.203.219.0/24 maxlen: 24
46.203.221.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
46.203.250.0/24 maxlen: 24
46.203.251.0/24 maxlen: 24
91.124.7.0/24 maxlen: 24
91.124.8.0/22 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.66.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
95.134.0.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.112.0/24 maxlen: 24
95.135.113.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.92.64.0/24 maxlen: 24
178.92.65.0/24 maxlen: 24
178.92.67.0/24 maxlen: 24
178.92.68.0/24 maxlen: 24
178.92.70.0/24 maxlen: 24
178.92.71.0/24 maxlen: 24
178.92.124.0/24 maxlen: 24
178.92.238.0/23 maxlen: 24
178.92.244.0/23 maxlen: 24
178.93.2.0/24 maxlen: 24
178.93.7.0/24 maxlen: 24
178.93.10.0/24 maxlen: 24
178.93.12.0/24 maxlen: 24
178.93.13.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
178.93.24.0/24 maxlen: 24
178.93.25.0/24 maxlen: 24
178.93.26.0/24 maxlen: 24
178.93.29.0/24 maxlen: 24
178.93.32.0/24 maxlen: 24
178.93.43.0/24 maxlen: 24
178.93.44.0/24 maxlen: 24
178.93.57.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.93.78.0/24 maxlen: 24
178.93.87.0/24 maxlen: 24
178.93.182.0/24 maxlen: 24
178.93.240.0/24 maxlen: 24
178.94.31.0/24 maxlen: 24
178.94.38.0/24 maxlen: 24
178.94.39.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.195.0/24 maxlen: 24
178.94.198.0/24 maxlen: 24
178.94.201.0/24 maxlen: 24
178.94.204.0/24 maxlen: 24
178.94.207.0/24 maxlen: 24
178.94.222.0/24 maxlen: 24
178.94.233.0/24 maxlen: 24
178.95.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:78:1b:3e:8c:42:7e:6a:34:77:a4:73:90:ce:48:22:fd:54:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 26 08:40:28 2026 GMT
Not After : Oct 25 08:45:28 2027 GMT
Subject: CN=7EADBA6B5F0FE7BD6C248CA4F5D62265F7A59446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bf:5c:a2:d2:7c:98:08:6c:fb:61:79:1d:79:
91:55:39:7d:5e:c6:fa:b2:0d:95:aa:03:8c:c0:32:
7e:0b:11:60:c9:48:2d:0a:cb:aa:0e:78:07:ec:42:
04:d3:ca:11:02:61:20:bd:48:a4:27:45:af:a8:2f:
f5:b1:69:bf:dc:41:7c:77:1f:48:07:03:50:d2:15:
ef:58:70:f2:2e:56:b7:99:a8:c8:90:c4:06:fa:8e:
24:3d:22:87:47:5e:69:b7:c2:a8:02:74:6b:1e:05:
29:fe:3f:70:02:45:16:1f:4e:a7:73:ce:e9:51:4b:
2d:07:92:66:49:b8:92:92:7f:1e:64:b9:15:0e:cf:
76:89:91:fc:20:b6:b4:7c:46:0a:8a:bf:00:07:43:
c2:74:74:9b:14:ac:38:53:23:d9:2f:7c:30:8b:e8:
38:d4:76:b6:bc:33:89:95:eb:64:aa:c0:36:f3:67:
47:a5:df:9a:89:92:2d:1a:82:64:1b:97:cc:ca:73:
d5:fc:c8:ce:07:57:b7:97:49:2b:d7:bd:57:db:8e:
9d:aa:be:22:72:c9:f1:b6:10:96:ea:b0:d3:cb:8e:
55:72:35:8b:4d:f8:d3:a1:62:b1:69:51:28:4c:d1:
75:d1:9b:4a:64:a0:bb:87:08:a9:77:b5:74:8f:e8:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AD:BA:6B:5F:0F:E7:BD:6C:24:8C:A4:F5:D6:22:65:F7:A5:94:46
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.46.0/24
46.202.126.0/23
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.188.0/24
46.203.214.0/23
46.203.217.0/24
46.203.219.0/24
46.203.221.0/24
46.203.234.0/24
46.203.250.0/23
91.124.7.0-91.124.11.255
92.112.157.0/24
92.113.66.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
95.134.0.0/24
95.135.111.0-95.135.113.255
178.92.61.0/24
178.92.64.0/23
178.92.67.0-178.92.68.255
178.92.70.0/23
178.92.124.0/24
178.92.238.0/23
178.92.244.0/23
178.93.2.0/24
178.93.7.0/24
178.93.10.0/24
178.93.12.0/23
178.93.21.0/24
178.93.24.0-178.93.26.255
178.93.29.0/24
178.93.32.0/24
178.93.43.0-178.93.44.255
178.93.57.0/24
178.93.74.0/24
178.93.78.0/24
178.93.87.0/24
178.93.182.0/24
178.93.240.0/24
178.94.31.0/24
178.94.38.0/23
178.94.148.0/24
178.94.150.0/24
178.94.195.0/24
178.94.198.0/24
178.94.201.0/24
178.94.204.0/24
178.94.207.0/24
178.94.222.0/24
178.94.233.0/24
178.95.88.0/24
Signature Algorithm: sha256WithRSAEncryption
39:68:c7:15:03:f9:ef:6a:57:e1:d9:91:26:83:98:1c:bb:f2:
0d:e8:a2:9c:f7:1a:75:86:0c:37:06:5d:0c:a0:b8:9a:87:c6:
07:33:c5:f9:d7:fa:a1:97:07:fd:c2:2c:69:38:c0:b7:40:12:
dc:12:6c:c7:58:05:62:79:b6:60:c8:8c:65:53:ef:a7:1e:ad:
90:db:64:e8:b1:0e:75:60:f0:4c:74:ea:75:6f:60:3c:04:b0:
74:c1:95:48:8d:00:70:6d:7c:9c:23:30:a0:3d:ef:64:20:2b:
95:23:8f:6c:6b:cb:77:d5:f7:0b:b1:cb:a7:68:f5:7e:10:7d:
40:ac:b4:c3:72:eb:03:d2:ca:17:19:35:e4:ed:64:a3:cc:3e:
44:20:fc:7f:7a:90:ad:fa:60:82:1d:6a:42:05:33:7a:70:82:
cf:ff:19:63:f6:df:a1:47:a2:01:76:dd:c0:da:e5:0d:82:b7:
d3:43:5a:d2:5a:8d:86:87:17:7a:09:4f:f8:d5:dc:c2:00:89:
ae:fe:30:35:af:9b:01:ec:2d:4c:89:2f:c6:62:01:8c:fe:b4:
29:91:12:5c:60:02:67:d4:c6:28:5f:d5:e2:fd:84:40:be:da:
6e:cc:76:ff:02:16:33:8c:42:33:39:d6:df:e1:53:02:28:e5:
bf:f6:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:47:20 2026 by rpki-client