Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: gxNI8RJ1T5KdJjtHrAhyVauIOyNW7PSpgNDJfU5vQxI=
Subject key identifier: D7:D1:82:D2:74:3D:79:05:E2:65:1F:35:21:81:8B:9A:D0:22:21:52
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 56D4D32D1542D72547636515C1599A125F6E85CA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Fri 01 May 2026 04:29:48 +0000
ROA not before: Fri 01 May 2026 04:24:48 +0000
ROA not after: Fri 30 Apr 2027 04:29:48 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.215.0/24 maxlen: 24
46.203.217.0/24 maxlen: 24
46.203.219.0/24 maxlen: 24
46.203.221.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.66.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.112.0/24 maxlen: 24
95.135.113.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.92.64.0/24 maxlen: 24
178.92.65.0/24 maxlen: 24
178.92.67.0/24 maxlen: 24
178.92.68.0/24 maxlen: 24
178.92.70.0/24 maxlen: 24
178.92.71.0/24 maxlen: 24
178.92.124.0/24 maxlen: 24
178.93.7.0/24 maxlen: 24
178.93.10.0/24 maxlen: 24
178.93.12.0/24 maxlen: 24
178.93.13.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
178.93.24.0/24 maxlen: 24
178.93.25.0/24 maxlen: 24
178.93.26.0/24 maxlen: 24
178.93.29.0/24 maxlen: 24
178.93.32.0/24 maxlen: 24
178.93.43.0/24 maxlen: 24
178.93.44.0/24 maxlen: 24
178.93.57.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.222.0/24 maxlen: 24
178.94.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d4:d3:2d:15:42:d7:25:47:63:65:15:c1:59:9a:12:5f:6e:85:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 1 04:24:48 2026 GMT
Not After : Apr 30 04:29:48 2027 GMT
Subject: CN=D7D182D2743D7905E2651F3521818B9AD0222152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:2e:b2:24:3a:b8:9e:41:9f:2a:fe:8f:ca:
30:61:f0:ef:dd:5d:bd:44:d6:ca:9c:08:06:0b:5f:
45:36:2c:7a:c8:42:42:bf:59:ba:54:de:7b:fe:3c:
57:20:a1:b1:e9:a9:54:ab:a5:a6:ab:60:40:50:46:
4f:f9:cd:9e:64:06:43:a5:50:8d:9f:00:e3:b0:b6:
9b:5f:c2:bb:65:ec:9b:4e:e3:cd:97:0f:c9:64:ac:
7a:2c:a3:9f:64:7f:cc:1e:f7:14:b3:62:17:aa:59:
6c:57:fe:e9:51:90:a6:45:38:f1:92:b1:96:06:40:
22:66:91:48:91:10:bc:e4:9e:10:83:d1:b5:8e:25:
12:65:d6:37:f7:ee:aa:22:1b:35:1f:07:8b:cd:8c:
f2:c2:ac:6a:95:2d:c8:45:3e:db:e7:92:db:1f:c3:
e3:f4:f6:15:1b:ae:1f:64:c2:c7:9c:99:41:e7:6d:
a1:63:75:4b:28:d3:6e:60:4c:dd:c4:82:29:2b:96:
7a:f5:f2:e7:9c:18:d9:96:0e:5b:21:4e:ab:4e:c3:
1b:ad:16:35:39:92:50:ad:86:ec:c4:b8:1e:a6:6a:
e6:7f:61:04:83:3c:cb:1e:30:a1:bd:e2:0e:f1:00:
a3:04:17:62:af:2e:f5:11:fd:bb:03:dc:03:a0:51:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D1:82:D2:74:3D:79:05:E2:65:1F:35:21:81:8B:9A:D0:22:21:52
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.214.0/23
46.203.217.0/24
46.203.219.0/24
46.203.221.0/24
46.203.234.0/24
92.112.157.0/24
92.113.66.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
95.135.111.0-95.135.113.255
178.92.61.0/24
178.92.64.0/23
178.92.67.0-178.92.68.255
178.92.70.0/23
178.92.124.0/24
178.93.7.0/24
178.93.10.0/24
178.93.12.0/23
178.93.21.0/24
178.93.24.0-178.93.26.255
178.93.29.0/24
178.93.32.0/24
178.93.43.0-178.93.44.255
178.93.57.0/24
178.93.74.0/24
178.94.148.0/24
178.94.150.0/24
178.94.222.0/24
178.94.233.0/24
Signature Algorithm: sha256WithRSAEncryption
54:db:92:f0:6d:9e:27:4c:c0:ec:4b:10:97:88:1a:ed:de:51:
33:29:28:20:23:a5:c4:93:26:4f:00:50:79:cd:db:0d:9f:42:
79:dc:56:2e:78:f7:5c:a5:96:f1:55:d1:52:a4:dd:92:11:71:
36:41:98:2e:37:16:2c:ca:29:3a:c2:0a:c0:45:ea:f4:64:7d:
c2:06:8d:ae:a5:a3:6b:7c:10:84:0b:5d:14:55:df:ea:03:86:
4f:fc:04:0e:3d:aa:ac:ff:d2:2d:9a:51:8e:b6:33:69:a8:9b:
2b:60:96:4b:21:79:ef:c7:b0:f0:f7:c2:17:e0:e4:32:71:54:
2e:7d:0e:e5:01:0a:f2:2b:8f:77:80:c8:c8:5d:d9:2c:d9:e2:
99:d3:94:94:6e:7f:0e:90:a2:54:c6:45:a9:88:2b:4a:98:7d:
6f:64:ca:4f:e5:8e:4c:33:18:7c:c7:7e:e6:72:2f:0f:a6:2c:
cd:1e:83:42:5e:cf:c3:4d:67:5e:bf:72:7d:35:98:0c:6e:1c:
b6:6e:a7:07:a3:16:51:ef:5e:ef:a9:57:c2:67:af:fc:cb:6e:
32:82:df:14:30:f4:ba:08:07:4a:73:b4:51:f1:6b:5e:20:8c:
eb:21:fc:67:38:04:cf:6d:0c:16:a1:c3:3d:9d:b5:93:6b:12:
a1:e8:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 13:59:14 2026 by rpki-client