Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: Wr9nVW51AeSyucmu57FYf3MWi9MuKgLWYUiuRKcBeKs=
Subject key identifier: AF:09:D2:DA:94:F1:99:F6:6B:07:42:0C:6B:ED:13:DF:6F:EC:52:6D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 324CAAC4E05ABB177E3293D4840221A42E30AE07
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Wed 18 Mar 2026 07:32:51 +0000
ROA not before: Wed 18 Mar 2026 07:27:51 +0000
ROA not after: Wed 17 Mar 2027 07:32:51 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.92.64.0/24 maxlen: 24
178.92.65.0/24 maxlen: 24
178.92.67.0/24 maxlen: 24
178.92.68.0/24 maxlen: 24
178.92.70.0/24 maxlen: 24
178.92.71.0/24 maxlen: 24
178.92.124.0/24 maxlen: 24
178.93.7.0/24 maxlen: 24
178.93.10.0/24 maxlen: 24
178.93.12.0/24 maxlen: 24
178.93.13.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
178.93.24.0/24 maxlen: 24
178.93.25.0/24 maxlen: 24
178.93.26.0/24 maxlen: 24
178.93.29.0/24 maxlen: 24
178.93.32.0/24 maxlen: 24
178.93.43.0/24 maxlen: 24
178.93.44.0/24 maxlen: 24
178.93.57.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.222.0/24 maxlen: 24
178.94.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4c:aa:c4:e0:5a:bb:17:7e:32:93:d4:84:02:21:a4:2e:30:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 18 07:27:51 2026 GMT
Not After : Mar 17 07:32:51 2027 GMT
Subject: CN=AF09D2DA94F199F66B07420C6BED13DF6FEC526D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:d4:45:2b:48:78:19:73:cb:15:b2:68:6f:
31:af:00:1f:84:f1:db:99:52:ce:9c:36:fc:53:c3:
6f:7d:3f:02:99:72:9e:3b:c3:77:54:46:9f:c1:cf:
6e:0c:c5:50:7f:7f:13:65:32:b3:1c:f2:e7:73:e6:
bb:37:26:48:85:ca:ae:2c:bf:30:9b:4b:95:e8:9e:
79:24:a5:d6:09:89:32:00:f0:10:6d:71:3b:3d:c3:
8f:3d:f4:ba:c6:76:0d:43:e5:e9:f7:07:63:b4:ab:
e8:74:cc:0d:d1:d6:0b:fc:7f:df:79:13:79:ce:65:
0c:ef:ab:57:62:f7:ff:30:49:6f:40:3d:86:f2:f6:
08:b2:cd:60:02:84:04:9c:ca:14:0b:e2:44:03:3f:
43:79:b6:f3:16:b3:f7:75:f7:29:58:60:58:6d:7e:
e7:57:f9:ff:f6:0d:f4:4f:fc:d5:e2:3d:eb:31:c8:
72:15:26:2d:d3:93:9c:78:6f:97:2f:a0:b1:64:6d:
a5:1c:7f:40:66:ad:91:b1:e2:64:32:86:6d:0f:22:
4e:84:dd:a5:44:fa:23:99:98:0e:da:ab:bf:62:e5:
8f:e7:2e:c9:c7:66:b4:90:c6:cc:c5:01:a0:67:d3:
6f:2a:61:6b:04:85:fe:0b:12:82:07:2b:8a:8f:7f:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:D2:DA:94:F1:99:F6:6B:07:42:0C:6B:ED:13:DF:6F:EC:52:6D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.214.0/24
46.203.234.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
178.92.61.0/24
178.92.64.0/23
178.92.67.0-178.92.68.255
178.92.70.0/23
178.92.124.0/24
178.93.7.0/24
178.93.10.0/24
178.93.12.0/23
178.93.21.0/24
178.93.24.0-178.93.26.255
178.93.29.0/24
178.93.32.0/24
178.93.43.0-178.93.44.255
178.93.57.0/24
178.93.74.0/24
178.94.148.0/24
178.94.150.0/24
178.94.222.0/24
178.94.233.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3b:5c:b2:f5:f4:61:ff:c5:da:91:d8:56:fa:91:ae:53:47:
65:fd:3f:36:8b:57:0b:23:75:1b:30:6e:0c:53:fc:5e:3c:b9:
37:91:2d:17:da:fe:04:ba:0f:7f:38:c1:13:05:da:84:70:94:
70:ea:94:2a:ee:bf:38:26:d1:03:45:5c:9e:25:13:3b:4c:e5:
9c:9f:16:01:40:65:0c:7d:1d:71:4e:19:5b:75:91:cc:7f:a1:
00:69:e7:1d:33:6a:ce:fb:11:39:c5:c2:17:ff:20:a9:f9:6f:
f2:af:04:10:c3:30:76:85:f3:53:d5:bd:8d:9c:6a:7f:bd:12:
32:62:89:57:fa:59:05:16:41:8c:5b:28:b6:93:d4:a0:a4:07:
bd:3e:65:ef:70:05:57:e1:1b:00:c2:a4:9a:d1:9e:eb:06:97:
86:a4:04:27:c1:5b:0f:5f:ef:7e:1a:6c:57:b6:38:1a:04:b4:
c7:b1:3f:28:97:5d:72:2f:9e:57:d8:a0:9d:72:92:11:3f:56:
9a:f0:46:1c:d6:47:01:88:91:99:b6:81:4f:8f:58:8b:b9:50:
6d:03:ac:95:c5:c0:1d:7c:01:dd:f2:54:a4:6a:e9:a3:22:05:
45:4a:a6:2a:22:a6:bd:66:fe:76:b8:77:31:db:06:c5:9e:32:
67:d0:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 05:33:07 2026 by rpki-client