Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: yTYBMr9/ahFv1/Tk5/DAC7gtVi459dlnwvuRv6FXmeY=
Subject key identifier: D4:8C:C4:E4:BB:B0:95:60:99:C1:33:34:9F:51:CB:24:FB:AC:8D:38
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1281A2BF5CF7DB5F977B177D8C06A89986AE6B92
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Mon 26 Oct 2026 08:45:21 +0000
ROA not before: Mon 26 Oct 2026 08:40:21 +0000
ROA not after: Mon 25 Oct 2027 08:45:21 +0000
asID: 215294
IP address blocks: 51.146.0.0/22 maxlen: 24
51.146.7.0/24 maxlen: 24
51.146.10.0/23 maxlen: 24
51.146.12.0/24 maxlen: 24
51.146.17.0/24 maxlen: 24
51.146.40.0/22 maxlen: 24
51.146.68.0/24 maxlen: 24
51.146.71.0/24 maxlen: 24
51.146.72.0/24 maxlen: 24
51.146.76.0/23 maxlen: 24
51.146.79.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.95.0/24 maxlen: 24
51.146.100.0/24 maxlen: 24
51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.53.0/24 maxlen: 24
51.194.66.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.78.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.172.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.201.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.238.0/23 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.244.0/23 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.247.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
51.194.252.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.20.0/24 maxlen: 24
51.241.84.0/24 maxlen: 24
51.241.118.0/24 maxlen: 24
51.241.119.0/24 maxlen: 24
51.241.144.0/24 maxlen: 24
51.241.215.0/24 maxlen: 24
78.105.101.0/24 maxlen: 24
78.105.113.0/24 maxlen: 24
78.105.115.0/24 maxlen: 24
78.105.150.0/24 maxlen: 24
78.105.157.0/24 maxlen: 24
78.105.192.0/24 maxlen: 24
78.105.239.0/24 maxlen: 24
188.220.30.0/24 maxlen: 24
188.220.77.0/24 maxlen: 24
188.220.136.0/24 maxlen: 24
188.220.138.0/24 maxlen: 24
188.220.219.0/24 maxlen: 24
188.221.72.0/24 maxlen: 24
188.221.92.0/22 maxlen: 24
188.221.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:81:a2:bf:5c:f7:db:5f:97:7b:17:7d:8c:06:a8:99:86:ae:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 26 08:40:21 2026 GMT
Not After : Oct 25 08:45:21 2027 GMT
Subject: CN=D48CC4E4BBB0956099C133349F51CB24FBAC8D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:90:a8:71:57:2a:b7:9c:43:ae:6a:cf:66:51:
c5:16:5b:28:cf:34:9a:af:49:ae:75:66:0c:b8:10:
fa:b7:76:18:94:e4:bd:d6:d9:52:b0:86:e1:e0:c6:
a4:d6:d1:db:97:3b:b7:cf:bb:47:1f:31:5f:3e:bf:
85:21:33:fb:cb:1c:38:39:0c:c1:39:07:c4:d1:00:
b0:97:67:46:18:d6:12:3c:eb:52:67:4a:58:a6:ce:
a9:71:fb:82:29:96:4c:cf:ed:6f:d8:00:a7:85:99:
7d:6d:6e:fe:11:f7:68:82:6c:be:d2:7e:77:86:6e:
50:ec:f2:aa:0e:9c:27:4a:09:0f:ac:45:83:ec:f4:
1e:08:43:48:0e:81:54:06:8c:10:b4:5c:96:10:51:
87:11:79:e7:eb:b2:5f:01:e9:ef:0e:d5:a5:38:58:
24:0d:1c:88:0e:92:bd:d2:85:50:87:dd:be:07:41:
e4:58:79:dd:a8:50:73:01:cf:2f:77:3f:30:51:cf:
11:b3:c8:49:cb:3b:1d:95:78:38:fc:d1:01:6f:9a:
5f:bc:06:94:3b:8d:88:f9:6b:f9:74:86:ff:1d:54:
3d:7b:36:0f:ab:e3:04:8c:97:10:cc:b3:8d:de:70:
93:ad:37:d3:ae:d5:61:ca:12:d8:2e:b0:63:f4:1d:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:C4:E4:BB:B0:95:60:99:C1:33:34:9F:51:CB:24:FB:AC:8D:38
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/22
51.146.7.0/24
51.146.10.0-51.146.12.255
51.146.17.0/24
51.146.40.0/22
51.146.68.0/24
51.146.71.0-51.146.72.255
51.146.76.0/23
51.146.79.0/24
51.146.83.0/24
51.146.95.0/24
51.146.100.0/24
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/23
51.194.39.0/24
51.194.53.0/24
51.194.66.0/23
51.194.71.0/24
51.194.77.0-51.194.78.255
51.194.81.0/24
51.194.96.0/23
51.194.142.0/24
51.194.172.0/24
51.194.195.0/24
51.194.201.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.238.0/23
51.194.242.0/24
51.194.244.0-51.194.248.255
51.194.252.0/24
51.241.2.0/24
51.241.20.0/24
51.241.84.0/24
51.241.118.0/23
51.241.144.0/24
51.241.215.0/24
78.105.101.0/24
78.105.113.0/24
78.105.115.0/24
78.105.150.0/24
78.105.157.0/24
78.105.192.0/24
78.105.239.0/24
188.220.30.0/24
188.220.77.0/24
188.220.136.0/24
188.220.138.0/24
188.220.219.0/24
188.221.72.0/24
188.221.92.0/22
188.221.156.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:24:e7:ac:2f:4a:df:2e:e0:9b:c3:98:03:44:02:62:f2:9b:
68:21:e1:af:bf:57:b3:51:20:9e:49:3a:7f:08:1f:be:2b:ac:
9e:b9:17:d2:5b:7e:65:6f:94:c1:47:03:5d:e6:31:ae:7c:d8:
b8:39:ab:7e:f3:3b:bd:f7:4f:36:3f:27:b5:d6:c5:2c:91:9d:
2d:60:48:b1:ba:d5:02:0a:c9:ad:75:57:de:16:da:26:a1:4e:
40:78:f5:71:df:03:7d:3a:25:11:ca:ed:86:d5:4c:a4:6e:2e:
ef:41:03:89:04:e1:d2:2e:0d:4a:e3:b5:7c:ba:8f:7e:16:14:
ba:30:b4:71:54:32:15:0b:c3:89:dc:ee:2d:c2:b3:da:62:e8:
4e:0c:c3:88:86:00:a8:25:a0:2c:14:fb:c5:e4:69:b9:ad:26:
9c:27:16:4f:e3:ac:a1:3a:8d:64:21:cb:f1:69:56:21:dc:61:
39:f4:16:d6:61:08:ac:d2:2e:9f:88:3a:a5:94:8b:95:bd:11:
33:0d:c9:53:fa:27:86:8c:73:a9:ab:54:43:e6:16:10:56:6b:
53:d4:af:cd:ba:7e:67:e5:3e:41:2f:c9:22:f5:83:da:83:71:
ce:ac:96:07:98:dd:79:0a:e6:0b:91:d6:01:5b:1e:d1:a4:a3:
56:df:ad:14
-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgIUEoGiv1z321+Xexd9jAaomYaua5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMjYwODQwMjFaFw0yNzEwMjUwODQ1MjFaMDMxMTAvBgNV
BAMTKEQ0OENDNEU0QkJCMDk1NjA5OUMxMzMzNDlGNTFDQjI0RkJBQzhEMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkKhxVyq3nEOuas9mUcUWWyjP
NJqvSa51Zgy4EPq3dhiU5L3W2VKwhuHgxqTW0duXO7fPu0cfMV8+v4UhM/vLHDg5
DME5B8TRALCXZ0YY1hI861JnSlimzqlx+4IplkzP7W/YAKeFmX1tbv4R92iCbL7S
fneGblDs8qoOnCdKCQ+sRYPs9B4IQ0gOgVQGjBC0XJYQUYcReefrsl8B6e8O1aU4
WCQNHIgOkr3ShVCH3b4HQeRYed2oUHMBzy93PzBRzxGzyEnLOx2VeDj80QFvml+8
BpQ7jYj5a/l0hv8dVD17Ng+r4wSMlxDMs43ecJOtN9Ou1WHKEtgusGP0HXjhAgMB
AAGjggO0MIIDsDAdBgNVHQ4EFgQU1IzE5LuwlWCZwTM0n1HLJPusjTgwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBxwYIKwYBBQUHAQcBAf8EggG2MIIBsjCCAa4EAgAB
MIIBpgMEAjOSAAMEADOSBzAMAwQBM5IKAwQAM5IMAwQAM5IRAwQCM5IoAwQAM5JE
MAwDBAAzkkcDBAAzkkgDBAEzkkwDBAAzkk8DBAAzklMDBAAzkl8DBAAzkmQDBAAz
kpgwDAMEAzOSuAMEADOSugMEADOS7TAMAwQAM5L3AwQAM5L4AwQBM8IgAwQAM8In
AwQAM8I1AwQBM8JCAwQAM8JHMAwDBAAzwk0DBAAzwk4DBAAzwlEDBAEzwmADBAAz
wo4DBAAzwqwDBAAzwsMDBAAzwskDBAAzwssDBAAzws0DBAAzwtMDBAAzwtsDBAAz
wuEDBAAzwuMwDAMEADPC5wMEADPC6AMEADPC6gMEATPC7gMEADPC8jAMAwQCM8L0
AwQAM8L4AwQAM8L8AwQAM/ECAwQAM/EUAwQAM/FUAwQBM/F2AwQAM/GQAwQAM/HX
AwQATmllAwQATmlxAwQATmlzAwQATmmWAwQATmmdAwQATmnAAwQATmnvAwQAvNwe
AwQAvNxNAwQAvNyIAwQAvNyKAwQAvNzbAwQAvN1IAwQCvN1cAwQAvN2cMA0GCSqG
SIb3DQEBCwUAA4IBAQCqJOesL0rfLuCbw5gDRAJi8ptoIeGvv1ezUSCeSTp/CB++
K6yeuRfSW35lb5TBRwNd5jGufNi4Oat+8zu99082Pye11sUskZ0tYEixutUCCsmt
dVfeFtomoU5AePVx3wN9OiURyu2G1Uykbi7vQQOJBOHSLg1K47V8uo9+FhS6MLRx
VDIVC8OJ3O4twrPaYuhODMOIhgCoJaAsFPvF5Gm5rSacJxZP46yhOo1kIcvxaVYh
3GE59BbWYQis0i6fiDqllIuVvREzDclT+ieGjHOpq1RD5hYQVmtT1K/Nun5n5T5B
L8ki9YPag3HOrJYHmN15CuYLkdYBWx7RpKNW360U
-----END CERTIFICATE-----
Generated at Sun Nov 8 08:12:37 2026 by rpki-client