Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: P79OGj6KicM64XV/9JV5pjZFwf4pqGCqUDixXAuy4qE=
Subject key identifier: E8:AF:F5:F2:4D:9B:6A:33:4F:C6:39:E3:8C:2C:C9:E9:40:7D:CE:57
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5AB22499D51048D3FD18D4114A7510E274F788F8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Mon 04 Aug 2025 11:54:10 +0000
ROA not before: Mon 04 Aug 2025 11:49:10 +0000
ROA not after: Mon 03 Aug 2026 11:54:10 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b2:24:99:d5:10:48:d3:fd:18:d4:11:4a:75:10:e2:74:f7:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 4 11:49:10 2025 GMT
Not After : Aug 3 11:54:10 2026 GMT
Subject: CN=E8AFF5F24D9B6A334FC639E38C2CC9E9407DCE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:21:5a:2d:f2:1e:88:f1:37:cc:3e:2e:e9:
fb:eb:f8:c2:3d:05:73:03:c5:61:6d:26:14:bb:f7:
dd:e3:97:74:49:ee:09:90:ac:10:08:24:19:9e:36:
87:90:39:32:9e:4e:b4:85:08:c0:27:02:21:27:7e:
b7:e2:02:7c:22:fe:22:0e:d4:8c:2d:1f:93:e5:c6:
05:3b:f9:64:ab:16:be:65:9e:ce:3f:1c:f9:cc:af:
5b:24:7f:31:12:7d:0f:1d:16:bc:c7:b1:58:e5:c1:
2a:3b:6a:7b:3d:28:9b:4e:d3:66:dc:98:2e:dc:0f:
3e:30:0b:55:89:5d:70:f7:74:a7:71:19:41:4b:19:
17:c4:63:f2:f5:ab:b6:53:29:50:c0:22:6b:1c:28:
9b:89:ac:d1:85:30:d1:13:18:a0:b3:e7:47:64:7e:
92:a6:4a:df:e6:a3:5f:59:d3:fc:ed:8a:c9:a1:94:
3f:1e:41:6a:13:4d:bb:4f:5e:bc:56:00:57:d3:8a:
c5:3a:0d:f0:f3:dc:ec:13:63:62:ba:e6:d7:f8:67:
fb:b5:f0:0d:a5:87:79:40:48:77:80:d7:b7:a6:d0:
74:31:ee:b9:fe:72:8f:ed:0f:c4:f0:bc:07:ff:a3:
b0:d2:03:ca:f3:86:fe:17:42:91:26:f9:12:17:fe:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:F5:F2:4D:9B:6A:33:4F:C6:39:E3:8C:2C:C9:E9:40:7D:CE:57
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.214.0/24
46.203.234.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
178.93.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:53:ad:eb:47:40:81:49:0b:b1:7b:e2:5d:e4:f2:a2:aa:ff:
f2:9a:2a:c1:d0:41:78:7f:61:3a:c3:da:87:87:d2:f5:f6:a7:
45:0d:5d:31:8e:d9:6b:19:3d:f1:89:0a:83:73:ba:5b:47:b3:
2d:3b:c5:1a:fb:66:6a:48:4a:dd:ad:77:e1:aa:b6:50:d0:b4:
c6:f8:91:cb:52:51:2e:dd:c7:09:38:68:75:97:b6:5e:63:b1:
50:54:1e:e1:45:04:01:7c:99:71:b4:4e:b6:87:e8:1c:5f:90:
af:a8:6c:0e:2b:aa:8e:cc:fd:41:70:cd:71:cd:dc:dd:fd:15:
38:c8:67:6c:5c:75:82:01:9f:9b:3e:bf:2d:e9:24:2c:07:f3:
92:90:e1:86:92:f8:89:93:ee:b5:7a:a1:60:1e:85:e8:e4:ec:
68:0a:32:81:9f:11:ab:a2:cf:38:2a:6c:cf:4e:08:a6:08:e2:
d8:f7:ba:60:40:b0:b9:71:6e:d9:db:15:b5:17:6c:4b:43:6e:
57:4a:ab:8d:55:6c:a4:47:b9:52:8d:cf:70:b6:29:d7:9a:e6:
02:c2:4e:b7:a2:05:65:b7:a6:2f:1e:cd:37:60:ab:0f:dc:3c:
6f:f5:f3:fc:e8:5d:64:fb:34:a8:45:31:84:f5:3c:86:d2:4b:
05:14:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:15 2025 by rpki-client