Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: //u/vBfdwXUr5Ptd4R1XgwZl60LIzRJ5X6YYRNAydSw=
Subject key identifier: 5D:69:FF:65:B3:1C:60:75:26:E6:99:1D:BA:9F:26:35:41:5D:AE:14
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 76C0483E35C8B8D4171EEA1AE48DF3E287E29C77
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Mon 07 Sep 2026 08:31:56 +0000
ROA not before: Mon 07 Sep 2026 08:26:56 +0000
ROA not after: Mon 06 Sep 2027 08:31:56 +0000
asID: 215294
IP address blocks: 46.202.46.0/24 maxlen: 24
46.202.126.0/23 maxlen: 24
46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.188.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.215.0/24 maxlen: 24
46.203.217.0/24 maxlen: 24
46.203.219.0/24 maxlen: 24
46.203.221.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
46.203.250.0/24 maxlen: 24
46.203.251.0/24 maxlen: 24
91.124.7.0/24 maxlen: 24
91.124.8.0/22 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.66.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
95.134.0.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.112.0/24 maxlen: 24
95.135.113.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.92.64.0/24 maxlen: 24
178.92.65.0/24 maxlen: 24
178.92.67.0/24 maxlen: 24
178.92.68.0/24 maxlen: 24
178.92.70.0/24 maxlen: 24
178.92.71.0/24 maxlen: 24
178.92.124.0/24 maxlen: 24
178.93.2.0/24 maxlen: 24
178.93.7.0/24 maxlen: 24
178.93.10.0/24 maxlen: 24
178.93.12.0/24 maxlen: 24
178.93.13.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
178.93.24.0/24 maxlen: 24
178.93.25.0/24 maxlen: 24
178.93.26.0/24 maxlen: 24
178.93.29.0/24 maxlen: 24
178.93.32.0/24 maxlen: 24
178.93.43.0/24 maxlen: 24
178.93.44.0/24 maxlen: 24
178.93.57.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.93.78.0/24 maxlen: 24
178.93.87.0/24 maxlen: 24
178.93.182.0/24 maxlen: 24
178.93.240.0/24 maxlen: 24
178.94.31.0/24 maxlen: 24
178.94.38.0/24 maxlen: 24
178.94.39.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.198.0/24 maxlen: 24
178.94.222.0/24 maxlen: 24
178.94.233.0/24 maxlen: 24
178.95.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c0:48:3e:35:c8:b8:d4:17:1e:ea:1a:e4:8d:f3:e2:87:e2:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 7 08:26:56 2026 GMT
Not After : Sep 6 08:31:56 2027 GMT
Subject: CN=5D69FF65B31C607526E6991DBA9F2635415DAE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:7e:a4:c2:4c:30:75:cc:81:8d:5f:20:0b:
47:d6:f4:4e:cd:74:50:87:cd:30:73:f5:21:db:3d:
d5:4f:ab:98:5c:af:ba:f6:4e:11:52:3b:87:35:05:
68:bd:52:b8:7f:ed:27:05:1e:e2:47:68:6b:7c:e5:
89:53:64:f4:f2:40:f2:b5:d2:45:5c:0e:e6:16:5b:
81:59:38:39:68:8c:e2:21:5a:a1:0f:48:5d:79:08:
47:59:4e:5c:1f:ff:44:34:4d:ab:8f:88:44:e5:5b:
ef:fb:be:dc:a4:99:75:0e:8b:bf:43:d5:1e:5c:77:
59:5b:33:a0:63:1b:d0:1c:87:44:d2:91:85:d4:64:
42:76:ea:64:7b:f5:57:c0:01:59:25:4b:12:25:19:
95:77:61:42:d5:39:aa:bf:66:79:dc:f6:50:f9:6e:
99:a9:06:3b:84:44:fa:a8:90:b9:41:b0:1a:09:49:
e5:a6:f6:19:f2:89:12:ce:be:45:77:2f:15:f7:42:
97:8b:e8:74:ae:5b:10:ce:37:98:31:95:05:45:ac:
10:77:94:69:1b:c5:c3:40:02:e7:46:3b:c8:9c:4f:
fe:b9:b9:d6:a7:fb:b3:43:5a:c1:14:e3:6a:5b:62:
92:1a:a2:34:52:e2:9f:32:65:8f:fb:74:20:c8:57:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:FF:65:B3:1C:60:75:26:E6:99:1D:BA:9F:26:35:41:5D:AE:14
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.46.0/24
46.202.126.0/23
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.188.0/24
46.203.214.0/23
46.203.217.0/24
46.203.219.0/24
46.203.221.0/24
46.203.234.0/24
46.203.250.0/23
91.124.7.0-91.124.11.255
92.112.157.0/24
92.113.66.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
95.134.0.0/24
95.135.111.0-95.135.113.255
178.92.61.0/24
178.92.64.0/23
178.92.67.0-178.92.68.255
178.92.70.0/23
178.92.124.0/24
178.93.2.0/24
178.93.7.0/24
178.93.10.0/24
178.93.12.0/23
178.93.21.0/24
178.93.24.0-178.93.26.255
178.93.29.0/24
178.93.32.0/24
178.93.43.0-178.93.44.255
178.93.57.0/24
178.93.74.0/24
178.93.78.0/24
178.93.87.0/24
178.93.182.0/24
178.93.240.0/24
178.94.31.0/24
178.94.38.0/23
178.94.148.0/24
178.94.150.0/24
178.94.198.0/24
178.94.222.0/24
178.94.233.0/24
178.95.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7f:8d:d8:fe:68:f7:40:18:c6:f5:d6:78:6a:ad:2c:37:6d:
56:24:7e:bd:a7:ec:a2:29:df:e0:0f:51:3b:37:83:dc:ad:6d:
e8:9d:7c:10:16:ef:f6:f4:5b:cf:71:c9:f2:9f:2e:10:db:d9:
b9:47:01:87:31:ca:a2:fd:e8:91:3c:21:56:07:cb:2f:49:3f:
27:7e:9a:62:a6:14:b0:28:46:ba:eb:be:c5:73:a1:87:ec:54:
a3:af:31:2d:71:e1:26:bd:81:cb:2f:ca:f2:a7:c0:db:3b:e7:
76:43:fa:27:4f:b0:f1:91:63:fa:95:b3:20:b5:f3:5c:03:63:
b9:2a:09:f9:21:f2:a1:8b:82:1a:6d:4c:0c:2a:5d:be:61:fb:
9a:96:3d:a9:21:5e:a1:81:3b:5e:4a:32:17:a7:05:45:37:4f:
fd:65:17:17:32:a5:c0:eb:0d:2d:33:48:9c:7f:77:b7:73:8e:
8f:81:93:55:d5:39:39:76:dd:85:81:95:28:1b:aa:ca:04:6e:
52:0f:4e:c9:dd:21:01:ab:85:fc:d1:db:e9:b9:3f:d9:d2:d4:
c7:8c:77:9d:c1:f7:be:19:8d:a7:80:e4:49:6d:ff:4f:bd:6a:
cc:ae:e0:ad:c3:f5:57:ec:c2:74:67:c9:ce:0b:b6:e2:24:09:
a7:d8:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:58:34 2026 by rpki-client