Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: nIXA4UWVB/0UTJGLw/6HcCsmEHwiOAuMNsZJB/EylG0=
Subject key identifier: 09:F8:F4:80:7F:72:A1:10:B0:30:89:B1:F6:31:E2:7D:47:50:CE:8A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5BF455D08FF43BA238E796549B9350596CE69C87
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Thu 02 Apr 2026 06:44:50 +0000
ROA not before: Thu 02 Apr 2026 06:39:50 +0000
ROA not after: Thu 01 Apr 2027 06:44:50 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.215.0/24 maxlen: 24
46.203.217.0/24 maxlen: 24
46.203.219.0/24 maxlen: 24
46.203.221.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
92.113.66.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.112.0/24 maxlen: 24
95.135.113.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.92.64.0/24 maxlen: 24
178.92.65.0/24 maxlen: 24
178.92.67.0/24 maxlen: 24
178.92.68.0/24 maxlen: 24
178.92.70.0/24 maxlen: 24
178.92.71.0/24 maxlen: 24
178.92.124.0/24 maxlen: 24
178.93.7.0/24 maxlen: 24
178.93.10.0/24 maxlen: 24
178.93.12.0/24 maxlen: 24
178.93.13.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
178.93.24.0/24 maxlen: 24
178.93.25.0/24 maxlen: 24
178.93.26.0/24 maxlen: 24
178.93.29.0/24 maxlen: 24
178.93.32.0/24 maxlen: 24
178.93.43.0/24 maxlen: 24
178.93.44.0/24 maxlen: 24
178.93.57.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
178.94.148.0/24 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.222.0/24 maxlen: 24
178.94.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f4:55:d0:8f:f4:3b:a2:38:e7:96:54:9b:93:50:59:6c:e6:9c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 2 06:39:50 2026 GMT
Not After : Apr 1 06:44:50 2027 GMT
Subject: CN=09F8F4807F72A110B03089B1F631E27D4750CE8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:df:3c:6c:c3:0a:3b:7a:fb:aa:43:6b:bb:
fd:42:97:2e:53:ad:d2:d8:d1:1e:41:fd:ca:16:f2:
5d:3a:ed:9e:53:9e:35:8e:a3:66:77:7a:9e:93:f6:
5c:41:75:c7:53:de:ec:78:d8:a2:df:39:13:b0:75:
e0:02:de:37:14:20:87:4f:4a:7d:ce:43:6f:65:14:
7f:2a:cd:c0:36:20:97:10:85:b2:98:3b:68:90:c2:
97:0d:aa:e0:3e:99:59:a8:7e:e2:95:90:b9:f4:91:
21:af:95:9f:78:fc:c5:fd:08:6e:29:99:d0:9e:34:
93:6c:a5:72:9a:fc:b0:6c:2c:d2:25:e7:c3:0e:86:
e3:06:a2:63:3c:25:d9:b0:d0:5d:24:69:3e:a9:a9:
3a:10:ae:b9:68:a8:32:89:4d:98:50:ec:a6:c6:16:
ef:91:6b:b0:1d:ba:dd:8d:29:57:c2:08:44:db:18:
b5:c9:6e:ea:2b:d6:dc:d0:bc:66:1d:1e:4d:8b:ef:
00:e1:cb:f4:97:d8:40:f2:f4:e5:18:8b:f9:48:89:
39:b9:c0:d9:a5:1e:c3:1c:04:dc:9c:cb:09:3a:b9:
d0:d4:7f:a0:45:9d:43:3b:86:ef:cd:94:38:8b:ad:
13:55:28:e7:dc:33:b3:ad:53:b3:59:f5:34:fc:00:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:F4:80:7F:72:A1:10:B0:30:89:B1:F6:31:E2:7D:47:50:CE:8A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.214.0/23
46.203.217.0/24
46.203.219.0/24
46.203.221.0/24
46.203.234.0/24
92.113.66.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
95.135.111.0-95.135.113.255
178.92.61.0/24
178.92.64.0/23
178.92.67.0-178.92.68.255
178.92.70.0/23
178.92.124.0/24
178.93.7.0/24
178.93.10.0/24
178.93.12.0/23
178.93.21.0/24
178.93.24.0-178.93.26.255
178.93.29.0/24
178.93.32.0/24
178.93.43.0-178.93.44.255
178.93.57.0/24
178.93.74.0/24
178.94.148.0/24
178.94.150.0/24
178.94.222.0/24
178.94.233.0/24
Signature Algorithm: sha256WithRSAEncryption
30:84:ae:bd:be:0b:51:d0:8d:87:05:93:8d:c8:b7:8a:4e:ee:
69:30:5c:4d:a0:4a:65:9d:e5:6a:95:e4:09:f9:7c:6a:3e:51:
74:9d:f7:bb:39:c7:8e:78:9d:65:26:a6:b9:b1:28:c7:63:34:
c8:4b:98:cb:9e:d0:17:52:e5:f0:39:97:99:00:dc:4d:6d:c3:
3d:67:3f:dd:4e:d9:1e:38:a1:23:76:73:21:0d:68:d3:0d:87:
7d:4a:c0:24:a1:c3:38:fa:f5:74:fa:92:e2:8b:92:0f:e3:31:
fb:95:dd:d7:39:33:15:6a:b0:4f:0d:28:a9:dc:f7:d4:b3:59:
62:2a:90:09:fa:61:d8:16:cd:19:c4:ec:66:5d:7c:7f:c0:cb:
1b:be:2d:60:70:08:89:75:64:52:6b:e7:2e:0c:16:cb:d9:55:
b6:96:fd:29:4a:bc:fa:c8:26:9e:7c:c5:55:24:80:78:b1:e1:
e9:98:32:27:c0:cc:71:90:99:3a:0a:c8:5c:2b:ad:90:d3:2a:
a5:50:bf:20:5c:bb:7e:90:10:44:5b:5a:be:53:0f:8b:7d:df:
97:89:6c:5f:fc:a8:9d:02:1e:2a:64:af:ba:18:60:1b:91:31:
e0:c2:82:07:fb:33:a2:68:d7:22:f5:a0:d9:56:7e:a6:9d:58:
d1:65:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:51:31 2026 by rpki-client