Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: RCsTaZEWt1jNM9GbrKwezs1qiuMl7/eUa1/v6+qOeiM=
Subject key identifier: 10:54:A7:A0:6F:34:B1:42:EB:4A:8E:60:57:58:79:E5:B6:6A:58:BD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2B73F94848E5D1772B86E05A3B0DE6DC320FCE5E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215607.roa
Signing time: Mon 02 Nov 2026 00:22:36 +0000
ROA not before: Mon 02 Nov 2026 00:17:36 +0000
ROA not after: Mon 01 Nov 2027 00:22:36 +0000
asID: 215607
IP address blocks: 178.94.211.0/24 maxlen: 24
178.94.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:73:f9:48:48:e5:d1:77:2b:86:e0:5a:3b:0d:e6:dc:32:0f:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 2 00:17:36 2026 GMT
Not After : Nov 1 00:22:36 2027 GMT
Subject: CN=1054A7A06F34B142EB4A8E60575879E5B66A58BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:fa:26:e9:fa:10:7d:40:1c:d5:4b:3c:8c:
9d:a4:5d:e0:3a:fc:50:fe:1f:1d:05:cc:32:53:85:
9e:5d:0e:ae:74:d0:d4:f7:2e:cf:88:05:0a:e6:de:
20:36:09:a7:a5:c0:ab:e5:02:4c:ac:14:20:82:f3:
b1:c5:b9:00:c6:c2:e0:0e:25:46:8a:2f:66:e9:f2:
bf:aa:fb:1f:d7:c9:5f:3e:e1:27:1a:67:80:08:d7:
5f:43:d1:d3:03:48:24:f2:fe:86:c8:99:79:5e:5a:
44:71:cc:c5:c2:28:2e:3e:31:79:70:7d:06:fd:ac:
9e:ec:5c:bb:ce:15:da:ac:06:a2:1c:5b:4b:04:b2:
34:91:5e:71:af:0c:00:73:28:48:34:ff:85:40:dd:
d7:18:dc:a5:bc:92:b8:b1:cf:2f:75:db:74:2e:c0:
a4:b7:52:e9:88:2d:b6:9c:5d:c9:6a:69:56:89:66:
a7:46:64:59:57:80:57:05:ac:8a:e7:da:62:e1:0f:
23:87:64:ac:22:a4:8f:93:5c:f5:f7:27:d0:6f:df:
e9:10:08:9d:0d:01:24:05:2f:ad:15:35:ff:94:2e:
2f:e1:e1:36:5c:60:94:20:96:43:3e:4d:cb:4e:61:
72:e1:95:b3:8f:4c:9a:6c:11:1c:af:74:71:64:4d:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:A7:A0:6F:34:B1:42:EB:4A:8E:60:57:58:79:E5:B6:6A:58:BD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.211.0/24
178.94.242.0/24
Signature Algorithm: sha256WithRSAEncryption
87:55:37:6f:45:31:f4:8f:52:3c:7e:4f:dc:08:91:7a:85:11:
6c:94:b7:da:4b:da:07:f7:b5:8e:fc:9c:e1:2a:9e:e9:4c:b6:
30:9d:27:ba:08:c0:b6:f4:ab:99:58:0f:53:fd:c5:d8:30:3c:
5a:45:43:42:86:7a:56:89:e2:9d:6f:cd:30:d7:aa:ff:ba:e3:
84:f8:f3:b1:9a:ff:f1:78:67:db:9c:e0:5d:ef:53:c7:8d:62:
a0:2e:a3:87:69:46:81:15:ac:54:b7:33:cc:83:03:80:69:6d:
9b:1d:6b:c5:a3:f9:d4:83:9f:10:86:bb:46:42:95:48:d0:ac:
46:99:9c:ae:0d:0d:e5:5c:45:6a:54:30:5d:bf:99:8f:7a:b3:
24:9c:6b:af:3b:77:2a:d8:ef:fc:83:50:36:47:4d:59:b5:7b:
ce:32:dc:53:fc:ae:c1:3a:a4:33:22:3f:0d:9e:b2:fb:6b:5a:
72:41:6f:a8:e7:b6:f9:22:33:53:75:b9:c9:b2:c3:ce:0d:ed:
b5:03:f5:ce:e4:1a:53:83:70:d1:2e:50:ee:e2:0a:60:95:05:
1c:a6:23:2e:c6:7c:80:29:77:ff:61:fa:be:18:7e:ba:25:d1:
66:4e:74:04:db:f4:f4:80:4c:37:78:79:51:66:f3:78:3f:43:
93:1b:89:3d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUK3P5SEjl0XcrhuBaOw3m3DIPzl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjExMDIwMDE3MzZaFw0yNzExMDEwMDIyMzZaMDMxMTAvBgNV
BAMTKDEwNTRBN0EwNkYzNEIxNDJFQjRBOEU2MDU3NTg3OUU1QjY2QTU4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0/om6foQfUAc1Us8jJ2kXeA6
/FD+Hx0FzDJThZ5dDq500NT3Ls+IBQrm3iA2CaelwKvlAkysFCCC87HFuQDGwuAO
JUaKL2bp8r+q+x/XyV8+4ScaZ4AI119D0dMDSCTy/obImXleWkRxzMXCKC4+MXlw
fQb9rJ7sXLvOFdqsBqIcW0sEsjSRXnGvDABzKEg0/4VA3dcY3KW8krixzy9123Qu
wKS3UumILbacXclqaVaJZqdGZFlXgFcFrIrn2mLhDyOHZKwipI+TXPX3J9Bv3+kQ
CJ0NASQFL60VNf+ULi/h4TZcYJQglkM+TctOYXLhlbOPTJpsERyvdHFkTb0dAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUEFSnoG80sULrSo5gV1h55bZqWL0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1NjA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsl7T
AwQAsl7yMA0GCSqGSIb3DQEBCwUAA4IBAQCHVTdvRTH0j1I8fk/cCJF6hRFslLfa
S9oH97WO/JzhKp7pTLYwnSe6CMC29KuZWA9T/cXYMDxaRUNChnpWieKdb80w16r/
uuOE+POxmv/xeGfbnOBd71PHjWKgLqOHaUaBFaxUtzPMgwOAaW2bHWvFo/nUg58Q
hrtGQpVI0KxGmZyuDQ3lXEVqVDBdv5mPerMknGuvO3cq2O/8g1A2R01ZtXvOMtxT
/K7BOqQzIj8NnrL7a1pyQW+o57b5IjNTdbnJssPODe21A/XO5BpTg3DRLlDu4gpg
lQUcpiMuxnyAKXf/Yfq+GH66JdFmTnQE2/T0gEw3eHlRZvN4P0OTG4k9
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:19:58 2026 by rpki-client