Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: Df05TbGbrKim2DRxjkzJeUiaKQskqxWtMXwza5Jt/bw=
Subject key identifier: D9:1F:57:BF:B5:0C:2F:31:B4:2D:CC:BB:5C:94:E4:88:FD:47:55:64
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5B9BA63763F84865C7471688171DF5B4E632B891
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Tue 21 Jul 2026 08:08:34 +0000
ROA not before: Tue 21 Jul 2026 08:03:34 +0000
ROA not after: Tue 20 Jul 2027 08:08:34 +0000
asID: 215294
IP address blocks: 51.146.7.0/24 maxlen: 24
51.146.12.0/24 maxlen: 24
51.146.17.0/24 maxlen: 24
51.146.68.0/24 maxlen: 24
51.146.71.0/24 maxlen: 24
51.146.72.0/24 maxlen: 24
51.146.79.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.100.0/24 maxlen: 24
51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.78.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.172.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.201.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
51.194.252.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.20.0/24 maxlen: 24
51.241.84.0/24 maxlen: 24
51.241.215.0/24 maxlen: 24
78.105.113.0/24 maxlen: 24
78.105.115.0/24 maxlen: 24
78.105.192.0/24 maxlen: 24
78.105.239.0/24 maxlen: 24
188.220.30.0/24 maxlen: 24
188.221.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9b:a6:37:63:f8:48:65:c7:47:16:88:17:1d:f5:b4:e6:32:b8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 21 08:03:34 2026 GMT
Not After : Jul 20 08:08:34 2027 GMT
Subject: CN=D91F57BFB50C2F31B42DCCBB5C94E488FD475564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:73:bb:33:34:a3:77:c9:04:fb:a2:55:3f:
b9:20:27:d8:48:a9:7a:e6:37:a8:11:6e:60:2c:57:
33:74:f9:56:ba:c7:66:71:d3:b2:fa:d3:53:cc:ac:
a8:b4:28:12:2d:65:ee:28:2e:f9:f2:14:10:74:b2:
a6:f9:ee:d4:fa:9f:45:56:35:83:3c:d6:8d:a6:fa:
84:b2:dd:be:6c:c9:b6:a3:92:f3:6c:4e:b8:f7:86:
3a:6a:bf:e3:21:07:51:e6:98:44:6c:9e:0c:65:d4:
ac:f6:60:a1:f1:6e:4d:47:1f:9d:94:77:3c:ad:46:
cb:3d:41:bc:a7:fc:b0:c9:4a:05:b0:a2:15:b1:95:
9b:0d:b8:32:7c:5a:24:23:9c:16:f9:10:56:c3:21:
53:71:9c:de:46:e6:e0:c6:6e:d0:98:ac:13:30:97:
de:92:a5:9a:62:3e:4f:36:b7:46:02:8b:4f:7d:a1:
4b:e0:a0:82:8d:17:e9:81:c0:15:dc:82:c6:33:c0:
37:e0:49:90:57:39:af:18:fa:93:77:d5:03:d1:07:
5d:54:78:d6:7a:5d:d0:a7:37:b8:3d:78:94:21:45:
32:1e:60:a5:86:02:22:2e:ab:59:a1:8e:a9:f2:fe:
89:17:b3:28:98:7a:47:e0:00:22:32:09:63:bc:eb:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:57:BF:B5:0C:2F:31:B4:2D:CC:BB:5C:94:E4:88:FD:47:55:64
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.7.0/24
51.146.12.0/24
51.146.17.0/24
51.146.68.0/24
51.146.71.0-51.146.72.255
51.146.79.0/24
51.146.83.0/24
51.146.100.0/24
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/24
51.194.39.0/24
51.194.67.0/24
51.194.71.0/24
51.194.77.0-51.194.78.255
51.194.81.0/24
51.194.96.0/23
51.194.142.0/24
51.194.172.0/24
51.194.195.0/24
51.194.201.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.242.0/24
51.194.246.0/24
51.194.248.0/24
51.194.252.0/24
51.241.2.0/24
51.241.20.0/24
51.241.84.0/24
51.241.215.0/24
78.105.113.0/24
78.105.115.0/24
78.105.192.0/24
78.105.239.0/24
188.220.30.0/24
188.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
75:26:cf:45:f2:54:15:c2:e2:63:de:08:78:5a:c1:ef:5f:6f:
64:43:5d:10:d2:36:eb:b6:00:af:17:10:b3:04:46:13:c9:26:
a6:68:97:9d:b0:16:b0:cf:ac:08:6a:11:44:74:87:32:67:41:
cc:69:85:d5:ce:47:8b:b2:de:25:76:3b:a3:7a:f2:19:2a:b9:
1a:da:b6:ae:08:53:c8:ea:aa:9b:01:76:98:35:34:07:37:6c:
e6:8c:0f:b6:5c:82:83:5e:62:f9:58:2a:f2:82:42:33:c6:f6:
a0:c9:9a:1e:b8:6b:86:76:75:76:15:34:20:c2:a5:37:63:40:
89:f0:58:bc:c3:63:2c:5d:48:3f:65:fc:be:c8:9a:1e:7b:d1:
40:92:70:b3:3d:7a:83:4e:0b:a3:4d:0f:68:74:d3:5d:e1:a9:
36:38:83:99:fb:42:92:64:bd:6c:fe:c3:17:9f:03:6b:3e:7b:
26:dd:f7:77:ef:ed:55:d8:d6:c9:3a:f8:00:73:b9:80:ab:ca:
c4:59:2b:12:d4:8d:56:28:3f:b6:59:b0:f4:04:4d:6d:f0:cd:
f9:e9:58:d6:7f:9d:c4:43:f0:ce:bb:12:a4:b5:f2:a6:80:c0:
d9:6d:0f:e2:75:35:24:64:dd:d9:2a:26:a7:57:59:bf:c5:ff:
db:af:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:56 2026 by rpki-client