Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: 4m+JzBSefNhayf+mgI0YfMbFX6Q0uExYuJCbWVcQEmw=
Subject key identifier: B2:2D:6A:0A:34:6F:F6:AB:A9:A1:A6:66:77:26:65:39:1F:09:AF:51
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 28D402D2168F359637DC6393A0F13186357178AC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
Signing time: Mon 11 May 2026 09:00:49 +0000
ROA not before: Mon 11 May 2026 08:55:49 +0000
ROA not after: Mon 10 May 2027 09:00:49 +0000
asID: 215294
IP address blocks: 51.146.152.0/24 maxlen: 24
51.146.184.0/24 maxlen: 24
51.146.185.0/24 maxlen: 24
51.146.186.0/24 maxlen: 24
51.146.237.0/24 maxlen: 24
51.146.247.0/24 maxlen: 24
51.146.248.0/24 maxlen: 24
51.194.32.0/24 maxlen: 24
51.194.39.0/24 maxlen: 24
51.194.67.0/24 maxlen: 24
51.194.71.0/24 maxlen: 24
51.194.77.0/24 maxlen: 24
51.194.81.0/24 maxlen: 24
51.194.96.0/24 maxlen: 24
51.194.97.0/24 maxlen: 24
51.194.128.0/24 maxlen: 24
51.194.142.0/24 maxlen: 24
51.194.195.0/24 maxlen: 24
51.194.203.0/24 maxlen: 24
51.194.205.0/24 maxlen: 24
51.194.211.0/24 maxlen: 24
51.194.219.0/24 maxlen: 24
51.194.225.0/24 maxlen: 24
51.194.227.0/24 maxlen: 24
51.194.231.0/24 maxlen: 24
51.194.232.0/24 maxlen: 24
51.194.234.0/24 maxlen: 24
51.194.242.0/24 maxlen: 24
51.194.246.0/24 maxlen: 24
51.194.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d4:02:d2:16:8f:35:96:37:dc:63:93:a0:f1:31:86:35:71:78:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 11 08:55:49 2026 GMT
Not After : May 10 09:00:49 2027 GMT
Subject: CN=B22D6A0A346FF6ABA9A1A666772665391F09AF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:95:52:e5:4b:c9:d1:86:64:34:32:6e:42:
10:28:11:45:44:06:59:93:8c:06:01:6a:a4:a6:55:
bc:4f:b7:d1:e7:4d:f6:ba:cb:1a:19:bb:e8:3a:2c:
c6:72:b2:3f:9c:87:12:1f:2a:de:9e:f7:f2:5f:18:
bc:0f:de:f2:8a:91:4a:6d:b1:a7:77:18:56:7a:27:
fc:d8:93:0e:44:eb:53:f1:e3:f7:57:f8:4d:03:87:
33:19:cd:6b:5f:25:ba:2f:e7:c8:64:e0:70:5a:c8:
73:d4:21:89:42:03:be:5b:40:48:43:7e:6b:19:ba:
78:81:13:87:ad:27:ca:e9:35:01:8a:9e:d3:81:3a:
e5:6e:72:8d:b0:cb:cd:66:18:fb:24:5a:06:f9:8c:
75:60:ce:a8:42:3b:15:6d:58:96:f4:ec:02:af:5d:
78:2f:3b:76:65:c4:64:e1:ce:7f:66:58:b1:23:e4:
db:5c:f4:50:16:8a:dc:c5:56:d1:b5:0f:9c:df:61:
2a:63:22:8f:56:43:7f:6b:fd:4c:7b:7f:ac:6a:43:
8e:55:57:7a:7d:82:07:51:51:54:6b:02:3a:55:f5:
a2:ea:54:7b:e4:e8:5f:5c:f0:08:5d:9e:c0:47:c5:
ba:b7:1b:b2:60:83:01:39:63:91:9f:ed:58:a0:12:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:6A:0A:34:6F:F6:AB:A9:A1:A6:66:77:26:65:39:1F:09:AF:51
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.152.0/24
51.146.184.0-51.146.186.255
51.146.237.0/24
51.146.247.0-51.146.248.255
51.194.32.0/24
51.194.39.0/24
51.194.67.0/24
51.194.71.0/24
51.194.77.0/24
51.194.81.0/24
51.194.96.0/23
51.194.128.0/24
51.194.142.0/24
51.194.195.0/24
51.194.203.0/24
51.194.205.0/24
51.194.211.0/24
51.194.219.0/24
51.194.225.0/24
51.194.227.0/24
51.194.231.0-51.194.232.255
51.194.234.0/24
51.194.242.0/24
51.194.246.0/24
51.194.248.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f8:a2:d6:4d:5b:9e:b5:d1:e0:f4:ce:7d:5c:67:6b:b5:2f:
e9:b0:e7:c2:2e:96:be:93:25:e7:8c:68:fa:0e:4c:eb:2e:76:
cd:63:eb:70:82:e8:75:a8:85:4f:ff:00:dc:71:88:84:81:c9:
c8:ae:c5:d4:02:09:e3:76:d4:38:bf:19:13:d7:46:92:66:1a:
89:b3:fe:d0:02:89:22:8b:89:1d:f1:92:05:5b:b8:52:16:09:
d5:dd:4b:1b:5b:45:64:01:52:1b:fc:3b:45:1d:9b:f7:48:cb:
b4:a9:9d:8d:e5:e2:6e:29:93:b7:72:5e:9e:60:77:08:85:53:
05:53:0f:44:c4:01:69:dc:34:95:87:42:8f:81:0a:48:b4:c7:
55:d2:3c:31:ae:20:67:f2:d2:0b:dc:c8:11:c5:fc:b3:a1:73:
c2:69:68:0b:cf:33:65:32:83:9d:bf:16:4f:e8:78:41:be:1c:
8e:9c:53:61:6d:9b:67:d9:91:86:d6:ee:41:69:2a:bb:18:f1:
2e:ca:27:4c:31:b4:8e:7e:72:28:49:8e:2c:5b:d3:56:76:e4:
39:52:40:ec:69:f8:8c:e4:e3:b5:47:38:dd:28:6c:07:c2:b4:
6d:5c:a9:24:ff:c7:18:9f:68:6f:6a:8a:b5:23:32:eb:00:39:
14:66:7b:6f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUKNQC0haPNZY33GOToPExhjVxeKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MTEwODU1NDlaFw0yNzA1MTAwOTAwNDlaMDMxMTAvBgNV
BAMTKEIyMkQ2QTBBMzQ2RkY2QUJBOUExQTY2Njc3MjY2NTM5MUYwOUFGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uJVS5UvJ0YZkNDJuQhAoEUVE
BlmTjAYBaqSmVbxPt9HnTfa6yxoZu+g6LMZysj+chxIfKt6e9/JfGLwP3vKKkUpt
sad3GFZ6J/zYkw5E61Px4/dX+E0DhzMZzWtfJbov58hk4HBayHPUIYlCA75bQEhD
fmsZuniBE4etJ8rpNQGKntOBOuVuco2wy81mGPskWgb5jHVgzqhCOxVtWJb07AKv
XXgvO3ZlxGThzn9mWLEj5Ntc9FAWitzFVtG1D5zfYSpjIo9WQ39r/Ux7f6xqQ45V
V3p9ggdRUVRrAjpV9aLqVHvk6F9c8AhdnsBHxbq3G7JggwE5Y5Gf7VigEqvtAgMB
AAGjggK3MIICszAdBgNVHQ4EFgQUsi1qCjRv9qupoaZmdyZlOR8Jr1EwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4D
BAAzkpgwDAMEAzOSuAMEADOSugMEADOS7TAMAwQAM5L3AwQAM5L4AwQAM8IgAwQA
M8InAwQAM8JDAwQAM8JHAwQAM8JNAwQAM8JRAwQBM8JgAwQAM8KAAwQAM8KOAwQA
M8LDAwQAM8LLAwQAM8LNAwQAM8LTAwQAM8LbAwQAM8LhAwQAM8LjMAwDBAAzwucD
BAAzwugDBAAzwuoDBAAzwvIDBAAzwvYDBAAzwvgwDQYJKoZIhvcNAQELBQADggEB
AHL4otZNW5610eD0zn1cZ2u1L+mw58Iulr6TJeeMaPoOTOsuds1j63CC6HWohU//
ANxxiISByciuxdQCCeN21Di/GRPXRpJmGomz/tACiSKLiR3xkgVbuFIWCdXdSxtb
RWQBUhv8O0Udm/dIy7SpnY3l4m4pk7dyXp5gdwiFUwVTD0TEAWncNJWHQo+BCki0
x1XSPDGuIGfy0gvcyBHF/LOhc8JpaAvPM2Uyg52/Fk/oeEG+HI6cU2Ftm2fZkYbW
7kFpKrsY8S7KJ0wxtI5+cihJjixb01Z25DlSQOxp+Izk47VHON0obAfCtG1cqST/
xxifaG9qirUjMusAORRme28=
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:57 2026 by rpki-client