Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
File: AS215607.roa (raw, json)
Hash identifier: Gig2/XwyZEHpKrvQ2V3nlKlRiBxhG2aGcD7wrCdwU4M=
Subject key identifier: 26:0B:B0:05:D8:9A:41:D7:38:C8:10:3A:D9:9D:FC:74:88:3D:4B:5A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7DB60E3C972E6F30987F02E4C884236D6607B99A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
Signing time: Mon 21 Sep 2026 12:24:42 +0000
ROA not before: Mon 21 Sep 2026 12:19:42 +0000
ROA not after: Mon 20 Sep 2027 12:24:42 +0000
asID: 215607
IP address blocks: 51.241.188.0/24 maxlen: 24
94.118.16.0/24 maxlen: 24
94.118.31.0/24 maxlen: 24
94.118.68.0/24 maxlen: 24
94.118.73.0/24 maxlen: 24
94.118.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b6:0e:3c:97:2e:6f:30:98:7f:02:e4:c8:84:23:6d:66:07:b9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 12:19:42 2026 GMT
Not After : Sep 20 12:24:42 2027 GMT
Subject: CN=260BB005D89A41D738C8103AD99DFC74883D4B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:f2:82:6a:f4:c0:2c:38:3e:1f:79:62:b4:
df:23:b6:15:d5:7e:1b:cc:19:4b:27:c7:92:9a:43:
0a:ab:e0:98:95:f3:94:de:96:8e:ee:88:8a:c3:a1:
11:22:dd:c4:8f:b2:2b:e0:8d:6a:6f:fe:e9:84:0b:
c1:b9:d4:37:58:6b:e0:a4:1c:8c:b2:1b:cc:d7:a4:
50:13:4f:91:6f:a3:b2:d7:2e:6b:8d:f1:0d:cc:98:
64:ed:df:22:3c:a4:b5:bb:34:c0:2a:96:15:02:b0:
44:96:10:6f:6c:d0:e1:00:e4:bd:38:d6:36:35:57:
38:1d:17:7a:cb:db:8e:70:20:88:f6:df:78:b7:2a:
0e:a4:12:8f:34:f4:c6:ec:00:e5:0f:24:16:ee:72:
b9:4b:d3:08:aa:5f:84:95:f2:b4:01:4c:ec:d0:5a:
f5:24:87:3e:f6:98:89:5e:a0:91:2e:d1:42:71:cb:
94:91:e1:04:fe:dc:36:37:35:d8:9d:df:58:0e:21:
37:6f:00:c6:10:51:5c:e4:3c:bd:cb:23:7f:f5:b2:
68:2b:ef:9b:32:74:f8:1c:71:dc:73:f5:1b:f3:5c:
18:86:9c:b4:15:46:24:23:1c:b0:62:af:1e:9b:83:
38:ea:20:23:5f:f4:85:7e:8e:cc:ad:e5:d7:bf:ee:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0B:B0:05:D8:9A:41:D7:38:C8:10:3A:D9:9D:FC:74:88:3D:4B:5A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS215607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.188.0/24
94.118.16.0/24
94.118.31.0/24
94.118.68.0/24
94.118.73.0/24
94.118.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ae:98:af:f2:01:db:63:2c:fd:d0:4d:e9:18:5e:71:6e:c2:
8e:b3:a1:ef:ff:a4:ae:fa:e4:df:f2:69:15:6e:64:31:67:61:
37:ea:0c:46:ba:9d:f1:b1:f8:0a:5b:ec:8a:3d:ca:bf:c4:c6:
c6:87:aa:77:19:60:11:7c:1c:c5:1c:41:b1:2f:b5:df:50:7d:
49:86:18:5c:d1:db:bf:28:00:f2:85:1b:c1:d8:a5:30:c8:4b:
29:3f:e8:ff:37:2f:39:12:48:22:6c:3d:d4:36:39:48:c4:af:
6c:5a:0b:9f:d1:a4:f6:71:4b:ee:7c:7d:6d:79:46:10:75:a9:
f0:a6:67:bf:db:cb:1e:47:c4:62:09:3b:4c:c8:8d:d0:b8:3d:
dd:cc:46:cc:41:02:8f:76:84:a7:3a:fd:44:f5:d2:72:ac:64:
e8:4c:09:81:2a:15:1a:59:c2:15:74:bc:4f:f5:73:36:89:c8:
7c:ef:0d:9b:3c:86:a4:2a:82:55:49:99:33:8c:7e:64:2b:7c:
d6:fd:4f:e3:6f:14:fd:38:4b:00:a8:3a:f5:93:e0:e4:40:ff:
d1:d2:3c:c4:fe:d9:cd:04:87:66:24:9c:ec:46:f0:0a:f1:5e:
f0:da:29:fd:93:b2:6e:e4:6d:5c:54:3d:6f:ca:e5:00:50:2b:
cd:ce:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:07 2026 by rpki-client