Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
File: AS215294.roa (raw, json)
Hash identifier: AmfRnr+046JJY0IwCZYiSBJOREZZwO8sUMcsSOZQ/as=
Subject key identifier: BA:7D:14:EF:0C:E5:64:0C:88:73:F5:D0:90:88:5A:5E:90:7F:ED:87
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2CC96F73562D700A68284955B34709490C689C3C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
Signing time: Thu 07 Aug 2025 08:55:50 +0000
ROA not before: Thu 07 Aug 2025 08:50:50 +0000
ROA not after: Thu 06 Aug 2026 08:55:50 +0000
asID: 215294
IP address blocks: 46.203.77.0/24 maxlen: 24
46.203.120.0/24 maxlen: 24
46.203.150.0/24 maxlen: 24
46.203.214.0/24 maxlen: 24
46.203.234.0/24 maxlen: 24
92.113.176.0/24 maxlen: 24
92.113.177.0/24 maxlen: 24
92.113.178.0/24 maxlen: 24
92.113.179.0/24 maxlen: 24
92.113.180.0/24 maxlen: 24
92.113.181.0/24 maxlen: 24
92.113.182.0/24 maxlen: 24
92.113.183.0/24 maxlen: 24
92.113.192.0/24 maxlen: 24
92.113.195.0/24 maxlen: 24
92.113.204.0/24 maxlen: 24
92.113.205.0/24 maxlen: 24
92.113.206.0/24 maxlen: 24
92.113.207.0/24 maxlen: 24
92.113.216.0/24 maxlen: 24
92.113.217.0/24 maxlen: 24
92.113.218.0/24 maxlen: 24
92.113.219.0/24 maxlen: 24
178.92.61.0/24 maxlen: 24
178.93.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c9:6f:73:56:2d:70:0a:68:28:49:55:b3:47:09:49:0c:68:9c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 7 08:50:50 2025 GMT
Not After : Aug 6 08:55:50 2026 GMT
Subject: CN=BA7D14EF0CE5640C8873F5D090885A5E907FED87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:24:4c:ca:f1:67:77:a2:3b:66:ee:5c:0c:
96:74:c4:62:71:4c:4e:7a:85:d5:40:7e:85:09:56:
5d:8a:b4:c0:70:cb:66:49:76:1d:00:16:33:8a:eb:
7b:58:19:9a:1c:01:f8:0e:ea:78:c6:1f:49:ef:d5:
bf:86:1c:27:04:ba:61:60:29:29:d5:67:58:df:9f:
a5:3a:5c:07:d4:43:f5:38:75:29:76:62:1e:1d:bf:
d0:1a:6f:be:2a:fb:96:d6:bb:1a:d8:2d:a4:28:15:
cd:34:3b:7c:cd:6d:26:22:6d:d6:e6:21:2c:b6:90:
6f:38:d5:3e:52:4f:5c:5e:82:b0:b8:f6:49:31:b7:
ff:c1:65:a4:76:dd:95:ae:76:ab:2c:2e:43:d5:08:
e4:5f:e1:1d:d8:4a:37:5b:9d:8e:59:76:a8:7a:dd:
76:6b:e3:37:2b:a5:ce:eb:0e:87:70:01:4b:53:39:
88:75:4b:af:9f:cf:1e:9a:44:ba:66:19:55:c5:44:
59:61:ee:cc:17:05:df:da:12:e7:83:25:3e:37:97:
d3:91:b6:7b:cc:13:77:ce:50:b2:1c:3e:67:74:20:
3d:28:41:65:1c:1e:55:a4:35:ef:92:0c:06:f0:7b:
d6:d8:6f:d1:5d:65:69:bb:c7:70:ab:95:40:6c:9a:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:14:EF:0C:E5:64:0C:88:73:F5:D0:90:88:5A:5E:90:7F:ED:87
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.77.0/24
46.203.120.0/24
46.203.150.0/24
46.203.214.0/24
46.203.234.0/24
92.113.176.0/21
92.113.192.0/24
92.113.195.0/24
92.113.204.0/22
92.113.216.0/22
178.92.61.0/24
178.93.74.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7c:a5:3a:0d:68:c8:83:68:cc:83:d6:53:b5:5a:e0:21:65:
96:19:c4:88:04:ae:98:78:63:8b:a3:4e:bb:88:09:d3:3f:2a:
c8:8e:48:0f:31:b4:50:52:92:7c:38:aa:ca:56:5a:ca:94:f4:
85:8b:e9:cd:1c:00:39:a0:70:1a:db:70:8e:09:39:86:21:69:
fd:b4:9c:9d:5f:56:9d:85:c2:21:21:dc:ff:33:08:3f:61:04:
67:26:5f:a0:15:ed:d4:9a:50:50:0e:fc:63:48:c0:5c:3b:57:
96:0e:9a:2e:e5:99:b1:50:86:43:76:73:a4:7f:be:75:eb:5e:
61:dd:f5:e3:d9:81:ba:d1:2a:c5:2b:d8:54:82:7b:84:f3:7e:
15:20:3a:43:16:d7:63:a3:0b:2a:75:8f:79:c2:c4:44:87:1e:
e2:d6:ea:8d:06:1c:4f:c4:b4:03:57:16:cd:4a:a5:83:37:4d:
68:67:07:fc:20:3a:02:77:1e:cd:3f:fc:af:63:21:8f:09:11:
b5:ab:af:b4:9b:c8:d9:99:c1:2d:aa:25:eb:db:75:3b:42:fb:
d2:b6:fc:a9:39:32:22:0d:a7:b4:2b:19:42:cf:a8:0c:73:b7:
32:53:b6:cc:78:34:be:52:22:81:d7:52:78:59:59:1c:b3:3d:
5b:a2:cf:c1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIULMlvc1YtcApoKElVs0cJSQxonDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA4MDcwODUwNTBaFw0yNjA4MDYwODU1NTBaMDMxMTAvBgNV
BAMTKEJBN0QxNEVGMENFNTY0MEM4ODczRjVEMDkwODg1QTVFOTA3RkVEODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYSRMyvFnd6I7Zu5cDJZ0xGJx
TE56hdVAfoUJVl2KtMBwy2ZJdh0AFjOK63tYGZocAfgO6njGH0nv1b+GHCcEumFg
KSnVZ1jfn6U6XAfUQ/U4dSl2Yh4dv9Aab74q+5bWuxrYLaQoFc00O3zNbSYibdbm
ISy2kG841T5ST1xegrC49kkxt//BZaR23ZWudqssLkPVCORf4R3YSjdbnY5Zdqh6
3XZr4zcrpc7rDodwAUtTOYh1S6+fzx6aRLpmGVXFRFlh7swXBd/aEueDJT43l9OR
tnvME3fOULIcPmd0ID0oQWUcHlWkNe+SDAbwe9bYb9FdZWm7x3CrlUBsmsOLAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUun0U7wzlZAyIc/XQkIhaXpB/7YcwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALstN
AwQALst4AwQALsuWAwQALsvWAwQALsvqAwQDXHGwAwQAXHHAAwQAXHHDAwQCXHHM
AwQCXHHYAwQAslw9AwQAsl1KMA0GCSqGSIb3DQEBCwUAA4IBAQBwfKU6DWjIg2jM
g9ZTtVrgIWWWGcSIBK6YeGOLo067iAnTPyrIjkgPMbRQUpJ8OKrKVlrKlPSFi+nN
HAA5oHAa23COCTmGIWn9tJydX1adhcIhIdz/Mwg/YQRnJl+gFe3UmlBQDvxjSMBc
O1eWDpou5ZmxUIZDdnOkf751615h3fXj2YG60SrFK9hUgnuE834VIDpDFtdjowsq
dY95wsREhx7i1uqNBhxPxLQDVxbNSqWDN01oZwf8IDoCdx7NP/yvYyGPCRG1q6+0
m8jZmcEtqiXr23U7QvvStvypOTIiDae0KxlCz6gMc7cyU7bMeDS+UiKB11J4WVkc
sz1bos/B
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:46 2025 by rpki-client