This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: Cgl1bN/H7FgAlm+IlbRzJFXIF+Uk+tzQoapBhX7gh2Y=
Subject key identifier: 03:A3:30:D3:BA:21:4E:24:E7:37:EF:05:B0:18:D4:49:5F:C5:44:A8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 46B079869FDEB04BB2D6544D529DDF5EBA9854B8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215304.roa
Signing time: Wed 03 Dec 2025 12:35:33 +0000
ROA not before: Wed 03 Dec 2025 12:30:33 +0000
ROA not after: Wed 02 Dec 2026 12:35:33 +0000
asID: 215304
IP address blocks: 46.203.98.0/24 maxlen: 24
46.203.203.0/24 maxlen: 24
92.113.106.0/23 maxlen: 24
92.113.112.0/23 maxlen: 24
92.113.124.0/23 maxlen: 24
92.113.136.0/23 maxlen: 24
92.113.142.0/23 maxlen: 24
178.94.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b0:79:86:9f:de:b0:4b:b2:d6:54:4d:52:9d:df:5e:ba:98:54:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 3 12:30:33 2025 GMT
Not After : Dec 2 12:35:33 2026 GMT
Subject: CN=03A330D3BA214E24E737EF05B018D4495FC544A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:00:74:89:ff:c5:a6:8b:fd:1d:82:a4:cf:
6c:22:93:65:b5:6b:93:44:5e:f2:fe:c5:43:74:9e:
a9:a4:6a:93:38:78:cc:6b:79:ba:21:cb:d6:48:a0:
8b:96:84:5c:85:39:4e:43:f6:12:b5:56:bf:2e:b5:
12:41:ab:b9:ac:e2:42:d2:70:ef:48:82:5b:fa:a5:
5e:45:11:f7:8b:35:ae:e9:e7:e0:aa:87:aa:46:c6:
af:55:0c:60:d8:a8:75:7a:57:ca:af:aa:8c:06:1e:
02:1e:7e:2b:d5:fc:1e:ca:94:77:e6:d6:f6:1d:b8:
2c:70:c3:f5:65:b1:c0:71:d5:f8:83:ed:42:9b:59:
25:55:e4:12:59:c1:cf:be:23:74:1c:9d:a0:8b:7b:
f6:de:12:f2:a6:11:7c:07:ab:0d:87:c7:c4:3a:28:
83:2b:41:93:72:f9:d0:ce:da:72:0b:a7:dd:0f:f2:
3b:3f:87:d4:39:aa:f6:26:21:d9:3e:30:ba:34:22:
24:1d:19:2f:3e:e3:a0:24:98:44:51:65:04:40:0b:
4c:31:25:e6:b7:5d:b6:9b:6d:66:32:50:22:37:e3:
ab:ce:c5:94:06:d2:73:96:d2:13:68:f4:75:77:6d:
f7:17:95:9d:b4:1e:d1:f8:49:f2:67:42:b8:d9:ba:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:30:D3:BA:21:4E:24:E7:37:EF:05:B0:18:D4:49:5F:C5:44:A8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.98.0/24
46.203.203.0/24
92.113.106.0/23
92.113.112.0/23
92.113.124.0/23
92.113.136.0/23
92.113.142.0/23
178.94.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:52:99:fc:2f:8d:75:4a:e0:f5:89:b2:10:cf:ec:76:dc:8e:
53:dc:6b:11:d1:74:19:ba:2c:ea:65:0f:23:59:f1:c4:06:e2:
92:d6:d6:8f:fd:2f:57:1b:14:d9:e7:9d:c3:68:4e:11:37:5e:
9b:76:01:cc:98:40:fa:9f:56:90:31:f9:e6:7d:b9:00:e2:5a:
7e:4d:80:3b:2f:d3:0c:26:01:78:fc:25:b7:6a:ff:ad:ba:c5:
7e:be:83:1d:2f:af:04:e4:a7:4a:5e:9a:46:46:a7:bf:e3:8d:
ae:23:83:ed:4b:c7:0b:0c:1f:c1:2d:0f:8c:59:96:19:01:54:
62:c3:12:40:89:0e:d7:de:32:88:42:5b:a0:91:c2:b4:14:44:
a5:99:5f:ce:43:46:d3:10:47:e1:cd:89:9f:0c:4d:d0:3e:64:
e2:c3:72:ae:cc:05:89:19:8f:20:38:4e:90:4a:2c:59:67:3f:
2e:38:aa:13:aa:6c:6a:a3:2b:2c:f7:06:9f:e8:86:22:19:ba:
0a:35:f4:9d:8f:9b:fd:84:44:96:d1:30:47:66:20:76:b7:31:
36:6a:0e:a6:9f:cb:85:6f:65:14:1f:dd:b8:81:b4:54:ff:3f:
2d:89:4d:a7:49:e1:d4:2f:58:f3:ac:2a:fa:6f:fa:88:04:c5:
02:dd:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:50 2025 by rpki-client