Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: ZDd9rWEd+eldv6BZaDFyghdtIpRhOeDHmN2WHmmZhaQ=
Subject key identifier: 8B:EB:DD:B4:9B:35:4A:B7:C2:DA:11:54:A6:48:C7:06:9C:07:C9:FA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3DC24E70F3F2CA990F72C4EC89ACA5EDD24F6324
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
Signing time: Tue 16 Jun 2026 08:02:32 +0000
ROA not before: Tue 16 Jun 2026 07:57:32 +0000
ROA not after: Tue 15 Jun 2027 08:02:32 +0000
asID: 58212
IP address blocks: 143.14.156.0/24 maxlen: 24
143.14.171.0/24 maxlen: 24
143.14.202.0/24 maxlen: 24
143.14.216.0/24 maxlen: 24
167.148.173.0/24 maxlen: 24
167.148.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c2:4e:70:f3:f2:ca:99:0f:72:c4:ec:89:ac:a5:ed:d2:4f:63:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 16 07:57:32 2026 GMT
Not After : Jun 15 08:02:32 2027 GMT
Subject: CN=8BEBDDB49B354AB7C2DA1154A648C7069C07C9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:ac:17:da:24:c1:a1:10:4c:e1:a2:df:51:
c2:84:ad:9a:47:1c:bd:f2:97:4e:46:6a:d3:37:d7:
8a:ae:12:35:ec:a2:f0:a6:6b:c4:57:65:18:72:cf:
8e:06:a2:a2:d1:20:fb:70:e5:5b:49:7e:e5:64:82:
8b:9a:56:e7:5c:c9:a8:c3:e1:ce:c3:5c:ed:5e:d5:
0e:e4:bd:a8:91:95:d3:e9:a0:75:20:50:4b:a5:2a:
fa:25:a2:d3:5b:a7:b8:88:9c:b1:7b:85:6b:21:10:
35:9a:5d:c5:a6:ee:e5:75:e6:32:5e:d5:45:a9:81:
2d:58:c1:a4:24:83:40:99:41:fd:92:a6:2c:4e:c4:
1f:d5:84:0a:41:4e:a4:e4:79:46:9d:56:4b:3e:9f:
dc:4c:bc:0e:39:7b:cc:31:5f:f7:bd:77:f1:e4:9b:
50:97:2c:96:e7:f1:2a:80:88:0c:7e:67:7f:ec:ad:
9f:39:47:36:a5:c1:9e:ca:c2:45:ea:9b:b8:94:cb:
0a:0c:51:b6:44:39:11:67:3c:9c:41:0e:4d:dd:c0:
1e:2d:0c:26:c7:d0:1d:f0:7c:0b:bf:5d:3a:1f:ab:
16:3f:50:33:ff:de:51:3e:9d:cf:d8:15:38:17:20:
54:99:1b:44:43:0f:f2:a7:ea:89:3d:7d:8f:eb:8c:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:DD:B4:9B:35:4A:B7:C2:DA:11:54:A6:48:C7:06:9C:07:C9:FA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.156.0/24
143.14.171.0/24
143.14.202.0/24
143.14.216.0/24
167.148.173.0/24
167.148.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e4:b9:52:b5:48:93:e4:7f:d2:4b:24:c8:50:92:bd:50:e3:
7a:bb:ad:a7:24:69:43:97:f5:50:c1:db:ef:48:8a:51:d7:f1:
92:59:9b:49:d4:13:00:f4:5f:63:d1:0f:be:c7:09:d5:45:00:
90:d0:da:9b:8f:b8:ae:31:c5:c9:53:cf:aa:68:e5:3a:b4:e4:
0d:12:81:3c:f4:77:5e:69:47:16:3c:8b:e8:aa:46:18:a1:f7:
f7:98:80:db:7d:dc:e9:2a:14:16:30:5e:59:73:66:38:e8:0a:
3b:d7:43:ec:ff:53:e0:f8:18:ea:64:b8:85:fa:54:60:3b:fa:
93:db:81:c3:f7:ae:ef:08:39:f3:2c:e1:93:34:ce:9f:40:df:
52:d3:96:69:4b:f5:a0:99:c0:2d:9a:df:e6:d9:2f:3f:11:42:
7b:13:e4:17:28:3e:de:84:d8:ec:db:9b:0a:c0:bb:74:ac:cd:
fc:dd:a3:43:bc:c5:15:55:6e:87:e9:4b:6e:dc:a6:fd:80:7d:
0b:ce:38:a5:12:ba:6b:63:a7:00:96:2e:ee:b2:7d:f0:a1:74:
6e:0b:94:88:55:a7:1e:b4:31:90:f0:0a:54:ba:28:34:2c:9f:
4d:91:26:97:5a:9c:0f:a3:c8:64:6a:3c:e8:9c:40:3c:54:7b:
a3:33:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:24 2026 by rpki-client