Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: mPx2+Dc5n4+m5tH5CPyIG29+Q6TeQ2qQi5ec81oSBl4=
Subject key identifier: F1:D4:E0:26:46:C7:81:11:AB:0A:D2:DD:07:3F:FC:72:05:10:8B:E0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 192B14713E4AF22136168D5F6FD0D03E385509F3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
Signing time: Thu 15 Oct 2026 12:59:56 +0000
ROA not before: Thu 15 Oct 2026 12:54:56 +0000
ROA not after: Thu 14 Oct 2027 12:59:56 +0000
asID: 212238
IP address blocks: 82.21.2.0/24 maxlen: 24
82.21.56.0/24 maxlen: 24
82.21.59.0/24 maxlen: 24
82.21.68.0/24 maxlen: 24
82.21.70.0/24 maxlen: 24
82.21.87.0/24 maxlen: 24
82.21.108.0/24 maxlen: 24
82.21.133.0/24 maxlen: 24
82.21.141.0/24 maxlen: 24
82.21.142.0/24 maxlen: 24
82.21.151.0/24 maxlen: 24
82.21.158.0/24 maxlen: 24
82.21.159.0/24 maxlen: 24
82.21.168.0/24 maxlen: 24
82.21.175.0/24 maxlen: 24
82.21.189.0/24 maxlen: 24
82.21.191.0/24 maxlen: 24
82.21.193.0/24 maxlen: 24
82.21.208.0/24 maxlen: 24
82.21.211.0/24 maxlen: 24
82.21.237.0/24 maxlen: 24
82.21.243.0/24 maxlen: 24
82.22.27.0/24 maxlen: 24
82.22.34.0/24 maxlen: 24
82.22.46.0/24 maxlen: 24
82.22.65.0/24 maxlen: 24
82.22.79.0/24 maxlen: 24
82.22.85.0/24 maxlen: 24
82.22.87.0/24 maxlen: 24
82.22.99.0/24 maxlen: 24
82.22.147.0/24 maxlen: 24
82.22.212.0/24 maxlen: 24
82.22.222.0/24 maxlen: 24
82.22.243.0/24 maxlen: 24
82.22.253.0/24 maxlen: 24
82.23.17.0/24 maxlen: 24
82.23.18.0/24 maxlen: 24
82.23.21.0/24 maxlen: 24
82.23.22.0/24 maxlen: 24
82.23.37.0/24 maxlen: 24
82.23.38.0/24 maxlen: 24
82.23.119.0/24 maxlen: 24
82.23.120.0/24 maxlen: 24
82.23.121.0/24 maxlen: 24
82.23.122.0/24 maxlen: 24
82.23.126.0/24 maxlen: 24
82.23.145.0/24 maxlen: 24
82.23.146.0/24 maxlen: 24
82.23.165.0/24 maxlen: 24
82.23.212.0/24 maxlen: 24
82.23.214.0/24 maxlen: 24
82.23.217.0/24 maxlen: 24
82.23.224.0/24 maxlen: 24
82.23.229.0/24 maxlen: 24
82.23.233.0/24 maxlen: 24
82.23.243.0/24 maxlen: 24
82.23.253.0/24 maxlen: 24
82.23.254.0/24 maxlen: 24
82.23.255.0/24 maxlen: 24
82.24.34.0/24 maxlen: 24
82.24.46.0/24 maxlen: 24
82.24.112.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
82.24.182.0/24 maxlen: 24
82.24.214.0/24 maxlen: 24
82.24.215.0/24 maxlen: 24
82.24.239.0/24 maxlen: 24
82.24.243.0/24 maxlen: 24
82.24.253.0/24 maxlen: 24
82.25.34.0/24 maxlen: 24
82.25.200.0/24 maxlen: 24
82.25.212.0/24 maxlen: 24
82.25.219.0/24 maxlen: 24
82.25.230.0/24 maxlen: 24
82.25.234.0/24 maxlen: 24
82.25.243.0/24 maxlen: 24
82.25.253.0/24 maxlen: 24
82.26.220.0/24 maxlen: 24
82.26.230.0/24 maxlen: 24
82.26.233.0/24 maxlen: 24
82.26.235.0/24 maxlen: 24
82.26.237.0/24 maxlen: 24
82.26.240.0/24 maxlen: 24
82.26.253.0/24 maxlen: 24
82.27.130.0/24 maxlen: 24
82.27.132.0/24 maxlen: 24
82.27.213.0/24 maxlen: 24
82.27.218.0/24 maxlen: 24
82.27.222.0/24 maxlen: 24
82.27.225.0/24 maxlen: 24
82.27.234.0/24 maxlen: 24
82.27.238.0/24 maxlen: 24
82.27.253.0/24 maxlen: 24
82.29.28.0/24 maxlen: 24
82.29.78.0/24 maxlen: 24
82.29.92.0/24 maxlen: 24
82.29.94.0/24 maxlen: 24
82.29.96.0/24 maxlen: 24
82.29.97.0/24 maxlen: 24
82.29.100.0/24 maxlen: 24
82.29.101.0/24 maxlen: 24
82.29.125.0/24 maxlen: 24
82.29.202.0/24 maxlen: 24
82.29.211.0/24 maxlen: 24
82.29.215.0/24 maxlen: 24
82.29.217.0/24 maxlen: 24
82.29.220.0/24 maxlen: 24
82.29.228.0/24 maxlen: 24
82.29.233.0/24 maxlen: 24
82.29.242.0/24 maxlen: 24
82.29.243.0/24 maxlen: 24
82.38.129.0/24 maxlen: 24
82.40.51.0/24 maxlen: 24
82.41.195.0/24 maxlen: 24
82.47.13.0/24 maxlen: 24
82.47.120.0/23 maxlen: 24
82.47.133.0/24 maxlen: 24
82.47.142.0/24 maxlen: 24
82.47.148.0/24 maxlen: 24
82.47.161.0/24 maxlen: 24
82.47.179.0/24 maxlen: 24
82.47.181.0/24 maxlen: 24
82.47.202.0/24 maxlen: 24
82.47.203.0/24 maxlen: 24
82.47.204.0/24 maxlen: 24
82.47.207.0/24 maxlen: 24
84.75.165.0/24 maxlen: 24
84.75.190.0/24 maxlen: 24
178.83.96.0/24 maxlen: 24
178.83.114.0/24 maxlen: 24
178.83.150.0/24 maxlen: 24
2a13:9500:1f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2b:14:71:3e:4a:f2:21:36:16:8d:5f:6f:d0:d0:3e:38:55:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 12:54:56 2026 GMT
Not After : Oct 14 12:59:56 2027 GMT
Subject: CN=F1D4E02646C78111AB0AD2DD073FFC7205108BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:7a:1d:60:b5:af:71:96:7c:c7:b8:08:3a:
e4:43:ab:4a:f0:43:3d:9b:9b:9f:7a:84:85:eb:bb:
ee:1c:88:08:a7:b9:bf:6d:6f:33:23:aa:66:09:b4:
f8:0f:48:5f:35:7d:fc:16:34:66:c9:1b:0e:37:0c:
c5:95:b2:69:a3:b3:8e:fe:9e:ec:07:04:b9:5c:20:
4c:c4:5a:54:d9:8f:f1:38:f5:85:8e:ec:83:b1:d4:
1c:bc:f7:d0:9c:16:ba:40:65:55:d5:e7:67:c7:80:
ff:d4:1d:74:8b:a5:e4:86:ad:70:7e:b8:88:aa:d5:
a2:c0:7e:2b:c3:c4:a4:f1:6c:be:49:ef:ca:a3:1a:
d8:1a:f8:1b:da:90:8b:7f:fd:d8:31:cb:93:96:c5:
6e:59:73:eb:30:ee:92:4c:f3:c2:1e:d3:38:bf:a9:
49:11:c7:77:89:2a:ae:a6:62:d8:3b:91:f8:7f:d7:
a0:19:f4:45:f5:1c:05:c8:cb:72:4d:97:e0:98:33:
0f:d4:b9:bb:61:62:b3:2b:4c:23:4a:b2:64:95:6b:
23:05:29:c2:34:b6:c5:a5:76:5d:23:d7:b7:65:8e:
bb:2f:ee:36:8e:1a:64:21:4b:81:2c:09:35:18:34:
ab:c9:63:7a:b5:47:47:c4:81:60:7e:35:c6:1c:5e:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:E0:26:46:C7:81:11:AB:0A:D2:DD:07:3F:FC:72:05:10:8B:E0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.2.0/24
82.21.56.0/24
82.21.59.0/24
82.21.68.0/24
82.21.70.0/24
82.21.87.0/24
82.21.108.0/24
82.21.133.0/24
82.21.141.0-82.21.142.255
82.21.151.0/24
82.21.158.0/23
82.21.168.0/24
82.21.175.0/24
82.21.189.0/24
82.21.191.0/24
82.21.193.0/24
82.21.208.0/24
82.21.211.0/24
82.21.237.0/24
82.21.243.0/24
82.22.27.0/24
82.22.34.0/24
82.22.46.0/24
82.22.65.0/24
82.22.79.0/24
82.22.85.0/24
82.22.87.0/24
82.22.99.0/24
82.22.147.0/24
82.22.212.0/24
82.22.222.0/24
82.22.243.0/24
82.22.253.0/24
82.23.17.0-82.23.18.255
82.23.21.0-82.23.22.255
82.23.37.0-82.23.38.255
82.23.119.0-82.23.122.255
82.23.126.0/24
82.23.145.0-82.23.146.255
82.23.165.0/24
82.23.212.0/24
82.23.214.0/24
82.23.217.0/24
82.23.224.0/24
82.23.229.0/24
82.23.233.0/24
82.23.243.0/24
82.23.253.0-82.23.255.255
82.24.34.0/24
82.24.46.0/24
82.24.112.0/24
82.24.175.0/24
82.24.182.0/24
82.24.214.0/23
82.24.239.0/24
82.24.243.0/24
82.24.253.0/24
82.25.34.0/24
82.25.200.0/24
82.25.212.0/24
82.25.219.0/24
82.25.230.0/24
82.25.234.0/24
82.25.243.0/24
82.25.253.0/24
82.26.220.0/24
82.26.230.0/24
82.26.233.0/24
82.26.235.0/24
82.26.237.0/24
82.26.240.0/24
82.26.253.0/24
82.27.130.0/24
82.27.132.0/24
82.27.213.0/24
82.27.218.0/24
82.27.222.0/24
82.27.225.0/24
82.27.234.0/24
82.27.238.0/24
82.27.253.0/24
82.29.28.0/24
82.29.78.0/24
82.29.92.0/24
82.29.94.0/24
82.29.96.0/23
82.29.100.0/23
82.29.125.0/24
82.29.202.0/24
82.29.211.0/24
82.29.215.0/24
82.29.217.0/24
82.29.220.0/24
82.29.228.0/24
82.29.233.0/24
82.29.242.0/23
82.38.129.0/24
82.40.51.0/24
82.41.195.0/24
82.47.13.0/24
82.47.120.0/23
82.47.133.0/24
82.47.142.0/24
82.47.148.0/24
82.47.161.0/24
82.47.179.0/24
82.47.181.0/24
82.47.202.0-82.47.204.255
82.47.207.0/24
84.75.165.0/24
84.75.190.0/24
178.83.96.0/24
178.83.114.0/24
178.83.150.0/24
IPv6:
2a13:9500:1f2::/48
Signature Algorithm: sha256WithRSAEncryption
73:70:58:7a:d3:9c:b7:31:a0:c3:af:c0:9b:35:c3:d2:19:a7:
92:d3:80:9b:1b:dc:3b:cd:df:42:81:a0:6c:69:07:fb:55:49:
6f:97:ee:c0:25:9a:96:10:45:9f:03:01:ee:68:ef:0e:3c:0e:
62:f3:4f:4d:c7:bc:8b:b0:9a:66:91:41:31:6e:b8:f9:26:6c:
d6:17:e8:37:b4:31:08:7a:65:56:d2:e0:da:35:f1:85:88:3d:
b6:40:14:9d:ba:39:c1:64:a5:1d:4d:5d:dd:7c:3a:7a:13:85:
76:dd:d0:51:92:0f:6f:60:b6:5d:98:76:e6:39:de:66:69:03:
93:0a:12:63:28:59:da:91:a8:5c:74:c2:39:c4:24:f4:4b:62:
63:19:8c:5b:f4:72:47:8e:f7:86:e5:68:c1:1d:d0:7a:a5:ca:
c5:b2:aa:6b:11:df:ac:69:ad:bb:94:f9:98:3c:7f:c9:05:a9:
10:ce:2f:05:18:a9:bd:b7:6d:27:d8:78:24:8f:5e:a3:75:9a:
cd:11:3f:d1:81:c1:a1:db:2f:5c:fa:4e:96:42:b7:b2:4b:05:
ab:67:c4:3b:e8:4d:47:91:29:fb:16:d0:5f:e8:75:ac:23:47:
25:69:f5:46:98:7c:34:7d:0d:90:46:c0:fa:5d:8f:a8:3c:6a:
59:02:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:22:14 2026 by rpki-client