Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: KuZSMpW9bSam5xCRqyaoEPL4G7sFREFITf/MvhzRj0U=
Subject key identifier: 0F:AC:50:60:B4:EF:94:8B:E1:4D:43:A4:0F:BB:22:1F:1E:34:0B:BB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1FC1D6CE36A59F1F8C50C78A031D142DFF51367E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
Signing time: Sat 17 Oct 2026 14:17:01 +0000
ROA not before: Sat 17 Oct 2026 14:12:01 +0000
ROA not after: Sat 16 Oct 2027 14:17:01 +0000
asID: 212238
IP address blocks: 96.62.190.0/24 maxlen: 24
96.62.214.0/24 maxlen: 24
136.143.240.0/24 maxlen: 24
136.143.247.0/24 maxlen: 24
140.233.178.0/23 maxlen: 24
140.233.188.0/23 maxlen: 24
143.14.132.0/23 maxlen: 24
143.14.219.0/24 maxlen: 24
143.14.248.0/24 maxlen: 24
145.223.1.0/24 maxlen: 24
145.223.2.0/24 maxlen: 24
146.103.45.0/24 maxlen: 24
146.103.53.0/24 maxlen: 24
147.79.10.0/24 maxlen: 24
148.135.195.0/24 maxlen: 24
150.241.139.0/24 maxlen: 24
150.241.241.0/24 maxlen: 24
155.117.200.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
158.140.193.0/24 maxlen: 24
158.140.208.0/22 maxlen: 22
162.141.4.0/24 maxlen: 24
162.141.20.0/24 maxlen: 24
162.141.66.0/24 maxlen: 24
162.141.67.0/24 maxlen: 24
162.141.79.0/24 maxlen: 24
162.141.97.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.113.0/24 maxlen: 24
162.141.190.0/23 maxlen: 23
167.148.177.0/24 maxlen: 24
167.148.197.0/24 maxlen: 24
167.148.206.0/24 maxlen: 24
167.148.214.0/24 maxlen: 24
168.222.30.0/24 maxlen: 24
168.222.34.0/24 maxlen: 24
168.222.44.0/24 maxlen: 24
168.222.51.0/24 maxlen: 24
168.222.52.0/24 maxlen: 24
168.222.66.0/24 maxlen: 24
168.222.67.0/24 maxlen: 24
168.222.82.0/24 maxlen: 24
168.222.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c1:d6:ce:36:a5:9f:1f:8c:50:c7:8a:03:1d:14:2d:ff:51:36:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 14:12:01 2026 GMT
Not After : Oct 16 14:17:01 2027 GMT
Subject: CN=0FAC5060B4EF948BE14D43A40FBB221F1E340BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:71:1b:66:ae:a4:8f:77:e6:8b:00:58:75:
ee:e8:0b:f4:1e:7a:36:4c:4f:c2:5c:17:35:dd:75:
5f:79:e2:a2:cb:5b:7b:23:58:6d:82:cb:21:7e:67:
00:c2:b8:06:0f:6a:fb:b1:5c:97:f1:af:c7:99:29:
1d:8b:4e:fd:88:a7:20:e3:f6:63:3c:12:63:46:f0:
42:80:72:69:1f:ec:96:4f:38:20:22:ee:cc:b0:b8:
9d:27:59:52:5c:8c:0b:6e:e6:18:3d:53:9c:3d:c0:
70:f0:01:19:e3:53:61:19:d8:02:f8:c4:19:16:ef:
4d:cc:29:b3:2b:78:e3:6f:65:6c:7c:fe:12:78:d9:
e6:95:16:54:a8:97:ef:43:78:33:a3:11:94:b7:2a:
e9:90:e1:a7:12:ed:b1:bf:9e:f3:28:fd:c1:cf:3b:
f8:3a:f2:34:7b:eb:f7:41:61:56:4e:f5:ac:1e:ae:
f2:29:17:c1:1f:be:59:95:ce:44:5d:e9:3e:ce:91:
72:d3:47:9a:0a:df:d2:96:7e:ba:cb:13:18:63:5d:
1c:7b:9d:81:b0:c4:b6:cd:51:52:b3:ed:ed:be:ee:
1f:65:23:49:29:38:52:9c:3e:33:65:72:39:10:07:
f0:08:55:f8:9f:18:b5:22:db:3e:db:80:cd:eb:95:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AC:50:60:B4:EF:94:8B:E1:4D:43:A4:0F:BB:22:1F:1E:34:0B:BB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.190.0/24
96.62.214.0/24
136.143.240.0/24
136.143.247.0/24
140.233.178.0/23
140.233.188.0/23
143.14.132.0/23
143.14.219.0/24
143.14.248.0/24
145.223.1.0-145.223.2.255
146.103.45.0/24
146.103.53.0/24
147.79.10.0/24
148.135.195.0/24
150.241.139.0/24
150.241.241.0/24
155.117.200.0/24
155.117.234.0/24
158.140.193.0/24
158.140.208.0/22
162.141.4.0/24
162.141.20.0/24
162.141.66.0/23
162.141.79.0/24
162.141.97.0/24
162.141.107.0/24
162.141.113.0/24
162.141.190.0/23
167.148.177.0/24
167.148.197.0/24
167.148.206.0/24
167.148.214.0/24
168.222.30.0/24
168.222.34.0/24
168.222.44.0/24
168.222.51.0-168.222.52.255
168.222.66.0/23
168.222.82.0/24
168.222.90.0/24
Signature Algorithm: sha256WithRSAEncryption
65:db:52:32:3b:5a:bd:c5:0d:33:76:b3:95:6b:b0:ff:cb:24:
4a:57:68:a2:a9:32:eb:1f:9b:f6:f3:91:85:a9:0a:b1:25:d2:
a1:04:09:84:f3:c9:a7:10:1a:8c:44:56:22:2d:0d:c8:39:29:
63:3b:99:d4:27:d3:84:2b:d5:b5:37:68:a1:8f:37:9d:66:75:
c4:a8:5c:e8:9c:be:2c:65:83:99:c9:56:fa:65:18:a5:34:59:
d9:56:64:27:70:3a:4b:a0:79:cd:78:fd:d5:82:fa:9c:48:23:
ed:33:0f:2f:a3:36:6c:d1:f3:5e:3a:a3:16:8b:72:94:c4:50:
3f:67:04:d3:3b:e3:68:ca:63:b1:4f:65:e9:a3:aa:c9:fc:6a:
53:9b:62:91:6c:00:c9:44:90:a4:0b:bb:7d:4a:b1:06:83:55:
ae:55:e7:0b:ee:22:cb:d2:b2:f3:4e:2b:da:e2:f7:5a:c6:e6:
66:4c:50:69:c3:ec:88:e3:12:ad:da:71:73:db:3d:4e:cf:90:
7e:6d:03:69:a8:19:af:8c:47:54:78:2b:a6:83:a4:36:df:cf:
a7:ce:d7:06:19:e6:e9:89:f9:c4:1b:62:ae:f2:92:15:1b:97:
c0:94:49:8c:79:42:2c:ff:9b:31:e4:1e:e6:6c:9a:34:02:7f:
1d:a1:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:49 2026 by rpki-client