Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: G2ZPV6ovSOf1qExUQ8Pf1c2HXV+9RkgYvpukPJSfOlg=
Subject key identifier: B6:09:25:05:39:1C:FE:54:5F:1E:0D:E4:58:20:82:52:5D:E7:B6:73
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1DBF7E1B25B10866EDC95CCBC90909087BD9ECF3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
Signing time: Sun 02 Aug 2026 20:19:00 +0000
ROA not before: Sun 02 Aug 2026 20:14:00 +0000
ROA not after: Sun 01 Aug 2027 20:19:00 +0000
asID: 212238
IP address blocks: 96.62.190.0/24 maxlen: 24
96.62.214.0/24 maxlen: 24
136.143.240.0/24 maxlen: 24
136.143.247.0/24 maxlen: 24
140.233.178.0/23 maxlen: 24
140.233.188.0/23 maxlen: 24
143.14.132.0/23 maxlen: 24
143.14.219.0/24 maxlen: 24
146.103.45.0/24 maxlen: 24
146.103.53.0/24 maxlen: 24
147.79.10.0/24 maxlen: 24
148.135.195.0/24 maxlen: 24
150.241.139.0/24 maxlen: 24
155.117.144.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
158.140.193.0/24 maxlen: 24
158.140.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:7e:1b:25:b1:08:66:ed:c9:5c:cb:c9:09:09:08:7b:d9:ec:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 2 20:14:00 2026 GMT
Not After : Aug 1 20:19:00 2027 GMT
Subject: CN=B6092505391CFE545F1E0DE4582082525DE7B673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:ba:32:bb:3e:63:03:1a:c0:db:5c:a7:ab:
08:dc:32:99:3e:f2:3c:96:1a:5f:f9:8c:13:38:71:
0d:0d:10:49:1a:ca:e1:65:9d:98:60:82:df:2a:61:
be:74:51:af:9d:37:b4:31:5f:a0:40:8c:c8:12:4e:
f3:1b:d3:3b:55:52:ec:74:6d:eb:c3:65:f8:48:d8:
65:41:35:74:9e:07:13:b2:63:12:67:b9:f3:5f:f4:
be:de:51:d9:b7:7a:77:f9:48:72:85:fe:eb:b9:fa:
c6:e8:eb:4b:40:f7:c6:ba:dc:7a:65:f2:51:d5:66:
f1:49:ec:e7:24:e5:8d:77:ed:1d:d1:c4:73:02:5e:
1f:61:35:31:c8:fd:09:2f:b8:d0:69:5a:26:60:fe:
14:fb:c5:72:85:e4:dd:ce:3f:c9:72:2a:bf:d4:b6:
29:90:70:b7:04:7d:24:b7:e2:c8:d2:87:aa:2d:68:
70:aa:8a:10:5e:a6:ec:4b:94:72:f2:22:2b:b3:9f:
05:4a:29:4a:eb:3d:2b:83:3f:7b:07:6a:41:b6:c4:
4d:a3:e0:26:46:64:44:9c:f3:d8:ed:c6:0d:39:2f:
40:05:bb:33:0a:b4:41:1a:bf:17:2f:33:4c:cb:64:
d4:a2:0e:d7:2b:8f:79:d9:78:86:21:5f:b2:a6:e2:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:25:05:39:1C:FE:54:5F:1E:0D:E4:58:20:82:52:5D:E7:B6:73
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.190.0/24
96.62.214.0/24
136.143.240.0/24
136.143.247.0/24
140.233.178.0/23
140.233.188.0/23
143.14.132.0/23
143.14.219.0/24
146.103.45.0/24
146.103.53.0/24
147.79.10.0/24
148.135.195.0/24
150.241.139.0/24
155.117.144.0/24
155.117.234.0/24
158.140.193.0/24
158.140.208.0/22
Signature Algorithm: sha256WithRSAEncryption
05:e2:30:60:0f:d1:26:d1:3e:e7:a1:e5:b5:c1:c4:d8:96:c7:
ae:2d:f5:fa:38:5d:70:b2:4f:48:79:80:e2:b8:c0:36:9b:cd:
8d:70:84:d7:3c:88:9d:ab:42:f8:26:d4:23:05:7b:b0:42:9b:
e4:67:15:f8:8a:78:ec:ec:35:03:f4:05:34:1b:51:80:65:c1:
dc:6e:a4:14:b6:b9:e6:d6:83:2d:dc:02:f6:9e:94:e9:52:00:
4b:c2:5b:1f:3c:09:62:9d:a6:a1:39:ee:02:07:6b:bd:95:43:
89:34:11:2d:1a:1a:90:0f:3c:9a:85:be:1f:5e:4d:99:cc:10:
1e:9b:38:14:c2:ce:37:b2:d3:34:3a:11:62:93:6a:f3:82:8f:
b3:cc:ab:e8:d5:7e:8f:76:a0:c1:43:73:7f:1e:6e:13:d5:e3:
15:87:d0:01:c4:a4:5a:85:ac:ac:13:4a:9b:14:77:e1:be:a0:
45:a3:5a:9d:b4:73:84:09:16:b0:65:91:f1:71:f4:88:a0:70:
67:56:f3:7f:46:f4:94:b0:c4:72:29:6e:b1:f3:4d:4b:a5:e5:
50:5c:72:d1:6f:5c:d8:85:df:f3:ea:55:ef:76:4e:aa:15:1d:
29:4f:ef:1a:b4:90:44:ca:8d:56:83:ce:e6:89:d4:6b:c0:fd:
2b:f8:ca:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:32 2026 by rpki-client