Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: nCLZ66/ajkjn1B32b4F88Np3AaJ+HrC4kHDQe8+Kkps=
Subject key identifier: 05:24:90:B0:64:B0:B5:2F:45:D3:65:73:1D:FE:43:3D:33:33:C4:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3EF3B3D5B7F55CD6124F7B4CD213A62D6F833CFB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
Signing time: Wed 19 Aug 2026 00:44:23 +0000
ROA not before: Wed 19 Aug 2026 00:39:23 +0000
ROA not after: Wed 18 Aug 2027 00:44:23 +0000
asID: 212238
IP address blocks: 96.62.190.0/24 maxlen: 24
96.62.214.0/24 maxlen: 24
136.143.240.0/24 maxlen: 24
136.143.247.0/24 maxlen: 24
140.233.178.0/23 maxlen: 24
140.233.188.0/23 maxlen: 24
143.14.132.0/23 maxlen: 24
143.14.219.0/24 maxlen: 24
146.103.45.0/24 maxlen: 24
146.103.53.0/24 maxlen: 24
147.79.10.0/24 maxlen: 24
148.135.195.0/24 maxlen: 24
150.241.139.0/24 maxlen: 24
155.117.144.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
158.140.193.0/24 maxlen: 24
158.140.208.0/22 maxlen: 22
168.222.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f3:b3:d5:b7:f5:5c:d6:12:4f:7b:4c:d2:13:a6:2d:6f:83:3c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 19 00:39:23 2026 GMT
Not After : Aug 18 00:44:23 2027 GMT
Subject: CN=052490B064B0B52F45D365731DFE433D3333C46A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:c7:76:0d:2d:cf:a6:fa:bf:49:a3:de:9b:
64:9b:97:07:6c:d7:0b:58:8d:e0:44:dc:dd:43:19:
db:b6:e0:e8:12:d1:60:32:18:21:f2:a9:04:87:d2:
56:cc:89:3a:af:28:bc:3e:98:d4:d7:fe:05:f0:04:
86:f3:36:db:3e:bb:8a:8f:c5:d0:44:da:1f:f7:b4:
90:7c:29:5e:8d:92:7b:ed:ff:5b:16:5b:72:84:3d:
0a:8b:2e:38:94:a0:9a:47:88:b1:fd:9e:6d:7d:bd:
7f:5a:56:5c:c5:cf:b4:7f:96:a0:c1:87:de:56:10:
8f:67:e8:7e:59:01:0a:62:84:10:7b:78:a5:03:64:
d9:91:6d:61:66:93:ff:9f:89:10:d3:53:7b:ab:8d:
54:4d:0f:40:36:9b:00:86:7e:40:df:e1:03:01:dd:
ea:f1:1a:eb:73:90:e4:4a:71:da:bd:22:7a:3c:61:
5d:65:01:3b:48:e5:50:7f:ec:31:de:73:1f:73:e6:
c1:f1:28:ba:ba:52:11:c9:2e:f4:73:38:59:b6:4f:
22:c5:2c:93:d8:06:c5:26:9f:fc:ad:74:ec:29:90:
f4:1a:1f:5f:ee:27:fc:07:13:d6:e2:4b:09:a1:b7:
74:79:df:59:e1:a5:b7:98:9a:98:59:f7:f0:6f:ce:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:24:90:B0:64:B0:B5:2F:45:D3:65:73:1D:FE:43:3D:33:33:C4:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.190.0/24
96.62.214.0/24
136.143.240.0/24
136.143.247.0/24
140.233.178.0/23
140.233.188.0/23
143.14.132.0/23
143.14.219.0/24
146.103.45.0/24
146.103.53.0/24
147.79.10.0/24
148.135.195.0/24
150.241.139.0/24
155.117.144.0/24
155.117.234.0/24
158.140.193.0/24
158.140.208.0/22
168.222.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9f:9f:44:11:0f:b3:6a:9d:d7:77:65:fc:ea:58:cd:de:44:
5c:99:94:c6:4b:d3:30:d6:19:dc:f3:5e:7d:70:3d:be:74:56:
3e:3c:23:f5:26:91:c9:03:29:2e:69:bc:54:5a:72:d8:3a:35:
00:7f:79:6c:55:64:a5:a5:93:09:39:7d:b6:d0:93:0b:a9:df:
76:90:3b:c4:a2:17:0c:d0:41:c3:98:42:f3:e4:5e:7e:9e:4c:
cf:fd:aa:74:7a:9c:78:48:75:95:e4:4b:7c:35:84:4e:37:95:
88:73:39:1a:ea:5d:24:78:71:78:9e:5a:f5:ca:81:3d:4c:43:
a9:14:07:2a:bb:22:c0:6b:bc:e1:9e:fb:c7:4c:dc:9f:fd:18:
60:a6:db:ca:5e:e7:d3:f5:a5:10:9c:87:7e:bd:3f:89:98:15:
3e:4d:85:57:2e:15:2a:97:43:07:e5:96:cf:91:c7:15:4b:47:
e1:ec:a9:ab:3b:0d:ac:99:b6:5c:ed:ef:91:7d:63:a6:a6:24:
4e:91:5c:2c:50:e7:05:6c:ba:af:ab:22:93:1e:9b:00:ea:01:
70:76:db:c1:6c:d7:03:6f:e0:19:fb:01:1a:74:49:c1:5d:97:
f7:1e:d9:da:07:9a:24:a5:50:86:2f:e1:db:9d:0c:f6:72:fc:
60:e0:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:42 2026 by rpki-client