Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: 5CcHBf32pjOqgERUfVmXenevVKrrdV42Rik9yXAWwq0=
Subject key identifier: 32:73:B8:33:FA:C9:8A:DE:96:35:46:68:2D:02:54:E6:BC:B7:B3:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7DDB6AF3B618EEE97D602BB94B5223E83ED01792
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
Signing time: Sat 01 Aug 2026 00:10:20 +0000
ROA not before: Sat 01 Aug 2026 00:05:20 +0000
ROA not after: Sat 31 Jul 2027 00:10:20 +0000
asID: 58212
IP address blocks: 143.14.156.0/24 maxlen: 24
143.14.202.0/24 maxlen: 24
143.14.216.0/24 maxlen: 24
167.148.173.0/24 maxlen: 24
167.148.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:db:6a:f3:b6:18:ee:e9:7d:60:2b:b9:4b:52:23:e8:3e:d0:17:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 1 00:05:20 2026 GMT
Not After : Jul 31 00:10:20 2027 GMT
Subject: CN=3273B833FAC98ADE963546682D0254E6BCB7B3E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:df:10:bd:71:d4:6c:05:7f:50:53:2b:30:
6a:0c:5a:f4:3e:c6:55:b8:d6:7a:13:d6:8f:25:f2:
1d:2f:07:89:46:1f:08:d6:10:64:ed:9b:fc:0e:2d:
5f:ab:5b:e5:b2:e6:cd:00:6b:95:79:68:54:87:e7:
8f:da:b9:2f:c2:c9:94:4a:7b:94:3d:af:62:e8:37:
b2:b4:25:41:11:fc:b0:7c:17:fe:ff:ba:3d:2b:f7:
48:30:4c:cf:6f:3b:8e:9a:64:50:34:59:3b:4e:7e:
4f:0c:82:d4:3f:9e:0a:15:14:8a:31:70:1d:75:25:
b3:03:50:f4:b0:a6:ab:04:47:6d:41:0c:0b:34:19:
3f:6e:6d:bb:76:c9:1d:e9:78:b0:b9:68:6d:d3:88:
17:f7:5f:4b:34:13:10:c7:39:47:6b:03:9f:f8:4d:
1e:b3:f6:8d:85:89:fd:50:1a:f7:64:7a:1c:d4:d7:
6d:23:08:5b:ad:f3:4a:6a:f2:48:65:f3:69:2b:03:
6c:18:4e:73:d9:6c:9e:3a:90:88:87:bf:de:18:2a:
ae:0a:68:2f:c7:ee:32:c1:c1:0f:bb:93:b9:9b:ff:
be:a0:c8:2a:61:60:19:ae:bc:0a:68:28:f1:6e:7b:
c5:87:5f:6c:88:95:8b:e1:3b:f9:0c:00:bc:c0:6e:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:73:B8:33:FA:C9:8A:DE:96:35:46:68:2D:02:54:E6:BC:B7:B3:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.156.0/24
143.14.202.0/24
143.14.216.0/24
167.148.173.0/24
167.148.187.0/24
Signature Algorithm: sha256WithRSAEncryption
56:34:76:0c:5f:66:16:3a:ba:15:3b:75:0c:2c:e8:89:c4:53:
69:2d:18:e0:99:2c:5b:cb:c3:67:cc:2e:bd:50:19:f1:97:d6:
ca:f9:63:3f:ce:55:68:36:bf:e9:6b:00:4b:bc:ab:28:d3:81:
77:e5:7c:ad:1d:86:09:c6:25:f3:c1:4b:b6:99:b7:81:a6:f8:
29:c3:fa:c4:21:53:d2:5f:f0:54:4f:b2:31:05:2f:1d:cd:3a:
0b:d1:e7:9e:e7:6f:cb:c1:47:8b:10:8b:30:f9:81:89:2f:f6:
a8:92:01:8a:c7:a0:09:0e:f0:fc:ed:03:bd:a9:5c:ca:25:a4:
b8:8c:2a:11:12:d3:4b:cb:08:ef:0f:2d:78:61:01:c5:b3:e6:
59:28:d5:34:52:cb:9d:b1:20:2c:e3:57:15:df:6a:1a:d9:ea:
28:70:ee:80:22:7c:dc:f2:46:2c:ce:f0:85:19:4d:c7:91:5c:
a4:d3:10:ab:9f:26:60:22:06:2a:3a:09:eb:87:ef:fa:ec:e4:
70:c3:2e:38:c8:a1:4c:fc:42:f1:f5:99:27:72:0f:50:a6:97:
8b:db:f2:f1:df:37:21:41:b1:f4:e5:4a:69:4b:3c:e3:17:2b:
24:4b:fe:7f:89:4c:df:d5:27:50:91:c4:61:21:4f:fb:b6:72:
fd:be:36:e4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUfdtq87YY7ul9YCu5S1Ij6D7QF5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MDEwMDA1MjBaFw0yNzA3MzEwMDEwMjBaMDMxMTAvBgNV
BAMTKDMyNzNCODMzRkFDOThBREU5NjM1NDY2ODJEMDI1NEU2QkNCN0IzRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5N8QvXHUbAV/UFMrMGoMWvQ+
xlW41noT1o8l8h0vB4lGHwjWEGTtm/wOLV+rW+Wy5s0Aa5V5aFSH54/auS/CyZRK
e5Q9r2LoN7K0JUER/LB8F/7/uj0r90gwTM9vO46aZFA0WTtOfk8MgtQ/ngoVFIox
cB11JbMDUPSwpqsER21BDAs0GT9ubbt2yR3peLC5aG3TiBf3X0s0ExDHOUdrA5/4
TR6z9o2Fif1QGvdkehzU120jCFut80pq8khl82krA2wYTnPZbJ46kIiHv94YKq4K
aC/H7jLBwQ+7k7mb/76gyCphYBmuvApoKPFue8WHX2yIlYvhO/kMALzAbiklAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUMnO4M/rJit6WNUZoLQJU5ry3s+IwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTgyMTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBACPDpwD
BACPDsoDBACPDtgDBACnlK0DBACnlLswDQYJKoZIhvcNAQELBQADggEBAFY0dgxf
ZhY6uhU7dQws6InEU2ktGOCZLFvLw2fMLr1QGfGX1sr5Yz/OVWg2v+lrAEu8qyjT
gXflfK0dhgnGJfPBS7aZt4Gm+CnD+sQhU9Jf8FRPsjEFLx3NOgvR557nb8vBR4sQ
izD5gYkv9qiSAYrHoAkO8PztA72pXMolpLiMKhES00vLCO8PLXhhAcWz5lko1TRS
y52xICzjVxXfahrZ6ihw7oAifNzyRizO8IUZTceRXKTTEKufJmAiBio6CeuH7/rs
5HDDLjjIoUz8QvH1mSdyD1Cml4vb8vHfNyFBsfTlSmlLPOMXKyRL/n+JTN/VJ1CR
xGEhT/u2cv2+NuQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:39:40 2026 by rpki-client