Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197213.roa
File: AS197213.roa (raw, json)
Hash identifier: m24hawxS+c+IptS6tO7BZTjRFDwOhR1Z2/CpE9EYHf0=
Subject key identifier: F8:F2:B5:B5:2E:3B:07:B2:04:65:BC:1A:A4:FC:2E:56:F6:E7:40:73
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2365DC35B62E9798FF418FEA93C44DCFF2A8DDAB
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197213.roa
Signing time: Thu 20 Aug 2026 18:30:28 +0000
ROA not before: Thu 20 Aug 2026 18:25:28 +0000
ROA not after: Thu 19 Aug 2027 18:30:28 +0000
asID: 197213
IP address blocks: 82.139.194.0/24 maxlen: 24
82.139.204.0/24 maxlen: 24
82.139.219.0/24 maxlen: 24
82.139.221.0/24 maxlen: 24
82.139.224.0/24 maxlen: 24
82.139.225.0/24 maxlen: 24
82.139.234.0/24 maxlen: 24
82.139.235.0/24 maxlen: 24
82.139.236.0/24 maxlen: 24
82.139.238.0/24 maxlen: 24
82.139.242.0/24 maxlen: 24
82.139.246.0/24 maxlen: 24
212.60.156.0/24 maxlen: 24
212.60.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:65:dc:35:b6:2e:97:98:ff:41:8f:ea:93:c4:4d:cf:f2:a8:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 20 18:25:28 2026 GMT
Not After : Aug 19 18:30:28 2027 GMT
Subject: CN=F8F2B5B52E3B07B20465BC1AA4FC2E56F6E74073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:83:0c:c8:f5:2e:55:38:60:aa:9e:fa:3e:
27:7b:2e:08:91:e9:23:c5:8e:c8:93:f2:25:53:1d:
5a:95:e0:af:ca:f2:ad:8b:af:f8:98:ce:71:b9:40:
23:a7:89:13:cc:f0:b0:71:a9:5f:54:31:f0:1c:8c:
0e:9a:70:41:76:10:70:e5:61:65:1e:92:8c:a8:44:
25:7c:6f:23:fd:03:4f:aa:0a:c6:1f:4a:e9:10:0f:
4f:31:65:91:6b:f2:30:23:b5:75:59:c0:63:13:ea:
9a:32:9d:1e:2b:28:c0:6f:12:e0:8c:31:ec:1d:3c:
0d:0c:62:a4:ed:f8:44:48:b0:2e:b6:4c:7b:0b:d4:
1f:2b:ff:74:bb:83:51:e4:a5:70:3d:2f:41:4c:a7:
4f:ed:42:97:0e:09:d6:9e:6f:6d:b7:be:6e:f6:b4:
d2:60:62:b3:ea:b8:2d:ab:3a:16:b2:09:a2:37:39:
3e:41:d5:9a:79:67:93:f3:eb:48:9c:11:0b:88:f7:
51:3e:8c:cd:7e:7a:38:5a:fd:9a:b6:58:a7:2e:91:
f7:46:79:d6:be:e3:58:21:bb:71:5d:98:dd:42:75:
cd:02:2a:c5:b5:f9:e6:0f:a0:fc:ad:f5:46:25:47:
ee:fd:dd:02:10:bc:8a:3a:a2:44:2a:9a:60:b8:0d:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:B5:B5:2E:3B:07:B2:04:65:BC:1A:A4:FC:2E:56:F6:E7:40:73
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS197213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.194.0/24
82.139.204.0/24
82.139.219.0/24
82.139.221.0/24
82.139.224.0/23
82.139.234.0-82.139.236.255
82.139.238.0/24
82.139.242.0/24
82.139.246.0/24
212.60.156.0/24
212.60.158.0/24
Signature Algorithm: sha256WithRSAEncryption
77:23:82:4d:93:63:00:c8:bb:c5:5a:ad:11:8a:e2:b9:61:2c:
aa:8b:64:7c:08:5f:84:f2:c2:78:71:a3:8e:c5:49:21:16:f7:
ad:5c:3b:09:eb:98:68:2f:d6:91:b1:04:dd:f9:00:f3:04:66:
f6:ac:db:e9:eb:cc:54:ab:57:cf:7d:ec:47:7f:2f:4b:fb:ef:
be:01:b6:31:45:a0:14:57:4d:d5:e1:5b:e8:8a:57:ec:3c:76:
f6:39:a8:47:41:d3:18:86:e1:bb:84:55:a2:05:a0:51:8d:dd:
2f:00:9e:01:67:d9:c1:0d:57:d7:0b:bd:76:30:a6:84:52:43:
6b:51:6a:66:b7:76:b9:20:94:e8:bc:61:b7:68:82:5f:3f:88:
e0:7b:d1:07:8a:3a:c2:f5:ad:5f:46:82:50:fc:ca:d7:e0:8a:
b4:6e:e5:57:fc:27:3c:0f:51:03:69:57:b8:61:83:89:78:1d:
4a:ad:77:f2:0e:54:29:27:40:13:b0:76:8c:b6:45:85:1d:95:
da:04:23:44:e2:a3:a4:39:65:dd:fe:bb:95:36:6a:b9:70:80:
fb:00:33:28:46:83:6c:cc:95:52:fe:b2:65:25:ed:a6:75:f0:
14:31:38:d6:ac:2a:84:3b:f7:dc:c4:5f:ef:d6:27:30:b6:79:
01:9a:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:06 2026 by rpki-client