Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: N89YlRznWlYXhMwAGglqZH3OEPPtAbjwAeHWAiVsRTQ=
Subject key identifier: 07:89:E3:73:9D:52:84:C6:EE:4A:37:D4:0B:33:23:2A:9E:67:76:BC
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7C89386473CB367612B1C9F219E377BCBB18924D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa
Signing time: Sun 02 Aug 2026 20:18:55 +0000
ROA not before: Sun 02 Aug 2026 20:13:55 +0000
ROA not after: Sun 01 Aug 2027 20:18:55 +0000
asID: 212238
IP address blocks: 46.236.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:89:38:64:73:cb:36:76:12:b1:c9:f2:19:e3:77:bc:bb:18:92:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 2 20:13:55 2026 GMT
Not After : Aug 1 20:18:55 2027 GMT
Subject: CN=0789E3739D5284C6EE4A37D40B33232A9E6776BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a7:8b:90:9a:f0:8f:2a:72:ce:e2:f0:a8:a2:
bc:78:58:6c:16:10:cb:08:5b:06:dc:86:02:53:bb:
5b:f0:b8:b5:82:e8:b1:b4:d3:01:af:84:5a:7b:00:
69:ef:bf:5a:fb:1d:38:8b:d9:61:4a:68:6d:1e:b2:
f3:f4:7d:fa:13:9d:66:e9:27:f3:98:5d:49:01:26:
c3:0f:24:07:52:cc:42:5f:9e:56:7f:5d:42:9a:36:
8c:eb:1d:42:cf:63:c8:05:fe:8f:37:0d:7b:8d:82:
e1:26:14:29:01:5c:d1:87:78:20:aa:25:0a:ce:7c:
ae:9c:d2:da:c4:17:ec:08:c8:15:60:7d:b4:00:d1:
5a:1d:db:c0:1e:ed:8a:df:71:81:dd:0d:00:ec:05:
ba:9b:82:05:70:bc:cb:31:13:f5:f8:57:f6:d6:82:
4f:16:3e:c9:30:03:b0:b7:40:14:a4:71:c3:c8:1b:
95:04:a2:cc:85:f6:68:6d:7b:03:40:df:3b:d5:94:
ef:62:9c:b1:a0:a2:6e:ba:e7:98:df:5f:ed:59:37:
df:1c:16:2b:e0:36:48:80:07:0c:4b:5d:57:59:fe:
fd:0f:af:e3:e9:08:8f:e4:25:9d:e7:3a:80:00:91:
8b:26:f4:4b:41:63:de:b4:d7:5b:e0:e4:0b:4f:f5:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:E3:73:9D:52:84:C6:EE:4A:37:D4:0B:33:23:2A:9E:67:76:BC
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1a:e5:7d:db:93:9d:f2:e3:4d:c4:16:40:b2:86:f7:43:e5:
4c:21:bc:39:27:bd:f9:95:c4:67:cc:a1:fd:7b:ff:d4:2f:1e:
da:a4:9b:eb:d5:27:8b:0a:5b:14:62:5e:b7:c4:93:30:b2:9f:
b0:ef:10:db:ee:0b:a3:50:1a:37:c2:66:e7:33:e3:00:e2:2a:
4d:46:a5:e0:fa:0d:95:90:f6:84:70:5b:ca:8f:ab:95:00:89:
94:0c:ea:32:57:b7:5f:b6:d5:ee:96:9c:51:89:6f:c6:65:fa:
3b:2d:44:f4:22:bf:fc:8a:a4:e8:1c:9d:2f:d3:d6:09:87:b4:
b2:f0:6e:30:57:f9:d2:36:fe:7c:40:a4:5c:a4:5e:59:c8:ef:
f2:4d:1e:d7:b8:5c:93:54:cb:6f:8c:ea:68:86:5b:b4:e0:e0:
4a:e1:4f:15:3d:ed:6e:30:da:a5:6e:3b:e9:94:d1:91:95:6f:
75:71:ec:b0:98:7e:83:06:56:5a:bd:c6:f1:c4:19:44:a2:8c:
95:46:54:46:f1:8d:04:ad:0a:2a:ed:22:4d:0b:f2:41:46:57:
fa:39:c5:19:dd:61:5c:42:6f:13:e2:5c:e5:bd:79:8c:3f:46:
7a:b9:16:d9:cb:a9:25:3d:34:fb:3c:d1:ea:8f:0b:0b:10:dd:
24:32:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:25:15 2026 by rpki-client