Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 8QbbxMdg2yviZyiGdQsmxsVPnEY5M1tuhT/ztRkuw8w=
Subject key identifier: C9:C8:C2:63:96:8A:E0:A6:73:02:9A:19:9C:5C:0B:B8:F9:56:66:35
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7D1ED5B7E014F99FA970920A653B87F5AB0A3B11
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa
Signing time: Mon 20 Jul 2026 12:06:46 +0000
ROA not before: Mon 20 Jul 2026 12:01:46 +0000
ROA not after: Mon 19 Jul 2027 12:06:46 +0000
asID: 212238
IP address blocks: 46.236.222.0/24 maxlen: 24
78.41.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1e:d5:b7:e0:14:f9:9f:a9:70:92:0a:65:3b:87:f5:ab:0a:3b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 20 12:01:46 2026 GMT
Not After : Jul 19 12:06:46 2027 GMT
Subject: CN=C9C8C263968AE0A673029A199C5C0BB8F9566635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:d6:cc:51:d5:f6:be:cf:7d:b3:58:4f:6a:
11:ef:78:11:ce:25:81:0f:70:6a:41:9e:2c:19:1c:
fa:8c:0e:07:91:0d:46:b4:15:a1:79:40:07:2a:84:
8f:ad:e8:54:ee:34:4a:07:02:a9:58:07:d3:77:b8:
48:5e:ea:a0:27:a6:36:7f:7c:b9:ad:e6:4a:ca:24:
ca:52:b6:2f:0e:a0:13:db:65:4d:17:96:68:4f:ea:
a5:af:1e:1c:7a:94:35:0b:40:a6:9d:d0:3c:4a:29:
2b:a1:0e:44:c1:c0:31:ce:30:4e:10:be:31:51:08:
7e:6d:22:34:2a:05:38:d5:2f:85:85:38:28:cd:08:
5e:25:b4:00:89:61:45:cd:83:e5:29:78:b7:8a:9e:
d8:6c:a6:df:dd:74:4e:d6:a4:91:bf:70:a6:a0:8e:
3b:94:a4:3d:60:e2:09:85:0a:dd:09:67:f7:d9:78:
0c:4a:ea:7c:d7:c1:3d:cf:8a:0b:de:72:03:69:8d:
ee:21:db:45:51:1c:9a:46:aa:9c:ee:4a:c5:7e:2a:
47:da:0b:00:d9:36:5a:f6:cb:7f:4c:30:13:5f:df:
12:0b:d4:dc:15:aa:71:72:1d:42:e1:a6:63:4c:29:
7f:5f:0f:73:1f:9e:ab:75:2f:b2:40:ed:97:d3:e6:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:C2:63:96:8A:E0:A6:73:02:9A:19:9C:5C:0B:B8:F9:56:66:35
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.222.0/24
78.41.49.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:3f:6b:3f:ba:45:dc:a7:d4:63:f9:e0:3e:8f:77:2a:03:
b7:ff:21:ec:05:57:e3:08:e5:64:b0:70:57:c9:6e:12:94:da:
4e:59:b9:3d:a8:03:59:ce:51:21:6b:cb:9b:b1:ec:5a:10:ed:
46:30:ce:de:cc:dc:d6:ef:c9:81:b6:64:5e:78:01:c8:30:e3:
e5:e1:4a:c6:25:dc:f8:00:10:a0:c6:60:3d:2f:99:ab:6d:a7:
b5:72:b8:d2:e3:60:82:09:ea:c1:80:25:ef:d0:13:58:d2:42:
a7:84:94:31:7e:e9:34:9e:27:75:4b:b5:5b:b9:29:4d:a9:cb:
f2:8f:52:1f:ca:5e:2b:01:6b:d7:5e:cd:53:e9:4e:23:88:7a:
3c:3d:be:28:f3:79:9c:eb:f2:57:9f:71:d2:96:bd:37:73:fe:
71:ea:c0:7d:65:7d:a2:ff:16:f0:37:0e:e1:92:c1:c5:0d:40:
5c:49:9b:c7:23:c9:06:5a:09:ca:a6:65:65:03:e5:4b:3b:fd:
5e:f7:51:14:59:ac:82:6f:7f:32:66:91:51:b4:18:0e:e2:fd:
55:d1:84:e2:fc:e3:60:76:af:45:53:7b:d4:a5:a8:14:ea:9e:
eb:07:81:b9:91:4b:d2:e1:2e:40:f0:92:3f:c8:28:aa:3b:e5:
d2:41:b0:68
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUfR7Vt+AU+Z+pcJIKZTuH9asKOxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA3MjAxMjAxNDZaFw0yNzA3MTkxMjA2NDZaMDMxMTAvBgNV
BAMTKEM5QzhDMjYzOTY4QUUwQTY3MzAyOUExOTlDNUMwQkI4Rjk1NjY2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiNdbMUdX2vs99s1hPahHveBHO
JYEPcGpBniwZHPqMDgeRDUa0FaF5QAcqhI+t6FTuNEoHAqlYB9N3uEhe6qAnpjZ/
fLmt5krKJMpSti8OoBPbZU0XlmhP6qWvHhx6lDULQKad0DxKKSuhDkTBwDHOME4Q
vjFRCH5tIjQqBTjVL4WFOCjNCF4ltACJYUXNg+UpeLeKnthspt/ddE7WpJG/cKag
jjuUpD1g4gmFCt0JZ/fZeAxK6nzXwT3PigvecgNpje4h20VRHJpGqpzuSsV+Kkfa
CwDZNlr2y39MMBNf3xIL1NwVqnFyHULhpmNMKX9fD3Mfnqt1L7JA7ZfT5j77AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUycjCY5aK4KZzApoZnFwLuPlWZjUwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuze
AwQATikxMA0GCSqGSIb3DQEBCwUAA4IBAQCCQD9rP7pF3KfUY/ngPo93KgO3/yHs
BVfjCOVksHBXyW4SlNpOWbk9qANZzlEha8ubsexaEO1GMM7ezNzW78mBtmReeAHI
MOPl4UrGJdz4ABCgxmA9L5mrbae1crjS42CCCerBgCXv0BNY0kKnhJQxfuk0nid1
S7VbuSlNqcvyj1Ifyl4rAWvXXs1T6U4jiHo8Pb4o83mc6/JXn3HSlr03c/5x6sB9
ZX2i/xbwNw7hksHFDUBcSZvHI8kGWgnKpmVlA+VLO/1e91EUWayCb38yZpFRtBgO
4v1V0YTi/ONgdq9FU3vUpagU6p7rB4G5kUvS4S5A8JI/yCiqO+XSQbBo
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:03 2026 by rpki-client