Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: IvNkQXIvcQq9BHIGZ3vhZ5S725i3cMAIWbTItWFjaQc=
Subject key identifier: F4:E3:3D:25:2B:8B:2C:F3:36:43:6A:1E:6E:E0:D6:B8:B7:C0:2C:6F
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 1F2C99320FF20F5633D4CEB6C198F0A874315911
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS212238.roa
Signing time: Mon 05 Oct 2026 10:03:23 +0000
ROA not before: Mon 05 Oct 2026 09:58:23 +0000
ROA not after: Mon 04 Oct 2027 10:03:23 +0000
asID: 212238
IP address blocks: 79.182.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2c:99:32:0f:f2:0f:56:33:d4:ce:b6:c1:98:f0:a8:74:31:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 09:58:23 2026 GMT
Not After : Oct 4 10:03:23 2027 GMT
Subject: CN=F4E33D252B8B2CF336436A1E6EE0D6B8B7C02C6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:8b:36:dc:9c:32:81:5e:12:85:ab:fe:d4:
82:62:3e:7d:4a:09:ec:2d:68:c0:05:14:83:98:9a:
70:9f:96:7c:31:c3:8e:5e:82:94:7a:63:9d:88:2e:
b1:e2:c4:a8:b1:f0:50:70:5e:c0:e3:93:cc:d6:fd:
2e:4b:a7:c4:02:85:cd:4f:3f:1e:11:96:cc:e4:bd:
8a:c6:6e:ab:c8:a2:a3:35:e0:02:16:7c:97:05:f6:
78:cf:e4:5b:e6:f2:01:8d:0b:a6:9a:ff:41:85:f1:
e8:a8:2d:38:9b:0d:79:d6:ef:c2:33:39:e6:c0:4d:
1f:af:26:6a:c7:0e:0f:97:56:88:e6:8e:bd:55:ed:
d6:ab:19:7b:48:48:6d:38:7b:7b:05:e2:c6:37:51:
db:57:0c:9c:a6:2b:61:bd:03:4d:cc:b8:a8:e9:fd:
a0:14:f5:22:54:98:28:38:8c:55:aa:1d:0a:e8:7b:
7a:e5:f7:cd:f8:02:34:45:fb:77:64:cb:cc:76:a3:
ce:2c:b4:79:f6:3c:aa:de:a3:8c:bc:3c:64:f4:fe:
56:51:8a:a6:ab:26:75:3d:ed:60:b6:0b:5a:74:48:
8c:7e:65:1f:b0:50:00:a3:47:8a:01:ad:78:29:38:
57:5b:0a:26:48:c0:3f:28:07:5f:c2:ed:f7:16:29:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:3D:25:2B:8B:2C:F3:36:43:6A:1E:6E:E0:D6:B8:B7:C0:2C:6F
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.6.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2b:5d:77:13:f3:20:06:42:4f:e5:fd:df:e6:76:cf:90:56:
c4:39:04:62:68:f8:87:6b:23:bb:a6:68:5e:9b:f8:b0:7e:38:
ec:a5:d2:72:7b:a6:75:c3:1f:85:23:17:8a:de:9b:87:02:e5:
0e:6d:a5:4a:1a:49:88:ec:3c:8a:6f:32:ec:fa:36:1d:e2:2c:
e5:5b:56:6b:31:ab:7d:2b:d8:87:6e:01:bd:10:08:e9:9c:0f:
7e:86:1b:72:48:33:6f:36:07:9f:32:06:30:f2:96:0f:1f:8e:
df:ef:3b:a1:a0:23:af:f7:f1:63:95:2b:a5:1a:64:1d:45:d9:
07:78:4d:68:57:43:85:29:9c:53:4c:2f:fb:e7:37:08:8d:5d:
4f:f1:66:4a:47:d1:03:d2:21:d7:e2:80:6d:85:26:9b:a6:77:
27:22:b1:b5:01:7b:b9:c4:d2:7e:0c:7d:56:ce:b5:11:f3:6d:
c7:5e:d9:e9:c5:7d:4c:1e:0a:2a:fb:0b:a5:13:38:38:26:23:
a5:61:62:bf:34:a2:44:be:91:c0:eb:28:6f:74:21:05:0d:e2:
0f:88:a2:a8:20:29:8f:a6:ef:15:87:40:ab:4f:b6:5c:5d:93:
89:22:72:f7:f6:76:46:25:a5:92:f5:22:18:8c:56:0c:9f:94:
81:81:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:41 2026 by rpki-client