Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: IMmNxgCS0psFMTPM8KT88HC6jsmSpxz9BlCGsoSGLz4=
Subject key identifier: 81:82:C8:23:2A:CC:22:66:61:C7:38:E9:52:31:93:CB:21:93:DB:11
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 58218447ACDB446F5779CB34049A6CAE0D344CB2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
Signing time: Sun 23 Aug 2026 20:24:42 +0000
ROA not before: Sun 23 Aug 2026 20:19:42 +0000
ROA not after: Sun 22 Aug 2027 20:24:42 +0000
asID: 212238
IP address blocks: 82.21.2.0/24 maxlen: 24
82.21.56.0/24 maxlen: 24
82.21.59.0/24 maxlen: 24
82.21.68.0/24 maxlen: 24
82.21.70.0/24 maxlen: 24
82.21.87.0/24 maxlen: 24
82.21.108.0/24 maxlen: 24
82.21.133.0/24 maxlen: 24
82.21.141.0/24 maxlen: 24
82.21.142.0/24 maxlen: 24
82.21.151.0/24 maxlen: 24
82.21.158.0/24 maxlen: 24
82.21.159.0/24 maxlen: 24
82.21.168.0/24 maxlen: 24
82.21.175.0/24 maxlen: 24
82.21.189.0/24 maxlen: 24
82.21.191.0/24 maxlen: 24
82.21.193.0/24 maxlen: 24
82.21.208.0/24 maxlen: 24
82.21.211.0/24 maxlen: 24
82.21.237.0/24 maxlen: 24
82.21.243.0/24 maxlen: 24
82.22.27.0/24 maxlen: 24
82.22.34.0/24 maxlen: 24
82.22.46.0/24 maxlen: 24
82.22.65.0/24 maxlen: 24
82.22.79.0/24 maxlen: 24
82.22.85.0/24 maxlen: 24
82.22.87.0/24 maxlen: 24
82.22.99.0/24 maxlen: 24
82.22.147.0/24 maxlen: 24
82.22.212.0/24 maxlen: 24
82.22.222.0/24 maxlen: 24
82.22.243.0/24 maxlen: 24
82.22.253.0/24 maxlen: 24
82.23.17.0/24 maxlen: 24
82.23.18.0/24 maxlen: 24
82.23.21.0/24 maxlen: 24
82.23.22.0/24 maxlen: 24
82.23.37.0/24 maxlen: 24
82.23.38.0/24 maxlen: 24
82.23.119.0/24 maxlen: 24
82.23.120.0/24 maxlen: 24
82.23.121.0/24 maxlen: 24
82.23.122.0/24 maxlen: 24
82.23.126.0/24 maxlen: 24
82.23.145.0/24 maxlen: 24
82.23.146.0/24 maxlen: 24
82.23.165.0/24 maxlen: 24
82.23.212.0/24 maxlen: 24
82.23.214.0/24 maxlen: 24
82.23.217.0/24 maxlen: 24
82.23.224.0/24 maxlen: 24
82.23.229.0/24 maxlen: 24
82.23.233.0/24 maxlen: 24
82.23.243.0/24 maxlen: 24
82.23.253.0/24 maxlen: 24
82.23.254.0/24 maxlen: 24
82.23.255.0/24 maxlen: 24
82.24.34.0/24 maxlen: 24
82.24.46.0/24 maxlen: 24
82.24.112.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
82.24.182.0/24 maxlen: 24
82.24.214.0/24 maxlen: 24
82.24.215.0/24 maxlen: 24
82.24.239.0/24 maxlen: 24
82.24.243.0/24 maxlen: 24
82.24.253.0/24 maxlen: 24
82.25.34.0/24 maxlen: 24
82.25.200.0/24 maxlen: 24
82.25.212.0/24 maxlen: 24
82.25.219.0/24 maxlen: 24
82.25.230.0/24 maxlen: 24
82.25.234.0/24 maxlen: 24
82.25.243.0/24 maxlen: 24
82.25.253.0/24 maxlen: 24
82.26.220.0/24 maxlen: 24
82.26.230.0/24 maxlen: 24
82.26.233.0/24 maxlen: 24
82.26.235.0/24 maxlen: 24
82.26.237.0/24 maxlen: 24
82.26.240.0/24 maxlen: 24
82.26.253.0/24 maxlen: 24
82.27.130.0/24 maxlen: 24
82.27.132.0/24 maxlen: 24
82.27.213.0/24 maxlen: 24
82.27.218.0/24 maxlen: 24
82.27.222.0/24 maxlen: 24
82.27.225.0/24 maxlen: 24
82.27.234.0/24 maxlen: 24
82.27.238.0/24 maxlen: 24
82.27.253.0/24 maxlen: 24
82.29.78.0/24 maxlen: 24
82.29.92.0/24 maxlen: 24
82.29.94.0/24 maxlen: 24
82.29.96.0/24 maxlen: 24
82.29.97.0/24 maxlen: 24
82.29.100.0/24 maxlen: 24
82.29.101.0/24 maxlen: 24
82.29.125.0/24 maxlen: 24
82.29.202.0/24 maxlen: 24
82.29.211.0/24 maxlen: 24
82.29.215.0/24 maxlen: 24
82.29.217.0/24 maxlen: 24
82.29.220.0/24 maxlen: 24
82.29.228.0/24 maxlen: 24
82.29.233.0/24 maxlen: 24
82.29.242.0/24 maxlen: 24
82.29.243.0/24 maxlen: 24
82.38.129.0/24 maxlen: 24
82.40.51.0/24 maxlen: 24
82.41.195.0/24 maxlen: 24
82.47.13.0/24 maxlen: 24
82.47.120.0/23 maxlen: 24
82.47.142.0/24 maxlen: 24
82.47.179.0/24 maxlen: 24
82.47.202.0/24 maxlen: 24
82.47.203.0/24 maxlen: 24
82.47.204.0/24 maxlen: 24
82.47.207.0/24 maxlen: 24
178.83.96.0/24 maxlen: 24
178.83.114.0/24 maxlen: 24
178.83.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:21:84:47:ac:db:44:6f:57:79:cb:34:04:9a:6c:ae:0d:34:4c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 20:19:42 2026 GMT
Not After : Aug 22 20:24:42 2027 GMT
Subject: CN=8182C8232ACC226661C738E9523193CB2193DB11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:1d:8e:06:57:ce:25:f0:0c:87:8c:c7:00:
ae:61:68:61:d0:0a:4b:e5:6e:09:60:01:60:26:db:
6b:ba:c5:33:d0:70:31:b0:8d:d3:72:a3:dc:b5:aa:
83:9d:9b:83:06:ad:1f:84:fe:98:5e:82:06:7d:d6:
04:f5:af:0b:dc:c4:36:09:f2:4c:3f:95:77:a8:f2:
ac:38:8b:a4:b0:d8:31:34:15:6b:b3:1e:b2:f1:c6:
d2:7e:96:ca:77:21:c7:bb:ff:ff:8e:05:83:14:ad:
31:12:32:33:ad:7a:27:ae:eb:0c:a6:bc:0c:06:74:
ea:b0:ee:b0:e3:c5:0f:5a:d4:d6:ae:30:8d:4d:68:
e7:74:b6:00:1c:a5:1a:da:a9:46:32:a3:6d:8c:40:
9f:91:88:0b:55:36:7f:e4:0c:67:12:b3:87:14:fb:
e9:5e:13:4e:cb:5e:ea:b2:2f:76:34:10:75:51:26:
fb:fc:02:8f:dc:22:0b:db:08:6b:8d:4e:d5:ad:18:
9f:51:eb:eb:9a:18:d5:bb:0b:bf:8e:f3:df:59:54:
d6:a5:5b:cb:3f:d8:08:8b:2b:0c:4d:5d:fd:bc:eb:
87:ca:30:d7:c3:36:87:ad:a0:c2:db:1a:32:9c:27:
31:fe:ef:52:13:9b:91:8f:5b:e3:b6:b7:d5:5e:01:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:C8:23:2A:CC:22:66:61:C7:38:E9:52:31:93:CB:21:93:DB:11
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.2.0/24
82.21.56.0/24
82.21.59.0/24
82.21.68.0/24
82.21.70.0/24
82.21.87.0/24
82.21.108.0/24
82.21.133.0/24
82.21.141.0-82.21.142.255
82.21.151.0/24
82.21.158.0/23
82.21.168.0/24
82.21.175.0/24
82.21.189.0/24
82.21.191.0/24
82.21.193.0/24
82.21.208.0/24
82.21.211.0/24
82.21.237.0/24
82.21.243.0/24
82.22.27.0/24
82.22.34.0/24
82.22.46.0/24
82.22.65.0/24
82.22.79.0/24
82.22.85.0/24
82.22.87.0/24
82.22.99.0/24
82.22.147.0/24
82.22.212.0/24
82.22.222.0/24
82.22.243.0/24
82.22.253.0/24
82.23.17.0-82.23.18.255
82.23.21.0-82.23.22.255
82.23.37.0-82.23.38.255
82.23.119.0-82.23.122.255
82.23.126.0/24
82.23.145.0-82.23.146.255
82.23.165.0/24
82.23.212.0/24
82.23.214.0/24
82.23.217.0/24
82.23.224.0/24
82.23.229.0/24
82.23.233.0/24
82.23.243.0/24
82.23.253.0-82.23.255.255
82.24.34.0/24
82.24.46.0/24
82.24.112.0/24
82.24.175.0/24
82.24.182.0/24
82.24.214.0/23
82.24.239.0/24
82.24.243.0/24
82.24.253.0/24
82.25.34.0/24
82.25.200.0/24
82.25.212.0/24
82.25.219.0/24
82.25.230.0/24
82.25.234.0/24
82.25.243.0/24
82.25.253.0/24
82.26.220.0/24
82.26.230.0/24
82.26.233.0/24
82.26.235.0/24
82.26.237.0/24
82.26.240.0/24
82.26.253.0/24
82.27.130.0/24
82.27.132.0/24
82.27.213.0/24
82.27.218.0/24
82.27.222.0/24
82.27.225.0/24
82.27.234.0/24
82.27.238.0/24
82.27.253.0/24
82.29.78.0/24
82.29.92.0/24
82.29.94.0/24
82.29.96.0/23
82.29.100.0/23
82.29.125.0/24
82.29.202.0/24
82.29.211.0/24
82.29.215.0/24
82.29.217.0/24
82.29.220.0/24
82.29.228.0/24
82.29.233.0/24
82.29.242.0/23
82.38.129.0/24
82.40.51.0/24
82.41.195.0/24
82.47.13.0/24
82.47.120.0/23
82.47.142.0/24
82.47.179.0/24
82.47.202.0-82.47.204.255
82.47.207.0/24
178.83.96.0/24
178.83.114.0/24
178.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7a:f7:72:b9:84:9f:57:3b:95:ec:bd:b7:12:e2:bc:8c:16:
e9:14:5e:c9:07:65:86:a5:56:af:52:fa:20:06:ea:17:f3:ec:
47:34:63:08:e4:d2:81:ec:d3:a1:9b:3d:0e:04:71:7d:0d:2e:
5a:ee:7f:69:fa:a1:87:65:8a:0b:76:33:55:da:a0:c2:17:a2:
4a:c3:31:c9:d4:70:7d:35:94:3d:94:b5:df:ca:4d:f7:5f:9b:
84:b5:b8:80:94:42:2b:1c:4b:88:4e:1e:83:ca:df:3e:6b:78:
ea:08:82:ce:e6:46:e9:47:c5:20:a7:73:c9:57:fa:4b:d9:77:
59:54:68:ba:45:2c:aa:59:e2:ff:7e:03:16:ad:e6:8d:06:34:
09:bf:53:e7:31:c3:fc:44:e8:f0:6c:bc:57:f3:d2:15:76:16:
16:8b:d1:24:87:b7:80:11:3c:80:ec:e5:71:72:82:d0:2b:50:
f9:6c:16:ac:67:95:05:14:d7:80:d8:13:44:b7:37:65:9d:69:
cf:55:98:b0:1c:c1:67:52:6e:51:0a:3b:32:a1:5b:0d:5e:ea:
83:80:fc:c8:6c:9d:f7:5b:00:78:14:32:ce:a6:f5:fe:c9:5f:
08:16:69:66:5f:2b:5b:3b:10:87:3c:de:9f:3f:23:69:5f:c7:
17:db:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:19:05 2026 by rpki-client