Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: Ov/w3L6THmW6lWiIb4jeE75mCKfrxa2AYD2w/Sw1fVk=
Subject key identifier: FE:28:A7:72:B7:D9:CB:FD:A3:35:4C:5C:08:D6:77:99:47:AA:DC:40
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5D7B2329028F50F250ADE178219D54A3EB464043
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
Signing time: Wed 17 Jun 2026 14:45:25 +0000
ROA not before: Wed 17 Jun 2026 14:40:25 +0000
ROA not after: Wed 16 Jun 2027 14:45:25 +0000
asID: 212238
IP address blocks: 51.194.80.0/24 maxlen: 24
51.241.23.0/24 maxlen: 24
51.241.109.0/24 maxlen: 24
51.241.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7b:23:29:02:8f:50:f2:50:ad:e1:78:21:9d:54:a3:eb:46:40:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 17 14:40:25 2026 GMT
Not After : Jun 16 14:45:25 2027 GMT
Subject: CN=FE28A772B7D9CBFDA3354C5C08D6779947AADC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:85:55:5a:be:65:60:b6:4d:fe:ea:d5:62:
ad:cd:b9:c0:4f:e9:05:59:7d:ed:47:cd:bc:ed:40:
02:b4:9b:24:dc:6c:97:33:e7:10:09:61:fe:95:db:
8a:c4:85:6d:aa:c0:4f:44:bc:8c:3a:bb:22:c9:51:
4a:84:83:37:a0:11:69:93:c0:63:a2:f5:39:56:33:
3a:1d:bf:79:2d:35:9b:2a:14:42:0a:ce:05:f8:be:
5c:94:7f:53:b4:cf:74:68:58:fc:ab:44:49:70:26:
69:db:c0:07:a9:74:72:fb:5e:e5:b1:f5:14:9a:90:
d6:2c:50:df:81:7f:95:0f:59:44:6f:1f:64:a5:87:
86:5c:ca:c1:da:00:14:30:fc:50:6e:c4:a8:e9:ff:
df:21:39:53:83:c4:9e:48:7d:c6:b4:23:08:a5:9e:
62:cc:c6:47:b3:06:f6:f2:6b:8f:6e:b5:99:64:63:
da:e3:70:77:29:ec:d8:01:30:87:ac:82:8a:5e:8b:
ae:b7:60:62:6e:ab:b6:c3:97:16:0c:da:fc:0b:b3:
76:a7:19:d4:a3:f8:14:f6:93:c5:7b:2f:43:36:70:
d5:9d:47:13:b4:c6:4b:00:5a:b6:0e:ee:0c:90:50:
07:27:c8:fe:15:59:f0:72:1a:ee:5a:92:2b:e5:69:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:A7:72:B7:D9:CB:FD:A3:35:4C:5C:08:D6:77:99:47:AA:DC:40
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.80.0/24
51.241.23.0/24
51.241.109.0/24
51.241.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c5:e2:9e:01:87:bc:81:ee:23:a9:31:b2:71:a5:77:1a:39:
0c:8e:d3:de:b4:4b:57:73:1f:a8:f1:89:0a:a4:01:fa:37:ab:
ca:ca:13:8b:2f:a5:dd:6e:f0:b4:b9:49:7f:2a:26:5a:bb:42:
09:58:62:c6:d8:3a:65:f5:23:07:74:64:5c:7e:99:57:40:36:
ec:fa:32:44:56:c6:84:7c:30:6e:8f:72:30:6d:fe:d5:85:c7:
08:e2:e8:41:42:08:1f:e6:c4:2a:2e:64:2a:3e:b3:c8:bb:58:
51:4f:88:2b:2e:3a:ef:a9:a4:36:b3:a4:37:17:b9:fe:f8:35:
25:8c:a9:ff:77:09:1c:59:ac:bc:3e:00:36:fd:f1:fe:fd:04:
22:18:f2:6e:7c:33:71:90:30:31:c9:25:50:6e:60:28:93:f3:
c3:08:88:14:e7:65:17:9c:e4:2f:5f:58:92:83:1b:b3:6d:0f:
55:08:c6:4e:9a:83:07:10:6e:4a:7b:07:9b:51:be:82:50:20:
89:e3:ca:3a:28:60:f0:1a:2d:2e:0a:64:58:74:c1:34:05:73:
a7:80:97:b9:35:37:5c:b5:35:a8:6a:96:72:f0:24:56:68:74:
3a:02:7c:6c:9b:d9:04:d5:7a:c2:0a:8b:7b:23:de:a2:b0:68:
77:37:a1:59
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUXXsjKQKPUPJQreF4IZ1Uo+tGQEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTcxNDQwMjVaFw0yNzA2MTYxNDQ1MjVaMDMxMTAvBgNV
BAMTKEZFMjhBNzcyQjdEOUNCRkRBMzM1NEM1QzA4RDY3Nzk5NDdBQURDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FIVVWr5lYLZN/urVYq3NucBP
6QVZfe1HzbztQAK0myTcbJcz5xAJYf6V24rEhW2qwE9EvIw6uyLJUUqEgzegEWmT
wGOi9TlWMzodv3ktNZsqFEIKzgX4vlyUf1O0z3RoWPyrRElwJmnbwAepdHL7XuWx
9RSakNYsUN+Bf5UPWURvH2Slh4ZcysHaABQw/FBuxKjp/98hOVODxJ5Ifca0Iwil
nmLMxkezBvbya49utZlkY9rjcHcp7NgBMIesgopei663YGJuq7bDlxYM2vwLs3an
GdSj+BT2k8V7L0M2cNWdRxO0xksAWrYO7gyQUAcnyP4VWfByGu5akivlaZuNAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQU/iincrfZy/2jNUxcCNZ3mUeq3EAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAM8JQ
AwQAM/EXAwQAM/FtAwQAM/FvMA0GCSqGSIb3DQEBCwUAA4IBAQBtxeKeAYe8ge4j
qTGycaV3GjkMjtPetEtXcx+o8YkKpAH6N6vKyhOLL6XdbvC0uUl/KiZau0IJWGLG
2Dpl9SMHdGRcfplXQDbs+jJEVsaEfDBuj3Iwbf7VhccI4uhBQggf5sQqLmQqPrPI
u1hRT4grLjrvqaQ2s6Q3F7n++DUljKn/dwkcWay8PgA2/fH+/QQiGPJufDNxkDAx
ySVQbmAok/PDCIgU52UXnOQvX1iSgxuzbQ9VCMZOmoMHEG5KewebUb6CUCCJ48o6
KGDwGi0uCmRYdME0BXOngJe5NTdctTWoapZy8CRWaHQ6Anxsm9kE1XrCCot7I96i
sGh3N6FZ
-----END CERTIFICATE-----
Generated at Sat Jun 20 02:15:22 2026 by rpki-client