Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: Jb/5sAzdu/vAyi8OOcXNO7vpdd3aO9G9TmIf+yUc9+A=
Subject key identifier: C2:35:D3:25:B7:C8:2D:7D:C0:6F:B6:56:38:88:25:D4:B3:02:65:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3A35A0A3CE8E9B61DCF095F15352E75611512CD3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
Signing time: Sat 26 Sep 2026 08:59:29 +0000
ROA not before: Sat 26 Sep 2026 08:54:29 +0000
ROA not after: Sat 25 Sep 2027 08:59:29 +0000
asID: 212238
IP address blocks: 51.146.240.0/24 maxlen: 24
51.194.80.0/24 maxlen: 24
51.241.23.0/24 maxlen: 24
51.241.109.0/24 maxlen: 24
51.241.111.0/24 maxlen: 24
51.241.209.0/24 maxlen: 24
78.105.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:35:a0:a3:ce:8e:9b:61:dc:f0:95:f1:53:52:e7:56:11:51:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 26 08:54:29 2026 GMT
Not After : Sep 25 08:59:29 2027 GMT
Subject: CN=C235D325B7C82D7DC06FB656388825D4B3026554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:04:c7:b0:70:6c:b7:75:6a:a3:da:36:b8:
7f:81:51:07:72:62:37:53:0f:33:6c:b5:26:f1:8e:
f6:01:47:92:c4:33:78:dd:3a:5a:4a:7e:49:03:1b:
19:9a:5e:43:e4:b4:eb:37:12:7c:9e:37:a6:dc:40:
66:0d:94:8a:3d:fe:e5:2c:64:72:8a:61:06:8c:01:
eb:ba:d3:75:4d:f8:b0:c9:6b:a2:9d:6a:94:5e:62:
0e:58:78:b7:ae:f4:a2:48:d1:c8:e5:7a:c7:f4:aa:
12:61:dd:ea:db:6a:2a:80:1b:d9:4d:0e:72:c6:d9:
81:45:0f:c1:36:7d:c2:6f:20:4b:e4:87:46:6a:41:
75:92:c3:6d:4a:0a:61:78:25:20:0c:d1:77:f7:a3:
dc:51:9a:76:b8:62:d8:22:45:0b:87:c3:08:f2:f2:
65:98:5a:e1:10:f2:e5:d2:41:5e:fd:7f:04:1e:ff:
64:3c:27:b3:30:77:73:e2:b2:2d:4f:e3:d0:bd:a3:
d9:a4:7f:f2:31:ee:1f:a8:0b:99:fd:12:d2:21:20:
d9:44:14:02:af:2e:ea:08:03:9a:f9:eb:82:92:f0:
53:1c:05:08:4a:dd:96:fd:6b:16:f1:e2:32:05:7d:
29:c4:e6:cb:7f:c7:ff:4c:9c:01:d4:33:37:e0:b5:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:D3:25:B7:C8:2D:7D:C0:6F:B6:56:38:88:25:D4:B3:02:65:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.240.0/24
51.194.80.0/24
51.241.23.0/24
51.241.109.0/24
51.241.111.0/24
51.241.209.0/24
78.105.114.0/24
Signature Algorithm: sha256WithRSAEncryption
78:17:69:ef:58:c8:89:d1:7e:62:42:59:1d:8d:10:e0:dc:3c:
f7:60:d7:92:49:4c:db:7f:f9:18:7e:e5:d1:84:16:24:54:45:
4f:dc:56:94:a7:48:1f:57:86:04:17:ba:3f:d4:2d:e2:63:05:
6e:04:36:a8:5a:fa:ad:4e:6f:02:c8:32:1b:ba:2e:d9:ed:e7:
2c:32:f9:d6:62:c4:f4:82:bc:7c:dd:38:56:f9:dd:54:53:29:
9c:29:56:5e:2d:38:fe:54:be:36:d1:5b:ac:e8:d8:69:fe:8e:
f5:50:80:ba:5c:3e:7d:03:96:d2:26:32:f0:d5:78:c1:25:c2:
62:06:65:56:14:14:2d:a7:3e:a2:41:05:9f:5f:15:a0:85:19:
ac:91:ec:a9:8e:f8:f4:0e:6e:78:ea:9c:82:2b:3f:37:b4:28:
63:16:99:8f:ab:a1:e1:91:9e:8b:68:34:30:13:db:f8:00:e8:
fe:5f:f0:1b:18:8e:d1:f3:42:5f:4c:64:6d:12:fb:cf:a9:6c:
da:23:bf:2c:2f:04:25:44:68:b2:4c:4a:b7:74:a9:da:3d:15:
e6:79:b7:98:22:bf:9d:e1:13:49:e7:38:71:af:8d:9d:e9:88:
d9:3a:cb:87:88:d3:e0:58:08:f1:f1:2e:d4:36:b4:60:7e:3a:
00:33:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:05:58 2026 by rpki-client