Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: rDKNVr050xd8LH44+AjpQYkwzr1QL87FO/CAIShPZXc=
Subject key identifier: 43:28:45:BD:8A:48:4D:35:CE:88:11:3B:8A:0F:12:5D:60:C1:45:08
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 20AAF7AD45959007CCDE1F3A5096C3B478FAE22F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
Signing time: Thu 03 Sep 2026 08:39:27 +0000
ROA not before: Thu 03 Sep 2026 08:34:27 +0000
ROA not after: Thu 02 Sep 2027 08:39:27 +0000
asID: 212238
IP address blocks: 51.146.240.0/24 maxlen: 24
51.194.80.0/24 maxlen: 24
51.241.23.0/24 maxlen: 24
51.241.109.0/24 maxlen: 24
51.241.111.0/24 maxlen: 24
51.241.209.0/24 maxlen: 24
51.241.218.0/24 maxlen: 24
78.105.114.0/24 maxlen: 24
94.116.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:aa:f7:ad:45:95:90:07:cc:de:1f:3a:50:96:c3:b4:78:fa:e2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 3 08:34:27 2026 GMT
Not After : Sep 2 08:39:27 2027 GMT
Subject: CN=432845BD8A484D35CE88113B8A0F125D60C14508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:b8:82:3f:73:41:7e:18:58:c5:8b:f5:69:
c6:33:83:aa:e3:d3:83:6c:22:5b:2b:16:5b:65:89:
ac:cd:d5:f0:69:b7:c6:cd:91:7b:db:b5:75:73:2b:
d6:29:ad:aa:cb:58:d2:a7:32:fa:c7:58:e7:82:35:
f2:09:4c:bb:7c:34:a3:a4:ec:cd:df:16:6f:da:0b:
3c:a8:02:68:70:d0:22:7d:8d:9f:8f:39:c2:ed:50:
e3:c3:fe:05:1f:b8:f9:77:8a:a5:5b:75:d3:a7:e6:
a6:84:d6:a5:01:a4:2f:ac:ad:9b:c6:0b:5e:ef:10:
dc:31:cc:66:ad:8c:8c:c6:99:c3:3d:59:0b:86:74:
91:d2:5c:98:3d:1a:00:92:3b:c1:8d:0a:47:b0:31:
47:49:94:f0:ae:73:db:61:dd:f0:45:b9:6a:13:10:
82:ce:f4:d5:f0:30:45:02:ee:f5:45:87:42:64:83:
3b:65:80:48:09:d6:2f:79:d5:10:3c:c4:4c:8b:ea:
c5:cf:d4:c3:06:c5:51:13:64:0a:f5:20:a2:58:e7:
fa:b8:e7:40:ee:83:8a:44:ff:64:db:22:9f:82:b1:
74:9b:42:65:33:6c:4a:46:4c:f8:54:6e:b7:ca:1b:
67:44:a3:0e:2e:ba:e9:50:b4:68:d9:79:16:25:9a:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:45:BD:8A:48:4D:35:CE:88:11:3B:8A:0F:12:5D:60:C1:45:08
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.240.0/24
51.194.80.0/24
51.241.23.0/24
51.241.109.0/24
51.241.111.0/24
51.241.209.0/24
51.241.218.0/24
78.105.114.0/24
94.116.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:32:66:98:09:03:ba:fd:5d:e8:d3:8d:92:24:ef:a6:7c:f4:
43:f8:26:47:05:43:19:94:30:84:ab:8f:e6:ce:4a:8a:9e:23:
95:05:dc:c0:f9:d2:99:14:72:0d:5d:e1:fc:f4:ce:61:e0:be:
08:68:65:d7:9c:3b:92:ee:34:de:92:d1:c9:a5:72:04:0a:08:
e9:7b:70:44:1c:b7:9e:6e:ae:24:4d:fb:8a:73:2b:28:be:62:
e2:2a:94:6d:7a:24:9d:14:55:08:7b:3a:8b:45:67:6c:12:80:
14:3a:95:9f:b2:24:cc:6b:54:88:d0:9f:69:78:5d:65:cb:a4:
eb:8b:c9:17:96:3a:d1:7c:54:c5:a9:a6:98:1e:45:cc:3a:7c:
40:a6:86:0a:fc:61:d2:53:dd:08:e6:29:c4:fc:14:e3:a1:c9:
8e:d9:c9:ed:20:71:09:d0:bb:76:95:9d:7e:f5:4f:b5:d4:87:
bd:60:a4:95:08:85:f1:6d:22:66:93:1b:03:57:24:8c:8f:66:
59:c3:fa:9e:3b:88:2a:b8:44:61:69:37:1e:2c:13:68:54:af:
73:ec:bc:7e:2a:42:1d:8f:98:1e:ad:1e:a2:a2:a7:fb:ac:23:
91:ba:54:f1:dc:7e:45:e5:77:3d:1d:4c:02:56:ac:1c:0d:4a:
92:14:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:42 2026 by rpki-client