Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: WRF6Ksx2c4lAwrddDk0ALvOWpHL1qqwGeomGbNYm8V4=
Subject key identifier: 82:84:2A:3F:73:75:9C:F0:89:D9:52:3A:92:C7:69:E8:CA:B2:14:4C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 28F6C167FFC537AC4C6A4E19AC5C26B164076C71
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
Signing time: Tue 27 Oct 2026 09:11:00 +0000
ROA not before: Tue 27 Oct 2026 09:06:00 +0000
ROA not after: Tue 26 Oct 2027 09:11:00 +0000
asID: 212238
IP address blocks: 143.20.34.0/24 maxlen: 24
143.20.56.0/24 maxlen: 24
143.20.79.0/24 maxlen: 24
143.20.87.0/24 maxlen: 24
143.20.160.0/24 maxlen: 24
143.20.165.0/24 maxlen: 24
143.20.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 20:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f6:c1:67:ff:c5:37:ac:4c:6a:4e:19:ac:5c:26:b1:64:07:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 27 09:06:00 2026 GMT
Not After : Oct 26 09:11:00 2027 GMT
Subject: CN=82842A3F73759CF089D9523A92C769E8CAB2144C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:da:48:8c:90:ea:2e:f2:78:87:e5:ac:97:
fc:d2:c9:b5:ee:78:3a:a7:3c:92:63:53:f0:35:d0:
d2:bc:5b:4d:1a:9e:71:8e:4a:94:13:30:92:e1:31:
96:42:6e:37:5a:b2:37:1b:c0:db:c0:78:56:86:df:
3a:81:d3:39:1d:05:1e:39:64:8a:fe:3f:fa:73:e0:
4f:1d:1d:0a:95:5c:74:86:7f:86:62:4b:12:6c:9d:
c6:87:72:dd:a8:e5:97:b5:67:49:a2:6e:40:b6:ae:
4f:14:58:36:5c:f4:7d:21:1c:8d:4f:eb:5d:ac:84:
00:e8:d1:86:9a:f9:89:c5:63:5d:f6:90:75:4a:9a:
d6:c1:f5:ec:3e:4b:d3:2a:1a:12:63:b1:e4:23:39:
e4:e6:51:7e:47:71:b1:a0:2b:5e:b5:61:6c:54:dc:
6f:74:c2:90:4f:1f:ed:78:9e:92:75:79:20:0e:bf:
06:c0:3d:08:2a:40:21:1c:5c:f0:5a:b0:0b:7a:74:
db:cd:f2:cb:08:57:70:57:d4:22:46:7e:d6:a6:0d:
ef:aa:a4:83:d2:79:4c:17:77:5e:e7:58:16:18:5b:
f2:38:fe:eb:e6:db:02:03:fa:fc:9d:2e:68:88:ea:
9f:dd:2c:f4:c7:d6:41:c3:95:a3:c6:81:56:bd:89:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:2A:3F:73:75:9C:F0:89:D9:52:3A:92:C7:69:E8:CA:B2:14:4C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.34.0/24
143.20.56.0/24
143.20.79.0/24
143.20.87.0/24
143.20.160.0/24
143.20.165.0/24
143.20.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b5:42:ae:c1:14:98:3a:b1:44:5b:14:61:3b:c2:d2:22:b1:
80:52:27:49:ea:0c:4e:5d:f9:c1:c4:00:86:09:d2:e3:a2:05:
72:21:e3:e8:ea:da:89:c8:51:06:13:e7:4b:f0:a2:a6:bd:9a:
02:76:a2:8e:e7:9a:76:c7:0d:ae:2e:6a:65:7e:38:06:fe:4f:
1d:de:10:51:2c:07:f4:f7:ea:29:5a:4d:cb:c7:e9:bf:25:70:
60:ca:c5:44:42:d3:e3:22:a8:fe:76:0a:6d:e8:ef:10:5e:92:
62:14:86:19:2b:4e:9b:50:6a:2d:5e:68:de:cd:f2:9c:b7:51:
67:8a:8b:3c:67:68:d2:bd:82:e1:ee:46:21:4f:aa:fc:61:e1:
46:d9:fb:43:8c:b9:de:0c:9a:2e:aa:ac:5a:fa:2d:6e:b6:5b:
8b:7f:37:06:89:39:25:cd:a9:87:84:75:db:16:e4:2c:f8:3d:
cc:fe:5d:11:18:e3:8a:6d:c9:cf:36:1b:af:d9:55:71:ac:38:
48:26:46:a4:88:51:0a:3d:7e:63:9c:9d:6b:b5:86:c6:2c:7f:
45:4c:8a:81:48:97:e5:6e:be:b3:19:e7:fc:c6:c8:99:d3:4c:
ff:8f:56:3b:85:68:84:93:c5:06:2e:e5:1f:ef:0e:6d:42:3b:
9f:e1:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:44:37 2026 by rpki-client