Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: parMRfMrq+zqLjVEUn/mJC7wLsJdR1pbQejwgs+cm7A=
Subject key identifier: F4:A5:B2:4C:4E:5C:78:34:E8:E6:35:7F:4E:94:A3:B1:C2:7C:BC:C4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3D186FC7A31AC2E3210E66BBE3196D14DAADFE30
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
Signing time: Tue 08 Sep 2026 08:47:05 +0000
ROA not before: Tue 08 Sep 2026 08:42:05 +0000
ROA not after: Tue 07 Sep 2027 08:47:05 +0000
asID: 212238
IP address blocks: 143.20.34.0/24 maxlen: 24
143.20.56.0/24 maxlen: 24
143.20.87.0/24 maxlen: 24
143.20.160.0/24 maxlen: 24
143.20.165.0/24 maxlen: 24
143.20.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:18:6f:c7:a3:1a:c2:e3:21:0e:66:bb:e3:19:6d:14:da:ad:fe:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 8 08:42:05 2026 GMT
Not After : Sep 7 08:47:05 2027 GMT
Subject: CN=F4A5B24C4E5C7834E8E6357F4E94A3B1C27CBCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:e3:83:d4:aa:4c:d7:ec:82:ef:d0:9b:a8:
a0:5d:81:c5:61:cf:2a:41:13:90:35:fb:f0:d3:bb:
9f:74:14:5f:c1:d8:3a:8f:31:4e:40:6b:bc:7e:34:
76:3e:b0:5b:f9:b8:e3:48:b4:3b:75:2a:67:e3:61:
d9:63:a9:b2:28:a0:93:0d:11:1c:2a:07:96:1f:2b:
fa:87:2c:28:e4:cb:83:c6:1a:48:34:97:61:a8:7b:
d5:91:2b:18:bb:50:fe:e2:2e:b4:61:53:51:1a:08:
64:1c:cb:00:b7:4f:5d:63:0b:c3:c6:b3:34:50:3d:
5e:c6:96:59:fd:a0:9b:24:22:92:b9:6b:e4:08:6c:
bd:d7:b4:06:96:1b:f6:72:f2:1e:4b:ff:c4:e0:ed:
f4:f3:ba:15:28:1e:7a:03:9e:e1:f3:a7:52:db:61:
5a:79:52:da:4d:e0:87:94:74:52:7a:d7:c9:e9:a9:
b8:9e:ba:54:33:2f:ff:76:97:11:a2:22:e4:5b:7b:
31:34:b5:f7:22:6d:e4:ee:7a:eb:9b:3d:d0:5f:ac:
bd:0f:78:d5:22:f2:2a:0e:84:a7:83:95:16:f1:67:
05:f5:f9:6d:9b:94:44:22:d2:66:f3:c7:99:6f:f6:
5c:62:2f:5c:6a:e7:41:1f:41:ce:cb:0c:c8:1c:2b:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:B2:4C:4E:5C:78:34:E8:E6:35:7F:4E:94:A3:B1:C2:7C:BC:C4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.34.0/24
143.20.56.0/24
143.20.87.0/24
143.20.160.0/24
143.20.165.0/24
143.20.245.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1b:b7:b2:2d:b0:69:ba:d7:f5:67:b2:c2:ad:14:64:de:67:
36:b4:44:6b:02:2b:cb:51:cf:1e:1a:fb:3d:af:bf:98:ba:c4:
cf:78:59:15:e9:0e:af:3d:a8:90:ce:26:41:64:83:a1:2f:93:
7c:67:fc:5e:1d:e8:d5:ff:9b:3d:54:41:87:0f:13:9f:8c:8a:
5f:49:d8:b5:fb:ce:04:c9:91:d7:13:2a:33:78:d2:27:0a:51:
36:8a:d4:87:00:57:38:44:1d:d3:ea:8d:4f:cc:1c:00:80:9b:
97:6d:11:61:cf:e4:7e:e5:45:3b:a4:42:a0:0e:47:e7:f3:82:
0c:c2:e8:57:f8:34:bf:32:d8:67:e7:74:00:15:32:82:51:94:
aa:ab:67:f5:25:27:aa:ba:c6:eb:69:5d:77:c2:54:31:cb:57:
49:f2:0b:de:b2:bc:c1:22:92:cb:1c:ca:52:88:1b:58:6f:4e:
71:a0:1b:88:cd:21:2f:a1:91:5d:34:1e:4d:d5:ff:bd:b7:0f:
88:66:11:1d:84:80:be:8e:02:b4:e7:eb:2e:3c:05:7f:a9:01:
aa:0d:82:fd:b6:74:1d:d8:d3:c0:c1:00:94:ec:f0:83:2e:33:
58:49:da:78:fc:9b:2a:e6:8e:86:6a:cc:95:b1:16:55:1d:b7:
9a:34:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:41 2026 by rpki-client