Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: ChvA3/VsGtz6JFTl8LJ+VuOg06zX5n5EvHIDrb0RZ9U=
Subject key identifier: 5F:96:C8:E7:51:D9:B0:11:43:4A:F1:DA:E6:F6:50:CF:5B:EE:31:AB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5E8BD6C587F02FE9A89BE5B89A1A07A0545506B5
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
Signing time: Wed 17 Jun 2026 10:16:59 +0000
ROA not before: Wed 17 Jun 2026 10:11:59 +0000
ROA not after: Wed 16 Jun 2027 10:16:59 +0000
asID: 212238
IP address blocks: 143.20.34.0/24 maxlen: 24
143.20.160.0/24 maxlen: 24
143.20.165.0/24 maxlen: 24
143.20.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8b:d6:c5:87:f0:2f:e9:a8:9b:e5:b8:9a:1a:07:a0:54:55:06:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 17 10:11:59 2026 GMT
Not After : Jun 16 10:16:59 2027 GMT
Subject: CN=5F96C8E751D9B011434AF1DAE6F650CF5BEE31AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:5f:45:24:80:b1:3c:66:c0:0a:76:57:ac:
2d:65:de:85:54:98:dc:cd:a5:13:81:d0:42:f0:50:
4e:ec:78:c3:08:d0:1b:a6:39:8b:be:3e:7d:3c:1c:
8e:72:12:da:3e:fe:e4:08:53:04:79:13:91:e1:f4:
1d:d2:ae:5a:97:1e:93:84:bd:9a:3b:ca:ea:27:62:
3f:63:a1:6d:3a:5f:f1:ce:c1:45:5c:6b:5e:1b:53:
50:c0:89:90:93:77:e1:0f:d9:e2:e3:0d:3b:d5:77:
1e:a9:d8:34:9e:8b:55:a1:9a:75:10:b4:ab:48:5f:
00:16:17:df:33:ce:07:a7:b3:57:b2:5c:f9:49:0f:
c2:2f:55:86:a3:76:2e:63:cc:cd:3f:74:a5:d1:1d:
3c:45:25:42:2d:7e:9f:bd:8c:4f:3a:72:03:17:93:
64:b2:64:b5:ee:6c:3d:41:c2:6b:e7:b2:cd:8c:ba:
2e:4b:f5:f1:28:19:66:90:28:8b:87:59:c0:db:f1:
04:47:70:14:64:71:2e:90:2f:c0:20:03:9a:e1:93:
23:01:cf:60:f5:74:15:d0:ba:97:33:6a:0b:c2:4b:
04:c2:28:fa:04:ee:38:b8:98:c6:b2:0b:35:f5:f1:
16:b3:9f:49:75:c9:05:c3:fe:af:2c:67:85:b3:f9:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:C8:E7:51:D9:B0:11:43:4A:F1:DA:E6:F6:50:CF:5B:EE:31:AB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.34.0/24
143.20.160.0/24
143.20.165.0/24
143.20.245.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a3:88:68:2a:60:96:74:97:e9:88:3f:d8:5d:d2:0d:cc:75:
99:83:10:11:6b:92:0d:26:3a:2e:14:32:4f:9b:0f:62:66:f6:
55:fc:44:87:bd:23:c2:38:e1:b6:e9:a8:1b:f3:e7:16:fa:e7:
7e:b2:9c:7d:9a:78:52:77:27:de:c5:cd:dd:d0:57:e3:29:d1:
8e:11:38:ad:16:0c:d6:92:78:4b:2d:1a:bf:2e:e4:22:6d:e1:
b1:52:e5:3e:0b:89:20:c4:47:af:a9:70:7a:90:55:36:03:b1:
f0:73:34:cf:ec:7e:8c:90:8a:a4:40:51:87:f7:c3:b3:98:b0:
ab:af:89:dc:e3:bd:be:ee:4d:42:ec:2c:ba:47:44:b8:fa:13:
61:21:85:f3:62:a0:fe:32:40:20:a4:31:d2:ce:20:0b:bc:cb:
65:4e:44:76:f8:79:f5:fa:0e:74:20:76:9b:74:ea:84:13:5c:
b4:5e:50:08:ce:72:2f:55:86:d4:56:a8:94:6c:43:40:65:4b:
ac:d5:cf:5e:46:dd:ef:94:07:fb:03:e2:51:c4:b8:08:86:fd:
34:a9:34:19:d5:93:90:c5:b5:e4:9d:1c:de:7c:54:b0:2a:8b:
38:f8:d8:7e:32:78:6b:f6:e6:fc:69:23:70:64:35:f2:ae:69:
71:f3:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:00:29 2026 by rpki-client