Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: +ftIwbRDUG33ULQvqLQtK/rrzzGpfHpnXmirKZgkglg=
Subject key identifier: 8B:41:03:B7:87:0F:3E:4B:B3:C5:60:4E:FA:CE:F2:1D:F7:0C:57:34
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 516F283168B922551430E48344C0BD46166F9854
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Fri 14 Aug 2026 00:04:51 +0000
ROA not before: Thu 13 Aug 2026 23:59:51 +0000
ROA not after: Fri 13 Aug 2027 00:04:51 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
92.113.194.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.91.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.165.0/24 maxlen: 24
178.93.171.0/24 maxlen: 24
178.93.177.0/24 maxlen: 24
178.93.183.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.93.231.0/24 maxlen: 24
178.94.25.0/24 maxlen: 24
178.94.42.0/24 maxlen: 24
178.94.161.0/24 maxlen: 24
178.94.213.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.94.237.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
178.95.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:6f:28:31:68:b9:22:55:14:30:e4:83:44:c0:bd:46:16:6f:98:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 13 23:59:51 2026 GMT
Not After : Aug 13 00:04:51 2027 GMT
Subject: CN=8B4103B7870F3E4BB3C5604EFACEF21DF70C5734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:1f:f8:92:1c:27:be:4a:ad:0c:d0:93:2a:
a5:26:15:e9:2b:30:c3:34:13:94:40:12:c1:92:08:
ee:0c:62:c1:80:72:86:76:34:11:9f:44:f5:bd:5a:
9d:09:c3:af:94:a4:a9:47:43:de:89:68:64:de:55:
f5:b1:a8:f2:e4:06:68:82:c2:3e:47:fe:c4:5c:9d:
40:7a:5a:aa:29:c4:4e:b0:0d:69:f5:93:a9:cc:ce:
6d:e2:b0:73:27:f9:28:fc:82:d5:e1:80:80:dd:d0:
96:b5:ef:51:38:d6:a3:a7:ef:1a:7f:54:75:e5:68:
c9:fd:48:46:44:8c:81:6b:1b:d0:71:de:2f:ff:41:
c1:f8:e0:77:3e:6b:14:de:ac:1c:93:af:0c:ad:00:
79:24:50:d1:97:20:7f:f7:4d:03:0d:aa:e7:9c:df:
ab:47:81:b1:e6:cc:d6:ba:8e:b7:be:70:e0:ef:15:
46:a3:c1:03:7e:a5:f5:9d:82:f9:fd:d3:2c:94:51:
6a:8b:eb:8b:79:8f:39:3b:ec:4a:d9:d7:2a:8e:98:
63:8b:2b:4e:2d:6d:69:19:1f:81:13:20:a1:59:6c:
4a:83:bb:b2:8b:67:cb:69:a1:51:26:19:46:c8:cd:
fd:ee:60:69:ee:8b:fe:ab:52:d1:d6:a8:b5:ad:96:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:03:B7:87:0F:3E:4B:B3:C5:60:4E:FA:CE:F2:1D:F7:0C:57:34
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
92.113.194.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.91.0/24
178.93.110.0/24
178.93.165.0/24
178.93.171.0/24
178.93.177.0/24
178.93.183.0-178.93.184.255
178.93.200.0/23
178.93.231.0/24
178.94.25.0/24
178.94.42.0/24
178.94.161.0/24
178.94.213.0/24
178.94.215.0/24
178.94.231.0/24
178.94.237.0/24
178.95.12.0/24
178.95.48.0/24
178.95.101.0/24
178.95.123.0/24
178.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5e:a3:6d:a9:86:55:0b:02:a3:cf:83:bc:42:71:bc:d6:32:
ab:fb:cc:bb:5c:d5:f0:4b:1c:31:56:3f:41:f8:2e:13:f7:89:
5f:8a:bf:47:c9:8c:67:fb:7f:11:ae:3c:68:3e:5d:08:3d:0a:
c0:cc:74:08:99:b1:38:f7:f2:2e:97:e0:b1:f0:20:23:4d:46:
56:2e:81:32:eb:15:6d:33:e6:20:c1:3c:21:36:c2:35:fe:4d:
26:ce:67:f5:78:65:53:a0:0f:b1:be:64:7e:77:cd:9d:ed:73:
3f:90:04:7b:ca:e1:1e:82:1f:9a:e5:8a:81:1e:39:fd:00:c8:
a8:b5:41:ef:88:94:76:35:e1:f7:16:84:0b:3b:4b:e3:2e:d3:
8d:2e:cb:8a:00:82:eb:c8:0f:0a:37:4b:c6:30:ac:b1:45:55:
cf:7c:59:02:77:a9:a4:a6:d9:70:0a:e9:21:64:18:d0:bc:35:
6a:da:e4:24:41:ad:c1:e6:a3:72:30:ea:79:ae:40:68:d0:62:
1f:23:18:73:3c:d8:2e:8e:7b:b8:e3:f2:7e:68:4d:87:97:b2:
64:61:1c:a5:10:6f:75:74:a6:dc:e0:d5:e7:6e:97:48:51:7e:
29:1a:52:fb:d1:12:16:73:3f:c3:38:5f:e0:28:31:2e:ca:8e:
e4:7f:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:18:03 2026 by rpki-client