Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: rcdNq4skzZHQMFaSpUdWg/r+MeXiPFFLBYgzxrWPtTw=
Subject key identifier: C7:FF:03:19:C1:7F:4A:81:14:8A:81:7D:5E:2B:CD:DE:FC:C3:39:CC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1A90CB20D734D80A24F39F688B45AC97969E6E39
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Mon 15 Jun 2026 03:16:50 +0000
ROA not before: Mon 15 Jun 2026 03:11:50 +0000
ROA not after: Mon 14 Jun 2027 03:16:50 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.165.0/24 maxlen: 24
178.93.183.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.94.42.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:90:cb:20:d7:34:d8:0a:24:f3:9f:68:8b:45:ac:97:96:9e:6e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 15 03:11:50 2026 GMT
Not After : Jun 14 03:16:50 2027 GMT
Subject: CN=C7FF0319C17F4A81148A817D5E2BCDDEFCC339CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:dc:f7:c9:88:8e:61:ca:42:05:16:fd:ee:
20:0e:8c:c1:b2:d6:a7:4e:25:78:73:4f:68:40:70:
54:00:8a:d2:b7:cf:f5:9e:84:1b:6f:95:05:de:3d:
8a:59:58:d3:80:a9:97:c9:a2:58:39:16:7b:76:10:
6a:b7:92:58:e9:b8:0e:a4:a7:24:36:5d:aa:e5:1f:
ac:08:15:c2:95:01:9c:45:fe:8b:41:c1:21:4f:e8:
db:33:8c:e2:a9:59:38:3e:95:14:9e:08:92:58:68:
00:07:5e:2c:fe:07:1d:6c:7b:9c:fe:ab:db:91:bd:
67:2e:4f:34:be:3e:a7:30:e7:dc:4a:d3:25:98:2d:
cb:f9:63:c4:f5:e3:2b:e5:68:10:86:71:4b:ff:df:
60:6e:7d:2e:5f:08:5e:77:28:17:0c:63:50:cd:26:
6f:c6:a2:47:79:5e:c5:fe:00:5d:cc:16:1c:51:33:
53:7f:55:b4:88:08:38:8d:6b:75:1f:2f:1f:33:ab:
d2:26:77:aa:d2:2f:a8:24:85:db:b8:d4:35:53:7c:
64:97:de:70:f8:c8:53:57:79:59:7c:e3:ca:a4:77:
46:ef:b1:d8:d6:0c:45:05:31:f1:ea:13:42:7a:85:
c0:45:34:d0:9f:d2:d2:0a:5e:c9:0c:cf:28:22:6c:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FF:03:19:C1:7F:4A:81:14:8A:81:7D:5E:2B:CD:DE:FC:C3:39:CC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.110.0/24
178.93.165.0/24
178.93.183.0-178.93.184.255
178.93.200.0/23
178.94.42.0/24
178.94.215.0/24
178.94.231.0/24
178.95.12.0/24
178.95.48.0/24
178.95.101.0/24
178.95.123.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b0:43:7a:d0:d8:37:52:2d:5e:b9:b7:b3:88:61:d1:5c:8b:
18:47:55:78:69:b0:82:c6:0f:89:32:99:89:f9:90:fb:e1:aa:
98:0e:ab:19:90:08:02:a0:4f:09:e4:e2:d1:aa:1a:66:00:81:
3d:5c:fa:bd:33:22:68:16:71:30:a2:4a:79:34:5d:7f:7a:61:
06:d0:ca:12:8c:0e:db:c4:30:87:9f:c5:01:f6:4f:4a:27:3c:
73:8f:a5:af:d5:f1:64:7c:b7:5a:49:78:f7:ff:74:7f:7b:e4:
d8:80:1a:3e:54:84:84:f6:cb:97:82:fb:47:ab:c9:bc:0a:ef:
0d:ee:86:a6:0b:91:39:b7:9f:7f:60:43:cb:65:9e:9a:57:00:
97:9f:ea:72:02:de:d0:08:21:1b:2c:df:57:43:b8:42:f1:bc:
31:9b:8e:9c:be:67:a3:fe:92:b6:f7:c0:ad:98:85:b6:8c:1f:
42:5c:90:25:13:d5:20:65:fb:e4:cd:04:31:8a:24:46:3a:23:
c6:2a:3f:a7:e5:5f:1c:cd:7f:67:ef:0d:04:c6:34:72:5e:e4:
f1:08:15:ef:1c:49:05:01:35:9e:5c:a6:f3:62:c2:03:e2:51:
11:75:1a:dc:49:28:a1:99:a1:fe:a7:44:08:a9:89:ab:54:34:
0a:12:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 01:23:13 2026 by rpki-client