Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: oC4E4Q+sU7wgLso3xV54V47uivTI8V2p6EKD39+fyqw=
Subject key identifier: 20:80:E9:60:C0:A8:50:B6:E1:76:50:C6:29:F4:C2:CD:3F:01:75:00
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4FC0FB3962F474D277D5DB17F390985C20F88ADE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
Signing time: Mon 02 Nov 2026 00:22:36 +0000
ROA not before: Mon 02 Nov 2026 00:17:36 +0000
ROA not after: Mon 01 Nov 2027 00:22:36 +0000
asID: 58212
IP address blocks: 143.14.202.0/24 maxlen: 24
143.14.216.0/24 maxlen: 24
167.148.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c0:fb:39:62:f4:74:d2:77:d5:db:17:f3:90:98:5c:20:f8:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 2 00:17:36 2026 GMT
Not After : Nov 1 00:22:36 2027 GMT
Subject: CN=2080E960C0A850B6E17650C629F4C2CD3F017500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:bd:7f:6e:de:61:7d:97:93:5e:7a:de:91:
bb:c3:0d:86:56:ed:de:8a:b0:3a:a0:17:79:a0:f2:
2c:22:00:27:14:02:8a:25:f7:0a:f6:b2:0d:28:3c:
1f:34:3e:63:32:fa:05:af:7b:d4:5f:9a:8a:71:77:
69:19:6d:32:db:ff:25:2d:63:9a:b5:10:be:94:46:
f5:cb:f9:e7:39:9a:a6:ee:48:fb:d4:6e:22:0b:e1:
a3:cb:9c:e6:9f:dd:7d:27:08:0f:5b:34:f3:0f:e3:
cf:63:b2:46:a7:ae:8f:ed:25:24:a0:8d:1c:83:af:
45:67:15:94:09:bc:6f:d1:3d:c2:12:7a:28:4a:30:
38:ad:fd:43:18:99:d0:cf:fb:d6:e3:4b:83:e4:81:
ed:5d:b6:4f:36:54:6b:08:2a:04:b6:7b:ca:ab:4a:
53:75:c4:3d:20:0c:12:7f:15:89:03:3d:39:84:bd:
0d:b2:60:3e:f3:4c:6b:88:88:f3:7f:15:d5:d8:46:
aa:03:2b:c3:52:d2:f5:6a:f0:5c:81:fb:47:c8:11:
35:a8:a7:ec:fb:c1:5a:e9:03:e3:01:0b:39:30:cb:
35:48:b7:65:ec:c9:da:29:35:d8:2c:53:f7:10:29:
ca:fa:e4:fa:8b:89:c4:cf:78:fa:38:24:b3:07:ed:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:E9:60:C0:A8:50:B6:E1:76:50:C6:29:F4:C2:CD:3F:01:75:00
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.202.0/24
143.14.216.0/24
167.148.187.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ac:9e:59:81:32:d8:64:2f:25:47:1b:0e:dc:9d:b2:87:d8:
77:fa:c2:86:f6:45:73:67:7a:7a:21:b3:9e:76:1b:4c:2d:48:
2f:0d:e8:c8:7b:75:f2:c0:2f:6c:77:19:52:97:58:73:db:04:
2f:1f:d8:b3:bf:de:39:48:9a:e1:74:9b:ff:34:8f:f3:68:c6:
d5:6b:4a:ca:9b:81:e2:f5:28:7b:2c:87:5a:bd:9c:07:06:f6:
64:25:72:67:aa:4c:85:06:f5:10:92:18:d3:9c:db:6f:29:4b:
fa:2c:50:1e:9f:e6:e0:4b:d2:e0:94:92:84:ae:6b:2f:81:e8:
77:eb:61:15:ce:99:a2:fb:3f:ba:f3:40:d2:22:41:42:af:e3:
04:ce:22:1f:92:04:17:3e:00:94:f1:48:f5:2a:82:ca:84:9d:
1b:72:72:5e:7c:f5:44:0d:5e:0e:11:67:a2:28:be:9a:14:2a:
29:e4:59:c2:88:da:63:ae:f5:4d:e6:37:d9:44:cd:84:5d:d0:
d9:fc:70:c1:bc:2d:05:23:61:09:36:3d:91:9f:15:ad:8e:51:
56:de:f5:6c:56:56:d9:21:b3:a4:bf:31:85:ab:af:f9:af:f4:
5e:1c:0d:f2:ac:e9:53:9b:f8:03:97:15:8b:ed:4a:b6:16:bb:
e2:63:53:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:19:06 2026 by rpki-client