Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: qHDCQ5IOm+Mu0Tzh7sVtjwlI6R3cy3XNBllTfEqwHUE=
Subject key identifier: B2:C2:E9:6F:1C:5D:0D:05:FD:F4:6B:D6:C6:75:C2:12:4A:9D:96:2D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 28B803344FA23958C08FB5AFCD1014ECD274E15E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
Signing time: Wed 16 Sep 2026 16:01:56 +0000
ROA not before: Wed 16 Sep 2026 15:56:56 +0000
ROA not after: Wed 15 Sep 2027 16:01:56 +0000
asID: 212238
IP address blocks: 82.21.2.0/24 maxlen: 24
82.21.56.0/24 maxlen: 24
82.21.59.0/24 maxlen: 24
82.21.68.0/24 maxlen: 24
82.21.70.0/24 maxlen: 24
82.21.87.0/24 maxlen: 24
82.21.108.0/24 maxlen: 24
82.21.133.0/24 maxlen: 24
82.21.141.0/24 maxlen: 24
82.21.142.0/24 maxlen: 24
82.21.151.0/24 maxlen: 24
82.21.158.0/24 maxlen: 24
82.21.159.0/24 maxlen: 24
82.21.168.0/24 maxlen: 24
82.21.175.0/24 maxlen: 24
82.21.189.0/24 maxlen: 24
82.21.191.0/24 maxlen: 24
82.21.193.0/24 maxlen: 24
82.21.208.0/24 maxlen: 24
82.21.211.0/24 maxlen: 24
82.21.237.0/24 maxlen: 24
82.21.243.0/24 maxlen: 24
82.22.27.0/24 maxlen: 24
82.22.34.0/24 maxlen: 24
82.22.46.0/24 maxlen: 24
82.22.65.0/24 maxlen: 24
82.22.79.0/24 maxlen: 24
82.22.85.0/24 maxlen: 24
82.22.87.0/24 maxlen: 24
82.22.99.0/24 maxlen: 24
82.22.147.0/24 maxlen: 24
82.22.212.0/24 maxlen: 24
82.22.222.0/24 maxlen: 24
82.22.243.0/24 maxlen: 24
82.22.253.0/24 maxlen: 24
82.23.17.0/24 maxlen: 24
82.23.18.0/24 maxlen: 24
82.23.21.0/24 maxlen: 24
82.23.22.0/24 maxlen: 24
82.23.37.0/24 maxlen: 24
82.23.38.0/24 maxlen: 24
82.23.119.0/24 maxlen: 24
82.23.120.0/24 maxlen: 24
82.23.121.0/24 maxlen: 24
82.23.122.0/24 maxlen: 24
82.23.126.0/24 maxlen: 24
82.23.145.0/24 maxlen: 24
82.23.146.0/24 maxlen: 24
82.23.165.0/24 maxlen: 24
82.23.212.0/24 maxlen: 24
82.23.214.0/24 maxlen: 24
82.23.217.0/24 maxlen: 24
82.23.224.0/24 maxlen: 24
82.23.229.0/24 maxlen: 24
82.23.233.0/24 maxlen: 24
82.23.243.0/24 maxlen: 24
82.23.253.0/24 maxlen: 24
82.23.254.0/24 maxlen: 24
82.23.255.0/24 maxlen: 24
82.24.34.0/24 maxlen: 24
82.24.46.0/24 maxlen: 24
82.24.112.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
82.24.182.0/24 maxlen: 24
82.24.214.0/24 maxlen: 24
82.24.215.0/24 maxlen: 24
82.24.239.0/24 maxlen: 24
82.24.243.0/24 maxlen: 24
82.24.253.0/24 maxlen: 24
82.25.34.0/24 maxlen: 24
82.25.200.0/24 maxlen: 24
82.25.212.0/24 maxlen: 24
82.25.219.0/24 maxlen: 24
82.25.230.0/24 maxlen: 24
82.25.234.0/24 maxlen: 24
82.25.243.0/24 maxlen: 24
82.25.253.0/24 maxlen: 24
82.26.220.0/24 maxlen: 24
82.26.230.0/24 maxlen: 24
82.26.233.0/24 maxlen: 24
82.26.235.0/24 maxlen: 24
82.26.237.0/24 maxlen: 24
82.26.240.0/24 maxlen: 24
82.26.253.0/24 maxlen: 24
82.27.130.0/24 maxlen: 24
82.27.132.0/24 maxlen: 24
82.27.213.0/24 maxlen: 24
82.27.218.0/24 maxlen: 24
82.27.222.0/24 maxlen: 24
82.27.225.0/24 maxlen: 24
82.27.234.0/24 maxlen: 24
82.27.238.0/24 maxlen: 24
82.27.253.0/24 maxlen: 24
82.29.78.0/24 maxlen: 24
82.29.92.0/24 maxlen: 24
82.29.94.0/24 maxlen: 24
82.29.96.0/24 maxlen: 24
82.29.97.0/24 maxlen: 24
82.29.100.0/24 maxlen: 24
82.29.101.0/24 maxlen: 24
82.29.125.0/24 maxlen: 24
82.29.202.0/24 maxlen: 24
82.29.211.0/24 maxlen: 24
82.29.215.0/24 maxlen: 24
82.29.217.0/24 maxlen: 24
82.29.220.0/24 maxlen: 24
82.29.228.0/24 maxlen: 24
82.29.233.0/24 maxlen: 24
82.29.242.0/24 maxlen: 24
82.29.243.0/24 maxlen: 24
82.38.129.0/24 maxlen: 24
82.40.51.0/24 maxlen: 24
82.41.195.0/24 maxlen: 24
82.47.13.0/24 maxlen: 24
82.47.120.0/23 maxlen: 24
82.47.133.0/24 maxlen: 24
82.47.142.0/24 maxlen: 24
82.47.148.0/24 maxlen: 24
82.47.161.0/24 maxlen: 24
82.47.179.0/24 maxlen: 24
82.47.202.0/24 maxlen: 24
82.47.203.0/24 maxlen: 24
82.47.204.0/24 maxlen: 24
82.47.207.0/24 maxlen: 24
84.75.165.0/24 maxlen: 24
84.75.190.0/24 maxlen: 24
178.83.96.0/24 maxlen: 24
178.83.114.0/24 maxlen: 24
178.83.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b8:03:34:4f:a2:39:58:c0:8f:b5:af:cd:10:14:ec:d2:74:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 16 15:56:56 2026 GMT
Not After : Sep 15 16:01:56 2027 GMT
Subject: CN=B2C2E96F1C5D0D05FDF46BD6C675C2124A9D962D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:01:72:c8:77:9e:cc:5a:29:f9:a3:7c:d7:
e3:ed:2d:55:ec:da:6e:6c:23:93:7e:71:4c:9e:60:
db:10:42:07:19:9e:7c:3f:9a:0a:11:13:6a:d1:cf:
dc:74:0a:6e:cd:c0:e0:d6:45:d5:af:ba:e9:71:f6:
50:c1:ba:d0:02:81:7a:c9:6a:11:a3:3a:aa:41:2f:
9e:ba:79:cd:e0:72:3d:02:e6:49:1a:96:be:80:07:
8b:69:7c:80:b7:2c:ce:83:47:ac:9b:54:44:55:92:
83:39:11:b4:b6:e3:91:57:53:65:69:24:fa:88:18:
cb:d0:44:24:3e:24:92:9a:05:2d:28:c7:a3:bb:41:
36:9d:75:54:b0:0a:dd:95:f8:17:f9:b5:81:ed:eb:
2c:ef:04:34:63:61:2f:19:f2:5e:c5:6d:b2:5b:bf:
8c:ab:fe:58:be:f0:be:5b:30:05:ca:c6:da:ef:e5:
24:4b:9f:3b:45:f2:aa:4a:cd:e7:a4:ad:62:46:13:
bb:e0:d3:86:37:51:46:da:19:22:3d:d5:b3:51:f7:
16:a2:d4:3a:32:20:37:5b:d8:5e:1f:9c:38:8d:fe:
6f:8f:44:2b:fa:8c:91:fb:3e:37:e5:66:22:15:d8:
38:d3:78:fc:da:ef:a9:a6:7e:3c:dd:4e:03:5b:fd:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:E9:6F:1C:5D:0D:05:FD:F4:6B:D6:C6:75:C2:12:4A:9D:96:2D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.2.0/24
82.21.56.0/24
82.21.59.0/24
82.21.68.0/24
82.21.70.0/24
82.21.87.0/24
82.21.108.0/24
82.21.133.0/24
82.21.141.0-82.21.142.255
82.21.151.0/24
82.21.158.0/23
82.21.168.0/24
82.21.175.0/24
82.21.189.0/24
82.21.191.0/24
82.21.193.0/24
82.21.208.0/24
82.21.211.0/24
82.21.237.0/24
82.21.243.0/24
82.22.27.0/24
82.22.34.0/24
82.22.46.0/24
82.22.65.0/24
82.22.79.0/24
82.22.85.0/24
82.22.87.0/24
82.22.99.0/24
82.22.147.0/24
82.22.212.0/24
82.22.222.0/24
82.22.243.0/24
82.22.253.0/24
82.23.17.0-82.23.18.255
82.23.21.0-82.23.22.255
82.23.37.0-82.23.38.255
82.23.119.0-82.23.122.255
82.23.126.0/24
82.23.145.0-82.23.146.255
82.23.165.0/24
82.23.212.0/24
82.23.214.0/24
82.23.217.0/24
82.23.224.0/24
82.23.229.0/24
82.23.233.0/24
82.23.243.0/24
82.23.253.0-82.23.255.255
82.24.34.0/24
82.24.46.0/24
82.24.112.0/24
82.24.175.0/24
82.24.182.0/24
82.24.214.0/23
82.24.239.0/24
82.24.243.0/24
82.24.253.0/24
82.25.34.0/24
82.25.200.0/24
82.25.212.0/24
82.25.219.0/24
82.25.230.0/24
82.25.234.0/24
82.25.243.0/24
82.25.253.0/24
82.26.220.0/24
82.26.230.0/24
82.26.233.0/24
82.26.235.0/24
82.26.237.0/24
82.26.240.0/24
82.26.253.0/24
82.27.130.0/24
82.27.132.0/24
82.27.213.0/24
82.27.218.0/24
82.27.222.0/24
82.27.225.0/24
82.27.234.0/24
82.27.238.0/24
82.27.253.0/24
82.29.78.0/24
82.29.92.0/24
82.29.94.0/24
82.29.96.0/23
82.29.100.0/23
82.29.125.0/24
82.29.202.0/24
82.29.211.0/24
82.29.215.0/24
82.29.217.0/24
82.29.220.0/24
82.29.228.0/24
82.29.233.0/24
82.29.242.0/23
82.38.129.0/24
82.40.51.0/24
82.41.195.0/24
82.47.13.0/24
82.47.120.0/23
82.47.133.0/24
82.47.142.0/24
82.47.148.0/24
82.47.161.0/24
82.47.179.0/24
82.47.202.0-82.47.204.255
82.47.207.0/24
84.75.165.0/24
84.75.190.0/24
178.83.96.0/24
178.83.114.0/24
178.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2b:33:36:34:7a:eb:5d:95:fb:a7:4f:b7:7e:1f:e2:08:c5:
b1:dd:52:eb:44:3f:93:3c:9a:3c:20:0a:be:7d:eb:30:ad:7d:
8d:f8:bd:61:94:ec:fa:7d:0f:33:a9:a6:9c:ef:08:9e:a6:5e:
8c:35:e4:a4:9b:73:b2:b0:e8:c1:20:1a:39:4c:48:85:86:f3:
3a:07:bd:2b:8d:c9:50:97:34:51:51:5d:f3:ba:24:3c:52:d2:
67:29:fc:a2:6f:a2:62:40:f2:f0:ef:e0:7e:c0:4d:7a:68:ca:
7a:13:f9:15:94:cd:fb:dc:5c:1c:c8:e0:bb:60:67:62:2f:e9:
e4:63:e1:d0:f2:15:8c:cc:e6:76:c9:45:17:95:cc:94:f0:29:
47:06:ea:fe:4e:6d:cc:74:b0:91:99:32:50:c8:ce:32:c5:fc:
a9:94:1b:39:5a:2a:8c:6b:cb:77:95:6f:3c:e4:2c:ee:f9:8c:
88:e0:8b:17:57:5f:20:d9:98:30:b0:ac:81:7f:1b:95:59:d1:
9e:ef:fb:7c:32:2b:a3:af:b0:73:ea:8b:b3:af:7b:30:6c:f2:
19:6c:64:3d:70:29:c0:0e:5f:07:b8:75:e3:64:6c:b5:00:6c:
24:9d:8e:0e:22:53:9f:11:15:1f:7e:49:1d:ac:e4:46:75:ce:
e5:2e:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:16:25 2026 by rpki-client