Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: asYktef0QwdbUUj69FKWZHpOWfQvl7O9JuPKI1Cs6LM=
Subject key identifier: B2:08:22:A2:06:AC:0B:6B:B1:86:83:85:02:B4:F3:B8:EC:96:5C:A2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 39C9DD2B8EE39B904320A623C5F5CFA231614FB2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
Signing time: Sun 01 Nov 2026 00:13:46 +0000
ROA not before: Sun 01 Nov 2026 00:08:46 +0000
ROA not after: Sun 31 Oct 2027 00:13:46 +0000
asID: 212683
IP address blocks: 51.146.19.0/24 maxlen: 24
51.194.132.0/23 maxlen: 24
51.241.64.0/24 maxlen: 24
51.241.76.0/24 maxlen: 24
51.241.192.0/23 maxlen: 24
51.241.195.0/24 maxlen: 24
51.241.196.0/23 maxlen: 23
51.241.232.0/23 maxlen: 23
51.241.253.0/24 maxlen: 24
94.192.216.0/22 maxlen: 22
94.192.220.0/22 maxlen: 22
94.192.240.0/22 maxlen: 22
94.193.184.0/22 maxlen: 22
94.193.188.0/22 maxlen: 22
188.220.87.0/24 maxlen: 24
188.221.17.0/24 maxlen: 24
188.221.52.0/24 maxlen: 24
188.221.106.0/24 maxlen: 24
188.221.111.0/24 maxlen: 24
188.221.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c9:dd:2b:8e:e3:9b:90:43:20:a6:23:c5:f5:cf:a2:31:61:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 1 00:08:46 2026 GMT
Not After : Oct 31 00:13:46 2027 GMT
Subject: CN=B20822A206AC0B6BB186838502B4F3B8EC965CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:ba:46:d2:90:c3:b9:38:c8:5c:60:5e:32:
6a:c5:f0:b2:82:d7:5d:6e:50:91:2d:00:4a:b2:cd:
59:4c:5b:ba:d2:8c:5b:c2:11:c8:51:ea:16:48:ae:
84:f1:84:d8:b2:f1:31:4a:54:77:95:6d:61:47:e8:
2e:c8:bd:e1:df:47:fd:32:cc:8d:ac:dd:ec:b4:53:
0e:ec:01:33:d3:5f:d9:b4:7c:f6:ea:55:76:09:a7:
ff:0a:91:07:4b:f3:40:d3:7e:93:9f:27:04:69:da:
67:1c:53:5f:39:07:c7:ab:ed:40:0b:e0:29:f8:d5:
13:a7:68:5d:7f:db:58:ed:75:a2:ab:ab:3e:ea:93:
26:c4:68:0f:82:c9:a0:ce:b4:e0:b7:ad:f6:89:13:
88:87:69:61:16:2f:9e:80:00:77:77:7c:b4:95:5b:
2e:19:87:9c:4c:91:6a:0e:8c:74:f2:1a:cb:c4:b4:
1f:b1:67:05:80:dc:e2:90:0d:c5:04:ce:0b:4f:10:
1f:00:59:a5:2c:1f:fd:8b:12:a5:19:80:49:86:88:
ad:f7:40:af:32:2b:a4:09:c3:1c:99:60:f7:9d:4a:
82:a2:c1:ea:d8:1c:45:a5:a6:73:72:7f:27:8a:a7:
48:50:25:f8:4a:c8:85:01:09:16:d4:3d:2d:e5:25:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:22:A2:06:AC:0B:6B:B1:86:83:85:02:B4:F3:B8:EC:96:5C:A2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.19.0/24
51.194.132.0/23
51.241.64.0/24
51.241.76.0/24
51.241.192.0/23
51.241.195.0-51.241.197.255
51.241.232.0/23
51.241.253.0/24
94.192.216.0/21
94.192.240.0/22
94.193.184.0/21
188.220.87.0/24
188.221.17.0/24
188.221.52.0/24
188.221.106.0/24
188.221.111.0/24
188.221.186.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6c:58:14:43:27:28:da:6a:04:96:1b:91:52:b7:1a:00:0a:
6f:5c:c6:be:36:90:57:0d:33:74:82:1b:67:cd:5c:eb:18:5e:
25:3f:14:aa:60:8e:02:b9:aa:3e:c8:ac:92:53:f7:40:6e:72:
07:00:c2:a4:1c:51:7d:0c:66:fd:74:46:93:28:c7:9f:a0:a3:
36:5f:37:96:98:6b:cf:ec:0e:be:dd:08:08:f3:e2:b1:5d:f7:
7f:00:c8:f8:16:f6:8a:91:f9:e2:82:21:99:ab:5c:b5:b6:d2:
66:c5:41:3b:f6:73:f4:1b:8d:b7:ee:63:61:4d:e7:65:96:63:
56:7d:c8:85:57:6b:f7:88:06:86:3d:ec:aa:a2:15:cd:93:dd:
1b:c3:23:61:2d:b9:f3:5f:13:6f:47:ac:6b:c1:5a:63:ba:dc:
2d:48:c6:c7:45:46:3f:62:d7:8a:c2:e3:31:23:d3:b5:3c:2d:
f8:15:a6:64:b0:28:10:77:16:c0:ad:62:d3:08:7f:3b:06:47:
1e:de:8e:0d:83:02:43:07:46:68:5a:aa:29:46:05:6c:4b:7d:
37:3d:3b:97:7d:2c:6d:f7:05:d9:0f:af:ab:bb:f5:7c:67:f4:
b0:92:d2:22:83:92:c8:ef:22:fe:95:2f:b1:21:23:30:73:ca:
12:7c:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:32:53 2026 by rpki-client