Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: GcUUXwEQwnkpdxLgxDVHdtlOY0N5NsIvXsjXqwBFrF0=
Subject key identifier: FE:E0:7B:E8:92:46:CF:50:3F:55:9B:73:02:3C:F8:ED:6E:15:C7:E6
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4C63522A4AA02A37181F3032FC97AD821BBA960E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
Signing time: Sun 08 Nov 2026 00:00:51 +0000
ROA not before: Sat 07 Nov 2026 23:55:51 +0000
ROA not after: Sun 07 Nov 2027 00:00:51 +0000
asID: 212238
IP address blocks: 143.20.34.0/24 maxlen: 24
143.20.56.0/24 maxlen: 24
143.20.79.0/24 maxlen: 24
143.20.160.0/24 maxlen: 24
143.20.165.0/24 maxlen: 24
143.20.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:63:52:2a:4a:a0:2a:37:18:1f:30:32:fc:97:ad:82:1b:ba:96:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 7 23:55:51 2026 GMT
Not After : Nov 7 00:00:51 2027 GMT
Subject: CN=FEE07BE89246CF503F559B73023CF8ED6E15C7E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:e6:e5:07:b9:26:b0:f7:fd:6d:50:14:8f:
dd:50:ed:97:87:0e:9d:67:2d:33:0b:f7:5a:f6:a6:
ff:31:de:bc:ee:74:6c:b1:e4:d5:0b:c8:98:4f:fb:
0d:d4:96:f1:68:45:fd:45:3f:7b:61:6c:77:47:8f:
a7:32:ef:ff:e8:49:38:df:ee:2b:18:26:17:aa:44:
12:98:69:4d:2f:7f:69:57:80:9e:69:34:f4:07:cb:
75:7f:79:91:e9:e3:65:5b:d0:e0:4b:5b:01:ed:3c:
ab:d7:b9:06:f1:e6:7b:b9:fb:59:19:f7:47:20:dd:
14:14:a7:d8:f0:8b:4b:eb:56:af:17:33:20:ca:87:
b1:73:03:04:b0:99:b3:e7:9f:2f:09:49:14:dc:21:
81:79:f7:d8:c0:e1:c2:40:cb:8d:d7:24:fb:1d:96:
0e:1d:21:11:03:b6:ec:ff:b3:78:c4:7d:d4:0f:cd:
7f:15:95:f7:86:78:63:62:10:40:e4:f2:30:2f:b7:
56:b6:8e:c3:d8:ef:d0:7a:67:8d:8f:f2:af:7f:2c:
fd:d7:b6:cc:3b:4e:ce:28:e7:3c:17:0f:62:3b:2d:
00:68:40:6c:7a:a5:79:26:01:e4:48:00:1e:cb:86:
a3:27:87:fe:f2:de:7b:d3:d8:c9:3e:f4:8d:e1:82:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:7B:E8:92:46:CF:50:3F:55:9B:73:02:3C:F8:ED:6E:15:C7:E6
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.34.0/24
143.20.56.0/24
143.20.79.0/24
143.20.160.0/24
143.20.165.0/24
143.20.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:61:2e:b5:2c:88:ed:a3:8e:f5:40:b0:7b:74:37:fd:47:28:
cf:05:40:04:d1:8e:e5:d8:98:fa:61:78:ea:33:d0:24:4d:43:
81:a7:30:7d:d5:64:37:fe:35:45:6b:3e:b0:ea:46:36:c1:7e:
09:8c:f5:38:a3:08:e1:38:d6:12:5a:9f:25:83:6f:c1:f6:a1:
b0:60:31:1a:66:d6:7c:2d:4f:31:9b:5c:55:58:d7:15:45:ff:
59:92:75:78:bc:fe:ee:13:88:b6:65:c6:8e:f1:f2:17:ce:9e:
66:72:42:90:07:fc:1d:cf:54:de:46:b4:0c:b8:f6:48:1d:be:
37:fe:17:e5:f4:ef:4d:ce:e3:ee:19:5e:8c:39:66:b7:c0:5c:
a4:01:6c:f5:b4:4e:2a:e1:57:a6:c9:23:97:23:d4:49:93:cd:
91:7b:5f:31:81:9f:85:25:db:f2:4f:54:88:cb:d9:55:1e:ec:
c6:29:05:c4:04:84:ce:7e:4a:8b:a4:23:78:2b:99:34:7d:68:
ff:4f:ba:ab:d5:53:73:b9:0b:e9:d9:2d:7f:e4:54:50:ae:6e:
c3:f0:37:a8:da:6f:cf:8a:2d:1c:c6:3e:43:59:de:b4:49:27:
c3:6a:70:3e:b3:c3:7f:49:a6:92:7f:f4:3b:76:dc:4d:01:72:
e5:b6:30:d5
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUTGNSKkqgKjcYHzAy/Jetghu6lg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjExMDcyMzU1NTFaFw0yNzExMDcwMDAwNTFaMDMxMTAvBgNV
BAMTKEZFRTA3QkU4OTI0NkNGNTAzRjU1OUI3MzAyM0NGOEVENkUxNUM3RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxOblB7kmsPf9bVAUj91Q7ZeH
Dp1nLTML91r2pv8x3rzudGyx5NULyJhP+w3UlvFoRf1FP3thbHdHj6cy7//oSTjf
7isYJheqRBKYaU0vf2lXgJ5pNPQHy3V/eZHp42Vb0OBLWwHtPKvXuQbx5nu5+1kZ
90cg3RQUp9jwi0vrVq8XMyDKh7FzAwSwmbPnny8JSRTcIYF599jA4cJAy43XJPsd
lg4dIREDtuz/s3jEfdQPzX8VlfeGeGNiEEDk8jAvt1a2jsPY79B6Z42P8q9/LP3X
tsw7Ts4o5zwXD2I7LQBoQGx6pXkmAeRIAB7LhqMnh/7y3nvT2Mk+9I3hggu7AgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQU/uB76JJGz1A/VZtzAjz47W4Vx+YwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAjxQi
AwQAjxQ4AwQAjxRPAwQAjxSgAwQAjxSlAwQAjxT1MA0GCSqGSIb3DQEBCwUAA4IB
AQBfYS61LIjto471QLB7dDf9RyjPBUAE0Y7l2Jj6YXjqM9AkTUOBpzB91WQ3/jVF
az6w6kY2wX4JjPU4owjhONYSWp8lg2/B9qGwYDEaZtZ8LU8xm1xVWNcVRf9ZknV4
vP7uE4i2ZcaO8fIXzp5mckKQB/wdz1TeRrQMuPZIHb43/hfl9O9NzuPuGV6MOWa3
wFykAWz1tE4q4VemySOXI9RJk82Re18xgZ+FJdvyT1SIy9lVHuzGKQXEBITOfkqL
pCN4K5k0fWj/T7qr1VNzuQvp2S1/5FRQrm7D8Deo2m/Pii0cxj5DWd60SSfDanA+
s8N/SaaSf/Q7dtxNAXLltjDV
-----END CERTIFICATE-----
Generated at Sun Nov 8 07:19:00 2026 by rpki-client