Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 2n8637Q9C3eAi26D54FQL50sHHNsqPnNUlkDcNrmY8A=
Subject key identifier: 9B:48:8D:0A:46:5E:0F:E0:8C:66:B8:30:D0:16:EF:71:78:21:6F:BA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C65686311C29763E6D7A050CCBD0EBA42FBC29A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Mon 27 Jul 2026 10:37:24 +0000
ROA not before: Mon 27 Jul 2026 10:32:24 +0000
ROA not after: Mon 26 Jul 2027 10:37:24 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.97.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
92.113.194.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.88.0/24 maxlen: 24
178.93.91.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.165.0/24 maxlen: 24
178.93.171.0/24 maxlen: 24
178.93.177.0/24 maxlen: 24
178.93.183.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.94.25.0/24 maxlen: 24
178.94.42.0/24 maxlen: 24
178.94.161.0/24 maxlen: 24
178.94.193.0/24 maxlen: 24
178.94.213.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.94.237.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.24.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
178.95.151.0/24 maxlen: 24
178.95.169.0/24 maxlen: 24
178.95.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:65:68:63:11:c2:97:63:e6:d7:a0:50:cc:bd:0e:ba:42:fb:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 27 10:32:24 2026 GMT
Not After : Jul 26 10:37:24 2027 GMT
Subject: CN=9B488D0A465E0FE08C66B830D016EF7178216FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:5d:18:8b:dc:90:52:6d:1a:b7:cf:79:2d:
52:ee:e9:88:a5:ad:c1:d2:df:f0:1a:1f:17:84:d8:
5d:24:2c:95:e6:3b:db:31:99:49:2b:38:e2:6c:f0:
64:fd:6a:a1:5f:20:8c:88:e2:40:12:38:20:98:72:
ff:e4:40:e0:20:82:c6:c4:f8:74:b6:7c:5e:83:27:
12:63:0e:ea:f1:2b:e1:66:d0:31:68:2f:b0:65:ce:
67:4c:3e:d1:98:5d:ce:ad:cb:08:94:6b:01:6e:54:
f2:c1:b0:0c:a2:21:7e:81:22:d9:40:2e:f5:f8:1d:
85:f9:ac:92:0f:f1:3b:9e:7f:71:8f:a7:12:bd:87:
3a:6d:bf:c4:c7:71:76:41:9b:80:78:d7:ec:26:5e:
86:03:c0:35:61:56:04:6f:8c:ac:2d:76:c7:8e:05:
13:1f:2e:df:c3:a7:1b:b8:5d:f7:34:60:8f:77:d7:
fe:80:db:3d:a6:b5:27:79:72:1e:60:b6:c4:c2:a9:
9a:1a:26:b6:de:9e:72:65:28:87:81:74:13:0d:46:
5e:86:b9:6a:e8:4e:91:62:6e:de:92:38:2d:f2:d8:
63:5f:8f:2b:23:77:58:13:a5:dd:42:2e:c3:83:c6:
e8:35:5d:5c:80:0f:5f:3e:18:26:49:98:6d:f2:5c:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:8D:0A:46:5E:0F:E0:8C:66:B8:30:D0:16:EF:71:78:21:6F:BA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.97.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
92.113.194.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.88.0/24
178.93.91.0/24
178.93.110.0/24
178.93.165.0/24
178.93.171.0/24
178.93.177.0/24
178.93.183.0-178.93.184.255
178.93.200.0/23
178.94.25.0/24
178.94.42.0/24
178.94.161.0/24
178.94.193.0/24
178.94.213.0/24
178.94.215.0/24
178.94.231.0/24
178.94.237.0/24
178.95.12.0/24
178.95.24.0/24
178.95.48.0/24
178.95.101.0/24
178.95.123.0/24
178.95.151.0/24
178.95.169.0/24
178.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d3:d6:6c:57:53:d2:6d:1a:b4:d8:d4:16:ca:38:83:c4:76:
e3:92:32:05:ac:54:72:d5:1a:c0:91:d5:4b:21:18:cf:3f:f3:
f5:17:9b:1d:7d:ce:03:4a:38:0d:6c:74:dd:e7:f6:44:73:e2:
55:d4:13:16:64:a1:29:02:e5:ea:f8:97:82:a5:38:1c:44:4c:
18:50:08:b1:99:02:70:9b:c1:7a:68:29:f0:31:84:82:77:7c:
ef:f9:1a:05:6c:62:2e:a2:ca:2e:29:35:41:32:2b:e4:a0:23:
b7:ac:0d:65:c3:28:74:33:e7:e0:84:15:7d:ce:35:c4:ad:2e:
65:0a:ed:6e:d6:9a:3b:20:70:cc:ea:2d:5e:45:b7:31:ed:52:
23:24:c1:0c:48:af:fd:53:2e:ac:14:f7:7f:ca:7e:af:9e:7e:
26:bb:90:bc:5a:11:b9:7a:05:e7:0d:dd:89:72:1e:3d:94:07:
7b:fd:64:e6:ce:91:e6:61:25:a5:20:c5:96:ca:f4:d7:d6:cf:
c4:0f:8f:0c:21:4c:bf:e3:85:e3:a1:83:44:d0:01:35:ad:56:
00:51:15:e7:65:56:dd:83:43:fc:10:46:db:a6:d4:89:ff:d8:
f7:81:f5:fd:28:e9:d2:a3:f0:fa:11:9a:96:b5:3b:a5:31:78:
8c:4d:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:26 2026 by rpki-client