Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: llhqnfgAG7O0tVPyvK+U+BRrMcWno1kjw6RRFmsGc00=
Subject key identifier: 71:C6:E9:C4:46:72:3B:78:B6:6F:FF:C8:3D:E8:EC:A1:D7:23:5A:0A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 64BBA1A28089453FAF3302D02AA5E77953C8C627
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Thu 11 Jun 2026 12:21:01 +0000
ROA not before: Thu 11 Jun 2026 12:16:01 +0000
ROA not after: Thu 10 Jun 2027 12:21:01 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bb:a1:a2:80:89:45:3f:af:33:02:d0:2a:a5:e7:79:53:c8:c6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 11 12:16:01 2026 GMT
Not After : Jun 10 12:21:01 2027 GMT
Subject: CN=71C6E9C446723B78B66FFFC83DE8ECA1D7235A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:78:b8:a4:35:32:22:e7:24:58:a7:53:d6:
de:53:44:93:a4:35:d8:97:59:2b:b3:9b:d6:ed:77:
75:02:25:25:ff:12:8a:ea:d0:27:c1:54:7f:bb:a2:
6d:c6:76:3a:58:95:ad:c0:7f:83:17:6b:f1:4e:e4:
15:96:27:8d:8a:24:78:ee:d5:ed:61:51:2c:b5:6a:
4e:66:9f:2f:7a:7b:2d:51:a5:7c:a7:70:66:1e:6b:
0c:49:bc:18:88:3d:0f:8e:a6:27:eb:ae:46:f2:e5:
ab:f5:05:02:97:37:a2:b5:60:88:35:49:9d:1e:fb:
0f:16:2d:47:aa:11:89:42:eb:3f:41:1b:b4:87:73:
89:19:fb:20:de:7f:46:57:80:c4:cd:a9:6a:56:db:
4a:71:23:b4:8a:41:87:16:9b:05:67:dc:e8:18:cc:
ba:eb:57:6b:8b:7e:fa:a0:86:e7:18:ae:7e:02:97:
ae:25:da:e1:ce:f5:9b:f8:05:a6:89:9a:7a:9b:7e:
db:05:61:f1:a9:9d:14:dc:76:49:80:7d:4d:ab:55:
43:8e:45:54:84:89:ce:04:68:84:47:9b:ff:cb:d7:
79:21:a5:5b:b8:05:43:b8:43:69:c9:f7:0b:7d:2c:
ee:44:f9:54:99:f7:8b:44:f3:21:f2:e9:5d:64:17:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:E9:C4:46:72:3B:78:B6:6F:FF:C8:3D:E8:EC:A1:D7:23:5A:0A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.110.0/24
178.93.184.0/24
178.93.200.0/23
178.94.215.0/24
178.94.231.0/24
178.95.12.0/24
178.95.48.0/24
178.95.101.0/24
178.95.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:79:eb:d7:6d:d6:a3:60:f6:1e:83:fb:9b:97:df:bf:38:b7:
c4:4b:4d:18:bf:63:5a:e1:73:05:8a:8e:0a:1a:7b:c5:9a:d7:
7a:78:0a:67:04:a6:87:d2:8b:a3:b0:fc:b5:82:44:74:a5:70:
7d:fb:7c:e4:5a:e5:5d:1d:6a:ef:d0:ee:0c:e2:97:14:55:d0:
49:59:a4:7a:61:c6:37:d9:d0:3b:c9:1f:4c:b9:7e:7d:80:85:
db:93:11:68:4f:0d:46:27:27:f3:30:1b:d3:22:56:08:f4:65:
47:a5:ee:48:f0:7a:1b:aa:37:d9:21:4d:ff:e2:14:36:a1:ce:
67:2f:be:2e:8a:c4:c6:62:57:c1:12:e1:15:1f:ae:f1:f3:f9:
30:4b:bc:63:1b:c4:73:db:b3:dd:3f:5e:9f:ab:d1:bc:10:fa:
c7:71:db:64:d1:eb:f3:4e:c3:af:6f:71:4e:47:c3:3e:84:42:
32:1f:73:04:b0:b0:10:6b:1c:b3:c0:37:05:8e:7f:67:41:c3:
40:c3:e1:5b:75:e8:6e:04:87:1d:cb:7c:87:95:0f:c7:80:ef:
82:6f:65:7b:54:a1:7c:6e:d4:83:7d:82:24:9d:33:e2:f9:71:
19:20:72:2e:db:f7:cb:e0:1f:5d:2a:20:44:18:7e:d3:ba:38:
23:d3:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:24 2026 by rpki-client