Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: ERF3K6C/KuqkSsWmaM2gDbLznT0FMirUXHVASqteZcc=
Subject key identifier: 50:73:ED:BD:C7:17:F4:D2:10:C8:92:79:A0:0B:E0:04:D1:5B:9F:A7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7E3396C490A2911EACDCB94B25360EE457898796
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Thu 10 Sep 2026 09:21:40 +0000
ROA not before: Thu 10 Sep 2026 09:16:40 +0000
ROA not after: Thu 09 Sep 2027 09:21:40 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
92.113.194.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.58.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.91.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.165.0/24 maxlen: 24
178.93.171.0/24 maxlen: 24
178.93.177.0/24 maxlen: 24
178.93.183.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.93.231.0/24 maxlen: 24
178.94.25.0/24 maxlen: 24
178.94.42.0/24 maxlen: 24
178.94.161.0/24 maxlen: 24
178.94.209.0/24 maxlen: 24
178.94.213.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.94.237.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.25.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.72.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
178.95.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:33:96:c4:90:a2:91:1e:ac:dc:b9:4b:25:36:0e:e4:57:89:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 09:16:40 2026 GMT
Not After : Sep 9 09:21:40 2027 GMT
Subject: CN=5073EDBDC717F4D210C89279A00BE004D15B9FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:7e:91:d7:01:34:2d:dd:bc:e0:b1:cf:48:
a5:43:7f:80:7b:44:4f:77:e6:aa:7a:2a:27:a7:86:
04:32:08:46:29:0d:d3:a7:ab:27:d9:66:aa:15:c6:
86:6f:f5:70:0c:e1:80:ba:08:4e:7b:0e:e1:81:70:
b2:f8:6b:7e:4c:6e:69:07:dd:81:85:3f:30:cf:a4:
80:5d:27:e3:07:24:be:06:b8:3c:c0:72:0a:b4:f0:
a2:b5:29:23:59:7d:62:6a:b5:0f:23:e2:20:84:d8:
7a:28:4b:7b:e6:98:cf:2f:e7:3e:cb:e9:cf:ed:6e:
56:9c:ba:8c:6e:6f:9e:cb:3c:f1:39:61:af:3f:69:
ca:0f:d8:38:90:1e:d2:07:37:eb:82:26:aa:b8:d3:
87:c7:90:2a:bf:dd:e9:eb:c8:0b:bb:25:b3:46:a2:
af:df:ec:2e:03:59:38:ea:8e:a3:2a:39:c5:72:00:
62:79:e1:d2:0e:24:91:78:8d:b0:a2:ab:6e:8a:70:
d2:d3:3c:d3:12:b7:65:13:af:37:ba:8a:5f:ee:a7:
1e:a1:79:df:26:14:8f:13:e0:c1:9b:a0:7a:0d:89:
ef:d4:57:73:eb:59:23:9e:ec:79:9d:7d:d3:6b:b4:
da:e6:54:cb:84:c0:a9:45:f0:93:11:cc:31:f0:9d:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:73:ED:BD:C7:17:F4:D2:10:C8:92:79:A0:0B:E0:04:D1:5B:9F:A7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
92.113.194.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.58.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.91.0/24
178.93.110.0/24
178.93.165.0/24
178.93.171.0/24
178.93.177.0/24
178.93.183.0-178.93.184.255
178.93.200.0/23
178.93.231.0/24
178.94.25.0/24
178.94.42.0/24
178.94.161.0/24
178.94.209.0/24
178.94.213.0/24
178.94.215.0/24
178.94.231.0/24
178.94.237.0/24
178.95.12.0/24
178.95.25.0/24
178.95.48.0/24
178.95.72.0/24
178.95.101.0/24
178.95.123.0/24
178.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3a:ad:5b:44:e7:2b:93:be:8e:9c:ba:2d:0c:00:ed:f0:f4:
c2:98:c1:19:44:c1:aa:0a:7e:9a:fc:41:77:27:40:5f:05:1c:
e1:97:0b:dd:7b:84:1c:61:57:3e:c1:ce:66:63:0f:5a:17:80:
fc:30:25:ce:2c:68:c6:f7:9f:38:68:74:de:c5:02:bf:d9:47:
44:1c:28:a0:0f:a4:ed:f6:b5:ba:c3:fd:2e:b0:03:4e:20:16:
68:d3:76:0a:00:83:b2:f4:51:17:02:10:6e:5e:94:b3:19:ea:
b3:44:34:57:89:93:54:21:f3:f9:98:95:6f:60:52:bc:23:a8:
ec:45:df:14:1f:c7:58:db:45:e1:38:0f:06:25:2f:5a:b9:c5:
f1:d8:7b:07:f7:89:8a:40:f7:e6:5c:48:db:15:10:78:e8:93:
b0:32:b8:3d:dd:23:5e:c7:0d:e9:f3:7c:4e:ce:ab:2a:3e:79:
10:78:1b:e7:33:29:98:90:9c:09:b5:46:06:30:d7:72:0c:f3:
af:5e:c2:ef:a2:0b:3f:b3:f4:f5:e5:67:5e:ae:d3:e8:0c:92:
d6:ed:a7:f6:b8:39:5f:3a:30:70:21:d6:a3:ce:ea:23:d1:79:
ae:2e:a2:ba:e1:84:89:5c:f2:08:b3:34:eb:16:69:f0:9c:e8:
d3:a0:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:21:41 2026 by rpki-client