Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: 6PwFjYEuzf5YF1KvDdHr1yhM/0LoCQ3Jy/Ow8PJaRQU=
Subject key identifier: 79:72:B7:18:6D:68:8A:86:B8:07:E0:AD:9D:E6:D9:62:AA:B2:A4:A9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5268707B956640485161FC910B935DC74EE57D9B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
Signing time: Sat 02 May 2026 12:20:09 +0000
ROA not before: Sat 02 May 2026 12:15:09 +0000
ROA not after: Sat 01 May 2027 12:20:09 +0000
asID: 58212
IP address blocks: 143.14.156.0/24 maxlen: 24
143.14.171.0/24 maxlen: 24
143.14.202.0/24 maxlen: 24
143.14.216.0/24 maxlen: 24
167.148.173.0/24 maxlen: 24
167.148.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:68:70:7b:95:66:40:48:51:61:fc:91:0b:93:5d:c7:4e:e5:7d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 2 12:15:09 2026 GMT
Not After : May 1 12:20:09 2027 GMT
Subject: CN=7972B7186D688A86B807E0AD9DE6D962AAB2A4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:d4:ee:12:6c:fb:62:fc:7d:f9:76:a9:83:
29:8e:cb:5a:46:ac:38:c6:b8:ec:aa:13:21:26:b7:
8f:f6:81:c7:a7:92:fe:93:5b:f6:5f:88:33:77:0d:
20:fd:8e:9b:3b:27:9c:9d:c0:bd:5c:e9:14:16:00:
98:2b:9c:2c:f8:35:c0:49:5c:35:34:40:0e:e6:f6:
08:16:4c:36:7e:d0:d2:2d:b4:d5:09:25:e4:5a:73:
dd:7f:e8:97:06:fb:fb:37:c3:d4:cb:3d:8e:33:da:
d3:87:70:be:86:5a:dc:ce:ea:99:fc:b1:b5:bd:9d:
7d:ba:f2:53:57:ab:9d:c5:d8:21:69:ac:cf:bf:df:
47:be:ee:ff:96:83:8a:2c:11:a8:85:24:8a:16:83:
15:a0:c7:40:db:ab:bc:9b:79:70:ad:e3:18:83:35:
a9:d7:2a:e0:46:8f:0f:f4:8b:da:48:bc:7d:1a:c5:
e4:33:15:b5:61:f7:db:33:f9:23:9f:74:a0:d5:12:
e0:c7:d6:43:82:1a:c9:14:b8:6e:c0:7f:22:1e:d6:
35:ad:6a:35:d8:f4:9d:a5:8b:dd:52:66:59:b3:2c:
4f:84:38:73:30:14:cd:29:0c:fb:60:b3:0e:18:d9:
4a:07:9d:15:3c:f7:4f:41:f2:83:76:db:81:9a:0d:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:B7:18:6D:68:8A:86:B8:07:E0:AD:9D:E6:D9:62:AA:B2:A4:A9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.156.0/24
143.14.171.0/24
143.14.202.0/24
143.14.216.0/24
167.148.173.0/24
167.148.187.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d7:ad:fb:bf:69:f5:cb:03:a9:84:ca:41:cc:4c:df:df:f5:
64:75:4b:ef:1f:3b:85:cb:21:8b:56:95:58:c2:a7:a7:80:75:
f9:3d:a3:ed:93:3d:eb:51:59:b1:f8:ad:0f:78:4c:00:78:ee:
26:67:e9:22:15:4d:1d:06:e5:18:de:d4:fe:b8:25:6b:9c:4a:
04:69:8f:ea:9f:e6:0f:47:72:56:55:83:f6:23:6d:1b:23:6c:
5c:f3:ef:05:7b:de:fb:78:9d:1f:77:7d:a2:e5:e5:2e:65:09:
f0:b3:6b:c7:df:f8:a1:62:fd:df:2e:94:2f:2e:ee:e7:65:df:
fd:8a:7d:00:c0:a1:aa:b9:4a:53:db:66:1b:95:5d:1a:a7:76:
58:2c:96:f3:00:68:b6:41:90:db:63:ea:9c:1c:95:d8:97:2d:
f9:ad:8d:3a:3b:23:a2:4b:d7:4e:5c:f2:20:e6:2f:b2:c7:71:
7b:f2:81:1e:11:6f:33:5a:4d:40:f6:ac:61:6f:f6:ee:eb:fc:
6f:0a:80:a8:5e:0d:7a:0b:ee:fb:38:de:18:71:05:7a:22:bc:
83:05:dc:c8:4c:a6:fe:b5:6a:04:ee:08:c0:76:af:fc:72:f9:
c6:55:d1:61:6f:61:0f:b3:05:c7:66:a1:3b:dd:be:84:bc:3f:
9c:48:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:47 2026 by rpki-client