Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: Cgm8+TTuLtC9mSmyqp1nZxdtFnQALPhFf8XEoNVNyrQ=
Subject key identifier: AB:A3:79:97:3A:8E:07:08:14:56:07:25:44:72:20:E1:55:1F:E7:CF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6DBEE831495086D337C4C3EF089A472529B35217
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58212.roa
Signing time: Wed 25 Mar 2026 17:41:14 +0000
ROA not before: Wed 25 Mar 2026 17:36:14 +0000
ROA not after: Wed 24 Mar 2027 17:41:14 +0000
asID: 58212
IP address blocks: 82.24.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:be:e8:31:49:50:86:d3:37:c4:c3:ef:08:9a:47:25:29:b3:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 25 17:36:14 2026 GMT
Not After : Mar 24 17:41:14 2027 GMT
Subject: CN=ABA379973A8E070814560725447220E1551FE7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:03:e5:e4:41:e3:82:50:3f:28:c5:d1:1f:
50:c3:9d:f3:85:83:5e:99:00:a4:17:55:d7:81:de:
a7:de:e4:b8:d1:1e:4e:63:c6:18:55:ab:f5:f6:d0:
9a:cf:29:fd:cf:80:7b:2b:4e:df:c1:df:b5:0f:e2:
39:23:72:b0:35:af:4b:a7:b7:5f:fd:66:8c:d3:e2:
95:f5:c4:4a:fc:b5:5b:fc:96:5b:8d:1c:bd:7a:5c:
f7:7d:8f:ef:fc:16:25:d1:2f:62:2d:7d:0e:db:9f:
6a:14:3c:a2:b6:13:49:a4:ba:46:4c:22:65:f9:76:
8a:53:f0:e6:49:e4:c6:36:30:74:3d:3f:a8:7b:12:
0a:48:39:a9:a3:b8:02:ba:eb:c6:69:1d:84:42:63:
a9:f6:d1:4f:f2:2e:f2:47:3d:f5:05:ac:d3:a7:c8:
d5:74:1c:22:a5:91:a8:69:e8:92:fa:5e:49:77:b8:
75:4a:cd:e7:18:f8:fe:3f:e1:ea:49:59:ef:c2:04:
d7:e8:96:e1:29:7a:0d:29:1f:52:e9:a4:c3:e1:7f:
fc:22:06:6b:32:4c:ab:a8:c6:52:a1:57:17:fa:83:
a6:00:c9:db:54:b8:5b:ce:82:5a:72:fe:c5:93:14:
c9:46:e1:5b:be:95:ad:92:99:96:0a:15:50:f5:ae:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:79:97:3A:8E:07:08:14:56:07:25:44:72:20:E1:55:1F:E7:CF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.106.0/24
Signature Algorithm: sha256WithRSAEncryption
86:34:86:3e:1a:a1:19:c3:a9:9d:9a:6f:5d:a1:37:a3:3a:7e:
6a:37:bf:7f:6a:a3:be:36:7f:54:6f:f0:5a:af:ad:54:9a:2b:
a5:09:fc:8d:81:40:7a:ba:78:da:86:8f:ad:4b:c2:96:21:bd:
5f:9c:2e:c8:74:27:e8:83:8a:20:ee:52:ce:59:ee:f1:d6:97:
e7:5f:5d:85:f5:2f:2c:01:95:fe:9b:5c:24:39:91:44:9e:bf:
f5:5b:5d:aa:87:25:09:7e:41:a8:bc:c0:95:24:e3:39:fb:db:
69:fd:12:6a:0e:e6:74:93:72:a5:28:7c:82:f1:6e:49:21:68:
76:66:9e:2c:13:b4:c0:4b:cd:3f:22:59:e9:bc:59:42:b6:d3:
b3:38:13:69:5b:01:00:3a:c3:aa:33:d1:92:ec:f8:09:0f:b7:
d4:89:ba:a7:06:ec:43:78:ab:b3:e7:b0:b2:74:62:ec:3a:cd:
f6:92:e9:7d:1a:ae:9d:f9:81:e5:71:35:29:6f:9e:d0:91:54:
a8:a4:6e:f4:c5:c1:60:65:b2:44:66:be:53:75:38:32:f8:23:
2b:6e:2a:3c:87:33:54:7f:fe:a8:ae:66:7b:b3:c1:9d:5d:04:
cf:7d:38:f5:75:3d:bf:95:1d:f1:0e:43:5a:9c:c1:5b:da:4f:
30:6d:db:e6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUbb7oMUlQhtM3xMPvCJpHJSmzUhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjUxNzM2MTRaFw0yNzAzMjQxNzQxMTRaMDMxMTAvBgNV
BAMTKEFCQTM3OTk3M0E4RTA3MDgxNDU2MDcyNTQ0NzIyMEUxNTUxRkU3Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjAPl5EHjglA/KMXRH1DDnfOF
g16ZAKQXVdeB3qfe5LjRHk5jxhhVq/X20JrPKf3PgHsrTt/B37UP4jkjcrA1r0un
t1/9ZozT4pX1xEr8tVv8lluNHL16XPd9j+/8FiXRL2ItfQ7bn2oUPKK2E0mkukZM
ImX5dopT8OZJ5MY2MHQ9P6h7EgpIOamjuAK668ZpHYRCY6n20U/yLvJHPfUFrNOn
yNV0HCKlkahp6JL6Xkl3uHVKzecY+P4/4epJWe/CBNfoluEpeg0pH1LppMPhf/wi
BmsyTKuoxlKhVxf6g6YAydtUuFvOglpy/sWTFMlG4Vu+la2SmZYKFVD1rtu3AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUq6N5lzqOBwgUVgclRHIg4VUf588wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTgyMTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSGGow
DQYJKoZIhvcNAQELBQADggEBAIY0hj4aoRnDqZ2ab12hN6M6fmo3v39qo742f1Rv
8FqvrVSaK6UJ/I2BQHq6eNqGj61LwpYhvV+cLsh0J+iDiiDuUs5Z7vHWl+dfXYX1
LywBlf6bXCQ5kUSev/VbXaqHJQl+Qai8wJUk4zn722n9EmoO5nSTcqUofILxbkkh
aHZmniwTtMBLzT8iWem8WUK207M4E2lbAQA6w6oz0ZLs+AkPt9SJuqcG7EN4q7Pn
sLJ0Yuw6zfaS6X0arp35geVxNSlvntCRVKikbvTFwWBlskRmvlN1ODL4IytuKjyH
M1R//qiuZnuzwZ1dBM99OPV1Pb+VHfEOQ1qcwVvaTzBt2+Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:24 2026 by rpki-client