Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: eWHjuWltaHsbLooD/wGOsrlK0VQG6CZtwL1LOQ/twsE=
Subject key identifier: 85:52:A6:61:88:D8:28:20:C0:E4:30:7E:23:05:93:E1:97:1D:8E:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1F2B551565CDA0B42CA971EFD8E44B12BCFE3C87
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
Signing time: Thu 09 Jul 2026 07:21:55 +0000
ROA not before: Thu 09 Jul 2026 07:16:55 +0000
ROA not after: Thu 08 Jul 2027 07:21:55 +0000
asID: 212238
IP address blocks: 51.146.240.0/24 maxlen: 24
51.194.80.0/24 maxlen: 24
51.241.23.0/24 maxlen: 24
51.241.109.0/24 maxlen: 24
51.241.111.0/24 maxlen: 24
78.105.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2b:55:15:65:cd:a0:b4:2c:a9:71:ef:d8:e4:4b:12:bc:fe:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 9 07:16:55 2026 GMT
Not After : Jul 8 07:21:55 2027 GMT
Subject: CN=8552A66188D82820C0E4307E230593E1971D8E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:60:e7:7e:5b:f9:f9:81:e7:23:55:25:0d:
09:0a:d6:b3:ea:a2:a5:65:87:6e:8f:e3:46:cc:ff:
75:67:cc:46:f6:08:57:28:b3:f9:bb:a0:29:6c:13:
a6:d5:63:7a:83:70:43:74:59:c0:62:bc:c6:3d:08:
be:46:61:48:98:be:1e:ef:15:72:71:80:db:a7:e7:
0d:2a:fd:91:95:42:d3:e6:7f:78:4e:5a:ef:12:67:
55:df:7a:ac:ad:a9:d3:f1:f9:05:78:5e:b7:a8:f3:
18:02:80:cc:85:25:56:cb:98:05:d4:8a:9a:0c:24:
31:32:fb:2a:9d:37:72:7a:f1:e7:2a:9f:b1:09:d5:
0d:75:94:42:43:fd:a6:ac:3d:23:99:30:12:00:12:
73:12:72:03:0d:8a:f3:e2:39:e6:56:08:1d:60:4c:
58:e5:08:22:f8:ec:a6:0f:78:93:fc:5a:27:1a:99:
d5:65:f6:6b:4d:12:69:b0:02:ce:f0:ae:f7:02:9a:
f7:e6:ca:b1:bb:7c:4b:54:c7:21:05:ea:de:b0:7e:
77:58:0b:e7:0c:39:cc:fe:ae:79:55:e1:61:48:80:
d6:84:b0:e7:e4:df:95:aa:45:06:a1:da:17:05:61:
60:6d:fb:4a:c6:da:58:99:a1:13:47:e0:0b:2f:e7:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:A6:61:88:D8:28:20:C0:E4:30:7E:23:05:93:E1:97:1D:8E:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.240.0/24
51.194.80.0/24
51.241.23.0/24
51.241.109.0/24
51.241.111.0/24
78.105.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d9:6d:e2:1d:03:23:c4:62:c6:ae:4f:9d:d2:93:77:34:9d:
50:9d:17:40:95:a3:ae:66:bf:e2:1b:75:d1:4a:88:be:ff:8d:
e1:fb:89:2f:7c:af:b0:2b:b8:7e:88:0d:ab:ad:c6:c8:b4:6c:
4b:7c:77:24:96:64:68:f8:5b:0f:d1:ef:50:32:ff:9f:0a:69:
98:b5:85:18:bf:f0:d3:81:75:3e:be:f8:d8:51:ae:01:e7:88:
f4:1c:83:74:ee:54:9d:78:27:a8:fb:14:b3:a4:0c:6b:0b:59:
a0:e0:f4:5d:be:7e:67:2b:99:93:cc:d0:02:29:65:f8:c9:ce:
af:dc:42:5f:f2:e4:1f:a8:a4:c9:4d:6d:2b:c2:b5:b5:71:cd:
f8:64:e9:21:6b:28:e4:f3:ad:c0:d8:84:3e:aa:96:ef:39:61:
b5:15:f7:85:73:91:22:db:ef:b2:4d:20:6f:3b:ae:aa:c6:4c:
19:d7:a7:33:84:a9:fd:ea:6a:b2:fd:ea:61:7d:fd:a7:59:07:
b4:27:d1:a6:cf:c3:db:b2:e9:2d:a8:0f:a3:b3:82:c1:6d:e9:
6b:de:76:57:05:5e:be:5f:4a:bf:4a:01:c9:6b:40:77:73:5a:
d8:fd:12:f6:6b:1c:48:b0:dc:71:a1:bc:d2:2e:df:ff:03:7b:
18:d4:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:17 2026 by rpki-client