Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: yJ8+r1gykaevg8I8nfKgEpcq8xZKJN8d0dIRsUAJrJE=
Subject key identifier: 9A:49:25:57:AD:C4:FA:C3:2D:BF:37:C6:5D:C8:9D:56:4C:27:C7:C2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2CC7EE6E3786D20F35A70E4EB9CECB98636E3579
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Mon 20 Jul 2026 12:06:59 +0000
ROA not before: Mon 20 Jul 2026 12:01:59 +0000
ROA not after: Mon 19 Jul 2027 12:06:59 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.97.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
92.113.194.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.88.0/24 maxlen: 24
178.93.91.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.165.0/24 maxlen: 24
178.93.171.0/24 maxlen: 24
178.93.177.0/24 maxlen: 24
178.93.183.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.94.42.0/24 maxlen: 24
178.94.161.0/24 maxlen: 24
178.94.193.0/24 maxlen: 24
178.94.213.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.94.237.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.24.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
178.95.151.0/24 maxlen: 24
178.95.169.0/24 maxlen: 24
178.95.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c7:ee:6e:37:86:d2:0f:35:a7:0e:4e:b9:ce:cb:98:63:6e:35:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 20 12:01:59 2026 GMT
Not After : Jul 19 12:06:59 2027 GMT
Subject: CN=9A492557ADC4FAC32DBF37C65DC89D564C27C7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:ea:75:79:2c:60:87:1b:f9:2f:f6:94:0b:
0a:1c:79:cc:09:94:91:eb:1f:c7:5a:27:8a:c6:17:
cb:c8:e7:7d:e1:75:6c:c8:7e:c5:d9:85:37:b8:84:
d2:ab:3a:de:69:b6:b2:ed:0b:e0:24:4f:c7:9b:22:
1e:99:08:a0:25:87:5f:2d:2b:17:82:77:6d:35:31:
b8:93:62:60:09:de:33:f9:9c:bf:0e:24:03:c4:75:
3f:65:ae:be:2e:95:16:0e:03:95:7c:e1:56:76:41:
7e:16:c2:96:c1:81:d5:7e:05:75:d4:46:46:10:83:
1b:39:8b:a6:9d:e9:c3:78:93:21:65:66:a2:c3:48:
cc:cd:da:ff:f8:62:d2:a3:fe:dc:a4:87:be:93:20:
be:5a:6f:06:e5:20:9f:c9:d9:09:72:d1:19:81:ff:
28:f0:f3:36:6d:68:bd:94:01:c1:81:44:d6:f5:88:
ed:d8:a2:7b:cf:8d:8f:bd:34:a6:68:27:ed:d1:d5:
2f:24:8b:fb:e6:a8:3c:91:25:ee:53:22:10:9f:a1:
50:c2:b8:42:37:89:ae:f3:72:85:8b:41:49:54:a7:
24:a2:1a:8a:13:44:26:d4:7d:bb:81:af:31:a5:bd:
91:c3:ef:f7:0b:10:40:79:4a:3c:18:cd:fd:95:34:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:25:57:AD:C4:FA:C3:2D:BF:37:C6:5D:C8:9D:56:4C:27:C7:C2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.97.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
92.113.194.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.88.0/24
178.93.91.0/24
178.93.110.0/24
178.93.165.0/24
178.93.171.0/24
178.93.177.0/24
178.93.183.0-178.93.184.255
178.93.200.0/23
178.94.42.0/24
178.94.161.0/24
178.94.193.0/24
178.94.213.0/24
178.94.215.0/24
178.94.231.0/24
178.94.237.0/24
178.95.12.0/24
178.95.24.0/24
178.95.48.0/24
178.95.101.0/24
178.95.123.0/24
178.95.151.0/24
178.95.169.0/24
178.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a4:78:37:84:c1:69:02:46:a8:c8:d1:b1:16:9b:29:e5:73:
b8:a7:f2:dd:07:ce:a2:47:6c:9e:ca:4d:c0:3d:62:f6:6b:f2:
62:75:93:d7:aa:a5:e2:db:2c:ab:3e:93:94:48:22:5e:fc:18:
42:e0:ca:58:3f:f8:07:d7:3f:d3:d8:44:a1:7f:fc:46:4e:7f:
59:8e:14:07:0b:b4:42:95:6a:f4:d4:e6:3d:a0:6d:6c:9f:8f:
2c:51:ec:f6:d2:75:02:44:ec:c5:b8:ff:28:69:28:6b:5b:e2:
b8:57:03:0a:df:19:a9:b1:3b:80:30:e1:d3:5f:54:82:49:b2:
8a:49:01:4d:53:29:da:fa:35:3a:0c:22:62:b0:f2:29:94:b9:
34:02:05:2f:08:3d:b8:c4:d3:7c:68:d7:d8:d8:79:12:cb:f5:
25:39:9c:48:d5:40:c1:c0:24:26:4a:78:4b:26:53:02:8f:3f:
ee:d3:27:d2:a9:4c:b0:da:60:64:9c:fd:19:64:64:87:86:81:
5c:81:59:26:90:fd:8f:25:98:52:d7:15:3f:a8:a4:fd:5b:9a:
10:10:99:10:6e:40:2c:3e:0d:d6:bb:3f:77:d4:c2:56:a9:c6:
eb:08:39:2a:10:18:bd:76:7e:4a:bf:00:f1:e3:1a:42:16:d6:
43:9e:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:26 2026 by rpki-client