Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12755.roa
File: AS12755.roa (raw, json)
Hash identifier: Zo6H0ZB8mzX0SY9g8Fy5YHcQ++T2n9gIRNq9IEOODho=
Subject key identifier: 2B:91:4A:23:1A:11:44:0D:8D:9B:C8:F2:1E:84:53:A1:B2:B5:02:C0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2F001ED2762700111A7EAAF721A4492334F7432E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12755.roa
Signing time: Thu 15 Oct 2026 08:22:55 +0000
ROA not before: Thu 15 Oct 2026 08:17:55 +0000
ROA not after: Thu 14 Oct 2027 08:22:55 +0000
asID: 12755
IP address blocks: 2a13:9500:1ef::/48 maxlen: 48
2a13:9500:1ef:10::/64 maxlen: 64
2a13:9500:1ef:11::/64 maxlen: 64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:00:1e:d2:76:27:00:11:1a:7e:aa:f7:21:a4:49:23:34:f7:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 08:17:55 2026 GMT
Not After : Oct 14 08:22:55 2027 GMT
Subject: CN=2B914A231A11440D8D9BC8F21E8453A1B2B502C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:80:24:e1:ad:7a:8a:77:50:7b:95:43:16:
58:de:75:03:75:9e:22:a4:e9:ad:aa:83:84:10:fa:
8f:07:ee:47:66:2a:78:ca:7b:46:92:25:02:97:42:
7f:c7:53:11:95:25:17:6d:ef:c1:b3:7d:97:7c:4b:
ea:4c:1d:49:91:2a:cf:ce:f2:51:75:99:21:5d:9b:
4b:6c:c8:d5:2a:ca:34:91:ae:a8:c2:ce:76:c8:6a:
74:67:13:a1:80:72:cc:0a:fe:0e:5a:bd:ad:c6:ba:
97:1a:4d:f4:6c:e3:86:3e:8b:ab:68:80:ca:e5:2e:
90:40:cb:e6:02:4e:7e:ca:af:e7:de:9c:82:25:9e:
ef:bd:cd:30:2b:2e:29:91:43:bc:34:63:92:4a:d5:
a6:43:b9:61:2e:1c:89:ed:27:e1:61:ee:e8:cc:08:
cb:ee:95:39:e2:86:3a:57:0e:c1:02:ec:0d:1e:cd:
b6:39:d9:83:4f:db:3f:4e:73:ac:b0:e4:8b:64:97:
88:2a:c1:82:7b:78:eb:e3:2d:f5:03:d6:f4:b6:a5:
a4:c2:6c:6a:3a:6f:fb:9b:8b:1d:0a:5c:58:fc:91:
58:26:e4:4f:42:b9:5d:6a:c9:0a:cc:de:21:c3:02:
d3:b4:92:bd:6c:b6:7f:27:6c:07:17:07:2d:0e:5e:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:4A:23:1A:11:44:0D:8D:9B:C8:F2:1E:84:53:A1:B2:B5:02:C0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ef::/48
Signature Algorithm: sha256WithRSAEncryption
8c:a9:e7:81:c6:70:d9:90:c7:fc:bf:c9:47:61:3f:a6:71:e6:
f2:64:0c:e8:ce:eb:fc:b3:b1:e5:76:48:0c:6a:c8:09:1d:09:
1c:ea:bf:7a:8b:52:01:98:93:eb:96:fd:8b:95:4d:5b:0a:74:
1a:32:3a:3a:5c:90:8a:18:4d:35:a2:05:35:a4:a8:05:46:03:
73:e4:df:46:a7:81:48:79:ab:51:8c:d2:94:0c:33:9e:cb:e6:
09:31:83:7c:ec:7f:cc:81:d8:8d:6d:a6:29:35:40:b0:95:d8:
1c:25:f5:74:8a:45:21:c3:b4:a3:50:28:ed:77:dd:b5:ae:b9:
1c:4f:45:62:38:35:c2:84:e3:95:e3:d0:fa:b8:c6:45:f6:e8:
dc:06:68:8b:2c:2d:41:89:fc:45:08:80:a1:c7:d3:a0:ef:ad:
b5:4f:d1:46:a2:a1:20:f8:0d:f7:17:94:4a:21:49:ad:03:92:
69:00:83:05:a0:76:13:02:41:56:4d:83:96:87:0e:cf:5f:c8:
77:ad:92:8d:74:e0:b3:ef:90:13:1a:e0:7d:09:4c:c2:02:a1:
75:59:be:17:ac:a9:79:67:89:a4:24:4e:79:08:50:54:85:35:
68:6b:ac:43:68:aa:13:af:86:a9:d5:f0:9d:37:53:15:0d:7f:
a2:30:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:02:16 2026 by rpki-client