Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          A3By81yiqfRBIRCCuVn1FTmfl/sW7sj+VyhCXtyel6k=
Subject key identifier:   59:1E:95:07:FE:37:18:25:AC:E2:B4:E7:96:4A:F9:AD:EA:31:D4:99
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       126CCBE81E4DE1C4BD5F62E95B1FA2E035A4737F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
Signing time:             Mon 05 Oct 2026 20:41:01 +0000
ROA not before:           Mon 05 Oct 2026 20:36:01 +0000
ROA not after:            Mon 04 Oct 2027 20:41:01 +0000
asID:                     12083
IP address blocks:        51.146.176.0/22 maxlen: 24
                          51.146.192.0/22 maxlen: 24
                          51.146.196.0/22 maxlen: 24
                          94.194.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6c:cb:e8:1e:4d:e1:c4:bd:5f:62:e9:5b:1f:a2:e0:35:a4:73:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct  5 20:36:01 2026 GMT
            Not After : Oct  4 20:41:01 2027 GMT
        Subject: CN=591E9507FE371825ACE2B4E7964AF9ADEA31D499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:b8:75:48:ff:45:26:09:81:b4:24:ec:66:
                    5f:35:4e:b4:3b:b9:78:9f:cb:22:4b:7b:c7:14:05:
                    42:c7:31:00:c7:cb:0d:df:88:92:57:ff:97:3f:19:
                    cd:a1:4a:71:44:de:71:9f:aa:de:10:7a:9c:01:13:
                    d3:c8:93:44:d6:32:ff:ee:6a:fa:7d:d2:3a:13:23:
                    25:80:d4:78:ad:98:1b:6b:01:e5:9c:39:2b:45:b2:
                    20:34:15:03:85:4b:51:47:6b:f6:a4:c3:72:91:30:
                    df:f2:e6:97:57:02:58:3e:24:ab:f0:90:12:84:ef:
                    49:e4:98:26:b7:bf:73:75:fd:d6:9e:5f:22:36:91:
                    29:4d:90:f3:e4:00:6e:3a:b4:73:7b:63:ec:27:65:
                    a8:24:5e:e0:42:c5:93:69:2f:a9:8c:bf:d8:bb:40:
                    d1:50:52:67:fe:a8:be:9d:7a:b5:8f:43:ac:82:27:
                    0e:36:34:c3:0b:23:6d:31:bd:89:8f:6e:da:a8:5c:
                    ce:5b:a8:cf:0f:3e:f9:85:23:6a:3c:cc:0f:fe:f8:
                    85:60:d6:e8:66:62:d8:96:aa:27:41:5a:a6:2d:3e:
                    be:09:8c:fb:56:90:fb:10:53:2d:41:2b:cb:82:81:
                    b5:8d:5f:65:ba:ee:7b:9d:2e:18:e0:14:1b:5d:81:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1E:95:07:FE:37:18:25:AC:E2:B4:E7:96:4A:F9:AD:EA:31:D4:99
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.176.0/22
                  51.146.192.0/21
                  94.194.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:f4:5e:3c:2e:ba:a8:b5:61:d6:79:f4:7f:72:80:6b:e8:
         3e:79:59:06:0a:4c:99:bb:5f:65:82:78:c1:f4:6c:ce:a0:01:
         3c:13:71:54:0c:ce:9b:f8:69:fb:a6:d1:e3:bb:b8:12:08:0c:
         db:e1:d4:99:89:5d:7c:82:26:a7:08:59:3b:4f:19:c5:d6:60:
         c2:11:59:10:51:2d:22:9d:ea:cb:38:6c:5b:3f:e7:1a:3c:31:
         c9:10:60:fc:d7:71:d4:ee:c7:16:30:20:1f:ef:80:cf:f5:f5:
         2a:f3:96:a7:f9:b2:73:6f:ca:99:50:fa:0d:75:e8:43:2b:a2:
         2c:45:9e:1b:8b:c7:20:d2:68:b0:3c:fc:9f:c8:22:5c:85:84:
         3e:91:e5:d6:16:90:8d:db:5f:e6:b6:1b:5f:39:63:ca:c7:72:
         82:c7:1f:41:ab:85:81:1a:e3:14:3d:6e:ec:a2:d2:5b:0d:19:
         b1:38:b0:a2:3e:7e:78:3e:10:0d:f2:da:1c:2e:40:95:4f:18:
         df:ce:c6:12:6f:0a:bc:28:14:7f:99:d1:95:e3:a9:c6:4f:17:
         9d:bb:dc:c2:fe:f6:d7:57:a1:77:cf:13:43:44:c2:52:1a:cc:
         eb:2b:32:de:b5:27:5d:36:1b:a2:df:63:21:da:66:b1:c6:f6:
         3e:e1:36:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:03:29 2026 by rpki-client