Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS12926.roa
File: AS12926.roa (raw, json)
Hash identifier: BcvUu8gYSrdUU6QzHQitDoI7cLpVFlRmmXPNDXD1BHA=
Subject key identifier: 1B:FA:EE:D7:30:C9:52:EC:A6:4E:75:7A:B6:6E:D7:4D:A8:6F:B6:F2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 41EBB6D0033C51C75BE736BE04EC6107C2F22A5F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS12926.roa
Signing time: Tue 15 Jul 2025 13:23:35 +0000
ROA not before: Tue 15 Jul 2025 13:18:35 +0000
ROA not after: Tue 14 Jul 2026 13:23:35 +0000
asID: 12926
IP address blocks: 194.60.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:eb:b6:d0:03:3c:51:c7:5b:e7:36:be:04:ec:61:07:c2:f2:2a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 15 13:18:35 2025 GMT
Not After : Jul 14 13:23:35 2026 GMT
Subject: CN=1BFAEED730C952ECA64E757AB66ED74DA86FB6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:48:f3:72:83:39:38:60:60:bf:4c:fb:ff:
56:c4:c3:bb:d9:77:82:a6:b9:1a:97:75:9b:6f:17:
c4:1c:51:bf:80:8d:a4:69:10:b7:e5:67:bb:fd:5c:
d3:8e:67:c6:41:f8:f9:a9:86:55:3c:19:2f:06:9a:
07:16:53:4a:a9:c3:4a:5a:65:c6:e4:45:7f:bb:53:
ec:2f:a5:99:de:1d:83:6e:d5:b7:5f:be:fb:bc:23:
f2:4f:52:70:35:34:34:5a:b0:44:f2:e9:d8:7e:d5:
e2:a6:26:f7:27:7d:d0:91:6f:dd:29:a1:e5:91:92:
be:d4:93:ef:55:8b:0c:7a:8a:f2:a3:54:a4:8f:e2:
97:00:3b:a0:1b:3a:f5:19:50:67:20:51:16:b0:98:
1c:11:c4:79:41:39:3a:17:8c:24:83:98:29:53:9e:
dc:54:dd:48:f7:2e:fa:c1:ff:a5:f3:7e:74:fe:7b:
36:c3:03:f3:93:36:dc:df:65:1b:c5:c2:a7:41:94:
87:d8:64:75:47:b2:22:be:33:b4:02:f8:f2:1a:3d:
09:b7:61:21:7e:c7:c5:ad:cc:e9:9f:2c:0f:bf:e2:
5f:b6:0b:3a:4e:36:fe:52:78:70:8a:c5:79:43:fc:
87:96:6f:a6:7d:a3:1e:c9:5b:73:bd:88:68:08:e9:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:EE:D7:30:C9:52:EC:A6:4E:75:7A:B6:6E:D7:4D:A8:6F:B6:F2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS12926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6f:7b:30:91:d1:cb:0e:ab:51:1b:46:25:9d:14:54:2c:92:
eb:a6:3a:6a:dd:cc:0e:70:f8:16:71:65:c1:37:06:f5:12:8c:
84:81:b8:5d:d3:0a:1b:b5:d0:eb:2d:e5:7b:c0:00:ab:67:0f:
2b:53:f9:07:2a:ec:f9:4e:f0:ed:03:c8:0b:90:78:9d:62:17:
4c:fb:75:21:e5:5f:62:4e:6b:a9:a5:6e:36:4c:46:7d:aa:88:
fd:9d:4b:84:0e:da:0d:ba:d5:7a:f0:50:76:db:23:d6:51:3e:
70:02:4c:ab:27:94:a8:29:58:5e:3c:9d:56:c4:1b:a2:a1:cd:
8e:54:85:3e:fd:3e:7c:ce:ff:6a:eb:75:ea:cd:5a:90:f8:26:
38:4e:55:c8:26:10:a2:5b:98:dc:0f:d3:0b:23:79:be:42:65:
bd:ca:1c:53:af:b4:07:76:b3:7c:4b:31:56:69:ec:88:7b:b0:
2a:2f:d8:c2:a8:ad:0a:0a:88:81:36:9f:7b:90:df:39:a7:11:
73:34:99:29:fb:d3:1b:ee:65:36:1e:16:b6:ec:fe:f3:dc:0a:
d0:36:e0:47:e6:2c:4c:78:21:f0:18:3f:6a:4c:d7:a8:d0:e6:
fe:52:2e:5e:99:50:63:f8:5d:68:db:00:39:16:e8:a0:e4:75:
68:e0:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:54:41 2025 by rpki-client