Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12741.roa
File: AS12741.roa (raw, json)
Hash identifier: +y3lhkHYNBA/cAl4jgX7b3eWqHyWaRdrtyz8zykXSY8=
Subject key identifier: 11:E5:4C:E4:D0:DB:12:80:CC:8B:C5:0A:FB:05:9D:65:CE:69:C7:50
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0F52F7D9A9353AB5DE23E69F1453C6F864EC5DEC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12741.roa
Signing time: Wed 23 Jul 2025 14:06:58 +0000
ROA not before: Wed 23 Jul 2025 14:01:58 +0000
ROA not after: Wed 22 Jul 2026 14:06:58 +0000
asID: 12741
IP address blocks: 91.124.152.0/22 maxlen: 24
91.124.156.0/22 maxlen: 24
95.135.148.0/22 maxlen: 24
95.135.184.0/22 maxlen: 24
95.135.212.0/22 maxlen: 24
178.94.144.0/22 maxlen: 24
178.95.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:52:f7:d9:a9:35:3a:b5:de:23:e6:9f:14:53:c6:f8:64:ec:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 14:01:58 2025 GMT
Not After : Jul 22 14:06:58 2026 GMT
Subject: CN=11E54CE4D0DB1280CC8BC50AFB059D65CE69C750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:0b:c1:ce:16:52:3f:6f:b8:f0:af:4c:1f:
92:39:b3:5e:d9:88:13:d4:65:67:54:39:a0:fa:f2:
d4:53:81:33:34:8f:4b:dd:de:49:5a:64:15:6c:6e:
07:ef:3a:78:87:91:4c:04:12:ba:00:b7:05:c9:02:
d1:d5:18:9b:74:c8:20:42:f8:83:15:b3:cb:ec:08:
4d:35:d2:cc:02:63:92:e7:dd:25:19:5b:75:eb:fb:
fe:13:df:18:76:43:95:b2:aa:cf:0d:27:e0:b8:d7:
7f:c0:46:96:4b:3c:68:da:8e:86:69:88:8f:d1:88:
42:4c:97:79:88:1c:d1:ba:46:ac:b7:49:8b:a8:6c:
bb:1b:c0:96:e6:b6:eb:c5:cb:29:1c:2a:3e:6c:0b:
f4:7d:a1:1d:30:e1:c1:1b:dd:fa:1a:1b:90:83:7b:
67:8a:3e:38:73:57:12:40:ac:dd:4d:61:77:70:ae:
4a:8d:22:9d:c6:a8:37:d2:49:7a:e4:b4:cb:98:62:
0d:d2:ed:dc:61:cf:79:2a:31:ce:a9:61:f0:51:f8:
f2:a6:f2:da:20:ea:31:8d:2e:46:91:f9:df:d5:6a:
b8:69:8d:d5:9f:28:93:f8:3d:af:f9:18:93:e1:37:
46:8d:37:5c:eb:da:3a:5e:cd:2a:b3:b8:89:ee:a3:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:4C:E4:D0:DB:12:80:CC:8B:C5:0A:FB:05:9D:65:CE:69:C7:50
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.152.0/21
95.135.148.0/22
95.135.184.0/22
95.135.212.0/22
178.94.144.0/22
178.95.28.0/22
Signature Algorithm: sha256WithRSAEncryption
00:9a:56:48:58:62:b0:39:f8:9c:61:97:1c:f2:4d:13:64:03:
26:15:4c:eb:4c:d7:fb:f4:e7:78:0d:8e:84:d4:88:a2:be:79:
5f:9d:77:99:90:23:f3:15:b9:50:57:e5:ad:ca:d0:01:d8:23:
6a:e8:0d:13:db:20:10:b9:75:d3:47:29:2f:f1:53:49:5c:74:
6e:bd:13:ab:81:1e:86:25:1f:91:92:a7:1d:6b:c2:30:78:4e:
21:08:1b:a3:0e:c7:15:04:2b:11:9f:56:79:98:b2:36:d6:cb:
84:dc:35:22:d1:c3:0f:3f:d8:bc:03:15:95:75:3b:1b:1d:91:
0e:fd:20:3f:d0:c8:4d:81:4d:5a:7f:03:54:19:17:3d:c2:54:
32:0d:fa:d1:74:c2:d5:82:3a:ec:f2:3a:6e:27:5d:f7:35:56:
c7:58:6a:f0:1e:ef:23:14:75:03:92:b9:a8:bb:99:11:99:19:
48:82:d1:75:41:5b:5a:b7:d8:3d:ca:3d:13:37:bb:24:4e:e6:
27:23:10:70:b7:dc:44:b4:55:15:47:10:8f:49:ed:40:5f:bf:
94:2c:5f:d7:6d:65:ed:01:7b:1a:9d:a3:e9:dd:ae:ba:21:b6:
fd:d3:97:26:2e:a4:1e:b9:b6:50:83:dc:fa:5a:59:47:09:91:
fb:fc:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:50:00 2025 by rpki-client