Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12989.roa
File: AS12989.roa (raw, json)
Hash identifier: vZ+ydrPfv95yi6TYTiEBY83j6rB/LkJJiBjC4ll4Fj0=
Subject key identifier: D4:43:98:1A:3B:CA:7F:14:E2:B7:DB:CF:7E:00:3A:6B:DD:26:6A:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 22A52DBC754E6103A0C935F553243504E6986CC6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12989.roa
Signing time: Tue 19 May 2026 14:44:22 +0000
ROA not before: Tue 19 May 2026 14:39:22 +0000
ROA not after: Tue 18 May 2027 14:44:22 +0000
asID: 12989
IP address blocks: 168.222.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 05:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a5:2d:bc:75:4e:61:03:a0:c9:35:f5:53:24:35:04:e6:98:6c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 19 14:39:22 2026 GMT
Not After : May 18 14:44:22 2027 GMT
Subject: CN=D443981A3BCA7F14E2B7DBCF7E003A6BDD266A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:52:fb:90:e0:ae:a8:43:a7:c0:1c:2d:e4:
11:50:b3:8c:7e:83:36:ee:e4:83:5b:9f:e2:58:56:
09:49:17:d1:fe:c3:92:93:51:f2:78:f0:5a:ec:47:
93:92:34:9a:00:df:84:8e:79:91:88:69:da:f3:00:
e4:72:55:52:64:8b:c8:fb:f0:ac:76:f3:3d:75:41:
76:a9:54:69:8f:81:89:28:29:29:2c:f4:b2:e9:cb:
a1:73:22:48:1d:d2:96:5a:e9:49:bf:2e:5a:5f:3b:
d1:3d:ba:f0:12:41:0f:c5:e6:c9:e8:b0:c2:4b:ce:
66:dd:27:f9:d9:e9:cc:9f:7f:bd:23:95:a5:f9:48:
97:cb:4a:91:bc:4c:f8:aa:82:57:66:44:b0:12:49:
00:67:87:a5:03:2b:4a:ae:b7:b1:b0:cd:27:37:d0:
ca:3f:e0:24:45:d7:d1:a2:e3:14:e9:6c:e0:b0:a8:
03:5e:29:ba:7f:90:d4:83:a0:e3:1c:cb:1d:31:82:
55:ab:31:71:0f:53:ca:6f:fe:94:73:b1:09:80:89:
d3:a1:f0:8b:6c:f8:d3:a8:1d:6f:45:df:51:66:98:
0e:c7:46:b2:4f:61:7d:37:b0:21:4b:93:7b:37:c8:
02:d1:a7:f4:ce:58:69:9c:80:27:2f:30:16:5f:db:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:98:1A:3B:CA:7F:14:E2:B7:DB:CF:7E:00:3A:6B:DD:26:6A:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bb:07:02:ec:0d:90:21:7b:69:b4:c7:fb:38:9a:8d:65:e1:
41:d7:98:9c:d9:ee:74:5d:cd:ec:80:83:a1:35:eb:b7:58:cd:
cc:46:32:e5:7e:b0:a2:6e:46:bc:82:8a:94:14:97:9a:8e:41:
8b:c5:c6:89:13:5a:82:d5:8c:f5:48:fb:71:c0:98:6a:4c:5e:
ff:f4:ef:1c:d7:fe:0d:ec:30:9f:3d:62:75:93:34:cc:58:00:
94:17:e5:5d:4f:91:d3:cb:64:c9:71:1e:d4:71:1b:6a:fc:46:
0b:85:32:44:aa:25:05:96:79:05:fd:46:0c:74:10:59:03:af:
d2:fd:0c:bb:4a:48:74:92:ce:94:15:8c:15:4d:af:ba:32:a2:
0e:4b:8c:ae:24:a6:d3:43:9c:1d:d9:d5:82:e2:c5:86:c7:b1:
82:2f:f6:ac:ba:ae:d6:6d:7c:09:43:8a:9f:c8:f6:c2:e9:59:
dc:39:21:5d:e2:1f:51:2d:dd:a3:68:6e:a5:9a:06:cb:17:4a:
63:c8:c0:c0:8c:2f:c3:8f:6b:23:41:5d:0b:0e:bb:5b:1e:31:
5c:fd:38:12:09:cf:dc:48:52:65:b7:58:4e:13:bd:08:5e:45:
b3:95:e1:a8:fc:c2:8a:70:47:6d:3e:b9:c4:fe:5c:3c:18:8c:
6b:db:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 15:11:41 2026 by rpki-client