Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS12083.roa
File: AS12083.roa (raw, json)
Hash identifier: MUe2cqtFEnaNoT3tD8wok4X+5BCnUWDTrUI/cBFsEiI=
Subject key identifier: CD:8D:6A:B6:76:07:C3:8B:D0:2D:AF:3E:D5:43:8C:14:8D:D1:A0:B8
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4866FC300F5E39D0DD1908DCBBE74127D7D54330
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS12083.roa
Signing time: Fri 10 Jul 2026 20:25:34 +0000
ROA not before: Fri 10 Jul 2026 20:20:34 +0000
ROA not after: Fri 09 Jul 2027 20:25:34 +0000
asID: 12083
IP address blocks: 46.236.244.0/22 maxlen: 24
46.236.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:66:fc:30:0f:5e:39:d0:dd:19:08:dc:bb:e7:41:27:d7:d5:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 10 20:20:34 2026 GMT
Not After : Jul 9 20:25:34 2027 GMT
Subject: CN=CD8D6AB67607C38BD02DAF3ED5438C148DD1A0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:19:9d:e8:3c:cd:c2:0c:a0:cc:48:cd:36:
df:f7:2e:79:88:7f:a1:9d:71:05:26:fd:32:04:5d:
db:da:61:ae:a5:00:34:72:c4:75:35:c3:48:1e:db:
46:8d:c1:a3:48:54:9d:78:6c:3c:cf:26:a3:ae:f2:
8d:f7:e8:4c:31:17:74:63:4b:5d:db:37:33:36:b5:
bc:f3:66:5f:ae:35:0c:4a:b2:99:3c:d8:f9:8d:22:
cc:93:52:99:25:7d:7d:44:fe:5a:d6:24:cd:2c:f0:
d2:69:19:02:72:29:f2:e8:cb:cb:d8:83:90:54:85:
45:8f:5a:32:12:e3:87:58:fa:cc:ec:d3:d2:1e:71:
bf:ba:e1:d7:09:ed:62:17:81:1f:0a:b8:61:4d:c6:
c1:e4:36:d4:72:1b:00:ba:ee:41:60:4c:0f:60:3b:
59:0b:dc:24:8e:d5:08:ca:85:dd:37:0e:ac:fa:04:
9f:34:55:29:67:1a:c3:f2:cd:80:99:83:09:26:00:
b4:a4:10:b3:78:fd:7c:5f:6d:92:47:5a:0f:56:8b:
12:f1:20:4a:11:f8:21:d9:e7:12:ef:e0:83:42:b1:
7a:f9:38:40:1f:68:96:84:ef:11:ca:bd:69:07:02:
22:01:57:d2:35:dc:13:7e:e7:c1:03:13:9e:c9:a5:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:6A:B6:76:07:C3:8B:D0:2D:AF:3E:D5:43:8C:14:8D:D1:A0:B8
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS12083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.244.0-46.236.251.255
Signature Algorithm: sha256WithRSAEncryption
31:1b:69:58:13:50:3e:ac:62:26:65:4f:ce:ad:1f:83:f8:d1:
c7:f8:33:95:92:51:cc:ed:a5:43:8b:af:2c:52:5d:88:fc:93:
2f:6c:02:57:d8:00:16:ab:a5:d8:96:90:12:be:9a:ff:e4:9f:
73:8c:78:7d:59:59:fa:6a:d8:c0:e0:f7:68:7f:f4:d6:23:36:
a0:53:a5:46:22:a7:46:b0:c9:d0:fa:43:06:b5:d3:1d:ab:c2:
ff:aa:7a:43:a3:d0:9b:d1:22:18:45:d4:bb:dc:a1:07:35:bf:
52:f3:27:60:5c:73:df:d4:45:b1:63:2d:23:97:ae:b2:6a:ff:
59:ec:ea:47:0b:8c:92:fc:5a:af:92:dd:3f:52:b5:64:dc:66:
8c:04:84:82:00:40:f4:41:4f:30:64:d4:9e:94:08:dc:4b:06:
7a:d6:b9:bb:08:0c:eb:6f:3f:3c:d7:fd:be:f8:5b:6b:7d:05:
df:a6:32:e7:10:3f:c2:46:0f:84:42:a5:29:fc:a6:f9:5b:b4:
b6:6f:7e:49:2f:7f:66:e8:35:c5:53:71:28:2d:45:55:07:ec:
e1:ed:91:fc:e9:e3:89:46:52:fd:dd:ce:0a:35:2c:b1:dd:14:
87:74:f6:6a:35:32:91:f9:5d:c5:62:5c:52:9d:d1:0f:21:56:
bc:5f:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:12 2026 by rpki-client