Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          +AdJ40vw6cBdDsztzUzT9u6fWxH+AM4YLkOAHl5svKE=
Subject key identifier:   02:85:1E:FE:18:71:1C:F4:77:3F:52:07:B3:95:EC:AD:9D:39:C9:FF
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       6F68D9492076D2C5603D8304F5AFB739FE7B053E
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
Signing time:             Tue 06 Oct 2026 05:27:14 +0000
ROA not before:           Tue 06 Oct 2026 05:22:14 +0000
ROA not after:            Tue 05 Oct 2027 05:27:14 +0000
asID:                     12083
IP address blocks:        79.176.176.0/22 maxlen: 24
                          79.180.12.0/22 maxlen: 24
                          79.180.20.0/22 maxlen: 24
                          79.180.28.0/22 maxlen: 24
                          79.180.36.0/22 maxlen: 24
                          79.182.140.0/22 maxlen: 24
                          79.182.232.0/22 maxlen: 24
                          109.64.12.0/22 maxlen: 24
                          109.64.104.0/22 maxlen: 24
                          109.65.40.0/22 maxlen: 24
                          109.65.108.0/22 maxlen: 24
                          109.65.168.0/22 maxlen: 24
                          109.65.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:68:d9:49:20:76:d2:c5:60:3d:83:04:f5:af:b7:39:fe:7b:05:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  6 05:22:14 2026 GMT
            Not After : Oct  5 05:27:14 2027 GMT
        Subject: CN=02851EFE18711CF4773F5207B395ECAD9D39C9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:46:35:23:4d:c7:e7:20:d4:16:98:6e:e3:
                    aa:bb:52:ed:6c:a1:7d:b8:c7:f9:fe:52:b0:5f:38:
                    ab:b3:28:4b:d6:c7:32:32:a4:9d:19:7a:28:cc:61:
                    8e:00:78:64:82:e1:6c:bb:9c:e7:d4:3a:74:ae:87:
                    88:85:d5:4f:6f:46:21:3f:24:b3:9b:d0:1e:09:c9:
                    4a:8c:c4:46:97:3b:b1:92:3c:56:cc:cc:0d:66:2a:
                    bf:15:f8:e5:8c:f4:2c:cc:88:20:0d:50:73:fa:b5:
                    06:91:18:75:a9:b6:d0:26:fa:56:b1:ef:ff:84:76:
                    26:b0:0f:7f:70:ff:bc:9f:7a:86:b9:d7:bf:c1:0c:
                    7d:6c:76:93:87:cd:33:42:e0:36:d4:e2:ef:28:83:
                    3c:62:c2:60:e3:02:66:de:94:72:d5:54:31:05:9c:
                    e0:a3:d8:99:9f:ec:f0:0b:76:bc:6a:16:f0:e5:83:
                    2b:a9:e2:1d:b5:ab:d4:d2:9b:3a:5e:99:1d:6a:6d:
                    57:e6:c0:88:3e:58:fc:84:83:89:21:0a:8d:2b:d2:
                    c4:cb:c4:aa:ca:0a:35:bc:4b:7f:d8:81:5a:1e:2e:
                    16:07:46:0a:0e:ba:1d:f1:c0:03:bf:38:d7:62:d9:
                    67:4a:25:2d:bc:3a:24:39:bb:11:3a:35:4b:aa:28:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:1E:FE:18:71:1C:F4:77:3F:52:07:B3:95:EC:AD:9D:39:C9:FF
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.176.0/22
                  79.180.12.0/22
                  79.180.20.0/22
                  79.180.28.0/22
                  79.180.36.0/22
                  79.182.140.0/22
                  79.182.232.0/22
                  109.64.12.0/22
                  109.64.104.0/22
                  109.65.40.0/22
                  109.65.108.0/22
                  109.65.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         db:a0:7e:86:cd:ae:26:27:5b:bc:87:2a:e8:d8:9f:c9:62:3e:
         4c:11:bc:e4:2b:76:70:c2:fe:44:10:d5:57:82:6c:8d:8c:94:
         b4:d7:42:17:ab:05:7f:8c:80:ec:1d:4a:9e:9a:d7:c5:a7:81:
         a2:53:69:86:97:db:34:5d:13:bd:ad:c1:35:74:36:5c:a6:dc:
         ef:77:48:99:00:7d:2c:4e:25:5d:e8:28:92:21:04:5d:c8:04:
         1a:fd:09:88:c6:49:1a:7b:f1:ac:ae:ae:b7:bd:e7:42:70:b0:
         d5:de:e8:98:61:e7:6d:b6:82:4e:aa:ca:17:a1:4f:6b:af:2d:
         6c:7b:90:d0:92:cb:8c:29:af:02:97:66:c3:c0:99:8b:a7:8c:
         ae:03:72:6f:85:b9:a0:89:79:27:ad:bb:74:78:d3:a8:f2:4f:
         cf:ee:e0:7c:9d:a1:c5:89:b8:e0:61:40:45:5b:b4:22:9b:a0:
         32:3d:5e:3a:35:03:58:c1:69:9d:07:98:82:7e:00:78:11:13:
         bc:41:f0:49:89:89:1a:ba:d7:49:2f:2c:2b:71:20:c6:4b:f9:
         ad:c5:ce:15:c9:59:66:22:a1:51:55:8d:0e:59:91:82:a7:f2:
         f4:88:f5:b0:5d:4a:4a:60:b1:35:c0:f5:ba:a6:bc:8b:5c:7c:
         d2:0e:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:26 2026 by rpki-client