Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS12027.roa
File: AS12027.roa (raw, json)
Hash identifier: eYCXqYLs5C12FLDaI80MtQJKIgKlSG7lCsZ8okVPRnw=
Subject key identifier: D0:C5:9C:13:91:05:AC:2C:70:3D:81:F8:48:04:CD:4E:4C:82:69:5D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6DF75D174AE90B05F043DB56EA282FA72896FB64
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS12027.roa
Signing time: Thu 06 Nov 2025 06:20:07 +0000
ROA not before: Thu 06 Nov 2025 06:15:07 +0000
ROA not after: Thu 05 Nov 2026 06:20:07 +0000
asID: 12027
IP address blocks: 193.142.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f7:5d:17:4a:e9:0b:05:f0:43:db:56:ea:28:2f:a7:28:96:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 6 06:15:07 2025 GMT
Not After : Nov 5 06:20:07 2026 GMT
Subject: CN=D0C59C139105AC2C703D81F84804CD4E4C82695D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:c6:4c:43:dd:dc:11:da:75:c1:89:eb:3d:
94:e2:32:a8:5a:df:52:16:62:a4:54:5c:24:ad:8d:
7e:96:ac:a1:48:94:81:31:9e:a9:4e:af:f8:10:2f:
f6:93:be:a4:cd:18:57:f1:2e:24:e6:f2:61:5d:0c:
20:53:85:8c:82:02:f6:e4:c5:69:fb:1b:9c:31:e8:
b4:20:07:fe:41:bf:e0:e8:fd:22:0c:32:fb:7a:c8:
36:97:b3:ba:79:ec:2d:fa:68:cc:06:11:0e:ef:42:
a8:e4:62:51:8f:53:ac:ef:d9:22:a8:e0:ac:7a:74:
59:f1:10:ee:8a:e6:22:fc:ad:ee:0b:9a:cc:10:06:
ca:e4:df:4b:41:25:b6:16:b6:f9:64:bf:7d:38:fc:
5f:71:b0:fa:87:99:d6:88:e0:08:9c:44:8d:85:cf:
21:20:52:9c:3d:95:54:2c:ab:1e:35:a0:9c:80:fd:
69:e4:15:ed:3d:a3:61:cd:6e:77:c4:e6:88:04:0c:
13:20:bf:21:65:49:b7:ec:7a:61:e9:40:81:6a:6f:
63:3a:16:46:04:ec:e9:d3:92:52:08:27:94:68:94:
f3:1d:25:07:0b:14:cb:d5:12:4d:03:3b:27:19:d9:
fe:37:fc:6c:4e:9f:bd:56:19:0d:07:e0:a4:d8:72:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:9C:13:91:05:AC:2C:70:3D:81:F8:48:04:CD:4E:4C:82:69:5D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS12027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f1:ca:04:91:84:5a:fe:8b:c2:3c:93:ae:30:7a:87:22:ac:
3d:c0:93:46:e1:c8:cb:2a:e7:6a:bf:3c:94:50:75:e1:ba:64:
63:55:1b:33:f3:c1:6a:0c:fa:de:47:ba:78:fc:9d:51:b3:37:
41:40:f3:20:4c:c6:f0:bd:bc:94:4d:11:2b:64:22:92:7b:38:
28:2f:49:f3:12:3d:4c:87:93:3a:18:85:68:17:fe:ad:c1:3d:
95:6b:64:b8:f4:42:10:a9:09:ba:05:a1:d2:75:7f:53:ef:06:
81:8b:1c:0c:83:dd:04:2a:28:25:08:2d:14:4b:11:29:30:b8:
a3:1f:6c:d9:e0:43:12:ea:27:a6:61:b4:db:ad:eb:12:a7:05:
8f:40:4b:67:d7:95:96:aa:a7:c3:88:97:e0:fa:dd:81:99:76:
86:94:73:61:d0:7f:d0:aa:2c:02:92:36:2e:eb:d3:00:cf:9d:
c8:67:b6:99:df:7b:cd:32:70:ac:db:9e:73:79:b4:9f:7d:fe:
4f:a6:9b:41:72:1e:3b:17:29:7b:f6:ae:01:f6:6a:fd:30:2d:
3d:57:a7:84:47:83:9b:ae:bb:b6:69:6a:d0:07:bd:98:a4:99:
80:2a:bf:77:64:99:17:c0:66:e9:11:86:85:7a:68:6a:15:ec:
5b:d2:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 20:54:42 2025 by rpki-client