Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          JqlkPDZT9QaAavBvX3TWZpA6aCse+tWaAwwBluMuTdw=
Subject key identifier:   BC:FD:A4:61:F7:59:23:17:C2:63:C6:E0:57:8D:51:A4:E2:AC:31:48
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       0DA176045E3EC221F491EE5CEA0F8B86AE5F274D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
Signing time:             Fri 10 Jul 2026 20:23:31 +0000
ROA not before:           Fri 10 Jul 2026 20:18:31 +0000
ROA not after:            Fri 09 Jul 2027 20:23:31 +0000
asID:                     12083
IP address blocks:        51.146.176.0/22 maxlen: 24
                          51.146.192.0/22 maxlen: 24
                          51.146.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 09:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a1:76:04:5e:3e:c2:21:f4:91:ee:5c:ea:0f:8b:86:ae:5f:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jul 10 20:18:31 2026 GMT
            Not After : Jul  9 20:23:31 2027 GMT
        Subject: CN=BCFDA461F7592317C263C6E0578D51A4E2AC3148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:74:20:a1:06:3e:05:26:dc:ea:61:97:33:
                    7a:83:78:7a:01:25:1a:2c:cb:ed:e3:59:77:40:8e:
                    a0:98:e4:9d:ad:af:97:94:c3:90:40:b6:8c:08:fe:
                    b7:b8:fd:5c:5d:8f:a7:78:68:a5:36:59:4d:aa:a1:
                    c0:c3:c2:71:3e:73:f4:75:e4:82:0a:6c:da:2d:e2:
                    87:72:e0:c2:38:04:0c:85:6f:2a:d3:7c:7e:e8:d4:
                    4f:9f:af:74:da:37:36:0b:2b:28:76:cb:72:bf:52:
                    fe:91:a0:1e:3f:26:4e:b0:55:a3:bb:0e:72:e6:ea:
                    96:b8:39:35:17:ad:b0:dd:4b:ff:79:23:f6:a5:d3:
                    df:c8:c9:12:5b:01:e3:f5:59:fb:6f:54:a0:59:78:
                    2b:d9:93:f6:4e:4d:51:86:f1:0c:62:97:c3:8f:c7:
                    45:52:28:da:f4:f1:dc:93:00:2b:21:59:d4:90:45:
                    21:11:ba:03:23:0d:ea:6f:31:0b:90:3e:9c:21:36:
                    1c:fd:4a:a7:27:93:20:05:8c:a6:ac:35:5b:f8:a6:
                    05:65:de:7a:40:55:c6:db:c3:c9:75:b3:41:1e:51:
                    85:75:0d:be:42:00:68:f0:6a:5d:50:5d:2a:f6:47:
                    65:a8:2f:ef:60:5d:30:e8:06:39:07:27:56:1e:90:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:A4:61:F7:59:23:17:C2:63:C6:E0:57:8D:51:A4:E2:AC:31:48
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.176.0/22
                  51.146.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:7b:54:eb:75:c4:51:d2:3c:14:42:9c:ce:9a:f8:f2:8f:
         db:dc:9c:23:7c:a6:f5:5e:45:82:5f:9f:ae:4b:01:48:b6:e7:
         88:a0:81:22:ab:c2:40:1d:91:f4:c5:e7:15:f1:73:ef:17:97:
         77:c4:5a:34:6a:1f:20:72:9e:b5:0c:d5:33:f4:80:95:74:f9:
         a1:43:a2:68:c1:85:05:54:8a:05:11:ec:fe:9d:b8:15:e9:05:
         f3:2b:c2:13:ef:03:e4:a3:bd:07:05:79:7d:a7:e9:ca:92:76:
         40:01:2c:91:59:5a:fd:5c:60:d8:5a:40:07:4f:52:af:14:5b:
         60:4e:90:ab:36:64:1b:23:6d:6e:f6:68:c9:cf:b8:31:f4:6d:
         0c:70:a8:5f:6c:fb:09:5f:63:80:4b:f5:79:75:12:dc:f8:95:
         11:25:33:3d:5a:91:4a:a4:d3:96:e4:3f:17:33:f2:36:50:00:
         b6:a1:ad:b0:f6:40:a1:4d:44:44:a2:bd:97:3e:ed:da:61:2b:
         8b:af:2a:c2:38:ac:9c:55:45:8a:7f:29:69:59:4d:c8:8b:75:
         66:0a:59:58:eb:dc:f3:4d:d6:37:8b:12:be:fd:43:52:0d:49:
         97:1a:26:d2:da:58:25:ce:b3:8f:5f:71:64:11:64:22:28:11:
         32:ae:98:41
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUDaF2BF4+wiH0ke5c6g+Lhq5fJ00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MTAyMDE4MzFaFw0yNzA3MDkyMDIzMzFaMDMxMTAvBgNV
BAMTKEJDRkRBNDYxRjc1OTIzMTdDMjYzQzZFMDU3OEQ1MUE0RTJBQzMxNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhnQgoQY+BSbc6mGXM3qDeHoB
JRosy+3jWXdAjqCY5J2tr5eUw5BAtowI/re4/Vxdj6d4aKU2WU2qocDDwnE+c/R1
5IIKbNot4ody4MI4BAyFbyrTfH7o1E+fr3TaNzYLKyh2y3K/Uv6RoB4/Jk6wVaO7
DnLm6pa4OTUXrbDdS/95I/al09/IyRJbAeP1WftvVKBZeCvZk/ZOTVGG8Qxil8OP
x0VSKNr08dyTACshWdSQRSERugMjDepvMQuQPpwhNhz9SqcnkyAFjKasNVv4pgVl
3npAVcbbw8l1s0EeUYV1Db5CAGjwal1QXSr2R2WoL+9gXTDoBjkHJ1YekEp7AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUvP2kYfdZIxfCY8bgV41RpOKsMUgwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTIwODMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAIzkrAD
BAMzksAwDQYJKoZIhvcNAQELBQADggEBADo2e1TrdcRR0jwUQpzOmvjyj9vcnCN8
pvVeRYJfn65LAUi254iggSKrwkAdkfTF5xXxc+8Xl3fEWjRqHyBynrUM1TP0gJV0
+aFDomjBhQVUigUR7P6duBXpBfMrwhPvA+SjvQcFeX2n6cqSdkABLJFZWv1cYNha
QAdPUq8UW2BOkKs2ZBsjbW72aMnPuDH0bQxwqF9s+wlfY4BL9Xl1Etz4lRElMz1a
kUqk05bkPxcz8jZQALahrbD2QKFNRESivZc+7dphK4uvKsI4rJxVRYp/KWlZTciL
dWYKWVjr3PNN1jeLEr79Q1INSZcaJtLaWCXOs49fcWQRZCIoETKumEE=
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:46 2026 by rpki-client