Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12844.roa
File:                     AS12844.roa (raw, json)
Hash identifier:          RPJASwrutLflVzAVNmdQhrhqgMlnLnfa8hfZPhimsR8=
Subject key identifier:   71:77:35:6A:72:B2:26:27:91:A9:4C:17:AA:D6:BE:97:40:1D:85:53
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       240F417C4BBE3A4F77A73B72DAA53286360A220A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12844.roa
Signing time:             Fri 19 Jun 2026 05:57:19 +0000
ROA not before:           Fri 19 Jun 2026 05:52:19 +0000
ROA not after:            Fri 18 Jun 2027 05:57:19 +0000
asID:                     12844
IP address blocks:        78.105.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 09:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0f:41:7c:4b:be:3a:4f:77:a7:3b:72:da:a5:32:86:36:0a:22:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jun 19 05:52:19 2026 GMT
            Not After : Jun 18 05:57:19 2027 GMT
        Subject: CN=7177356A72B2262791A94C17AAD6BE97401D8553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:02:fb:53:15:e5:74:6c:24:7b:c0:4e:5f:
                    b8:84:96:2f:50:54:d9:a1:90:1f:05:40:a0:ea:05:
                    79:e3:0f:61:92:29:d4:ce:ca:99:c4:ed:2e:8d:92:
                    87:36:57:ce:dd:e4:83:ed:57:b8:3f:39:01:6b:95:
                    e2:3b:df:70:11:2a:2d:0a:45:eb:33:69:23:f3:4b:
                    16:08:4c:a6:3a:61:0e:29:84:8c:13:50:c4:99:ec:
                    bb:40:fa:2e:4e:1d:c1:d4:f1:7d:89:6b:29:2f:05:
                    39:6b:07:f9:c4:26:27:d1:68:bb:45:c7:a5:8e:12:
                    2d:fe:0d:ef:79:41:f7:f1:56:32:e6:a1:77:0e:5e:
                    78:6f:6e:50:bf:1f:ba:e8:70:e8:06:05:16:c3:50:
                    5b:6b:94:35:2b:66:a4:88:87:73:aa:16:65:e2:f6:
                    5f:71:53:78:fc:37:f2:7c:21:b3:25:15:b1:3f:57:
                    e5:0e:ee:98:1e:1d:37:e9:ba:d3:d1:10:c0:b3:82:
                    fe:a7:97:13:89:18:f8:9b:b8:d9:ed:18:f2:df:c3:
                    ee:c5:10:e1:78:01:5e:c4:e5:1b:ad:a3:13:a6:61:
                    94:04:3c:37:ce:be:b6:0e:9e:53:c4:33:52:dd:43:
                    58:43:34:70:ec:1a:fa:6a:ab:a1:41:c7:b5:a2:73:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:35:6A:72:B2:26:27:91:A9:4C:17:AA:D6:BE:97:40:1D:85:53
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.105.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:39:ab:51:3d:cf:a1:1f:66:84:d3:90:07:bf:0d:cd:6a:e8:
         1c:bd:f5:92:74:5f:82:9d:fc:e3:35:58:df:9f:56:fc:63:ef:
         e6:a1:cf:5c:4d:03:36:b0:c5:08:be:f6:68:f3:ac:2c:c4:4f:
         75:85:57:13:c3:c7:f7:f3:a2:31:47:36:a2:35:78:78:6e:25:
         47:f3:41:c3:7a:92:96:34:bb:18:ce:72:e2:95:bd:57:d5:cb:
         ac:71:b7:d8:9a:ac:72:8e:9d:56:da:9f:d9:28:48:6c:5a:66:
         45:fc:41:99:90:7b:82:a5:ad:5f:a5:45:2a:d7:9f:26:e0:fc:
         c1:a6:98:bf:30:7c:c3:56:02:96:99:d5:4a:73:79:a5:c1:06:
         3a:8d:b2:b9:a8:af:2d:32:40:48:7d:29:83:e9:5b:b3:1f:1b:
         ba:ff:f4:31:c6:f3:e5:09:ed:ed:bf:53:a1:94:9b:bf:97:4a:
         28:64:c0:f6:df:3a:1c:91:1c:6a:13:3b:94:18:bf:cf:c6:e3:
         8e:7e:59:71:7a:0d:3f:79:19:0e:73:69:f3:a3:6e:4e:01:3a:
         d8:05:6d:72:50:01:a4:74:d6:d2:85:4b:32:68:73:2b:d9:83:
         b1:8f:06:54:6c:9b:d2:17:b0:a4:e2:74:6b:b6:91:c6:c9:cf:
         da:e8:0d:7c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJA9BfEu+Ok93pzty2qUyhjYKIgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTkwNTUyMTlaFw0yNzA2MTgwNTU3MTlaMDMxMTAvBgNV
BAMTKDcxNzczNTZBNzJCMjI2Mjc5MUE5NEMxN0FBRDZCRTk3NDAxRDg1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6QL7UxXldGwke8BOX7iEli9Q
VNmhkB8FQKDqBXnjD2GSKdTOypnE7S6Nkoc2V87d5IPtV7g/OQFrleI733ARKi0K
ReszaSPzSxYITKY6YQ4phIwTUMSZ7LtA+i5OHcHU8X2JaykvBTlrB/nEJifRaLtF
x6WOEi3+De95QffxVjLmoXcOXnhvblC/H7rocOgGBRbDUFtrlDUrZqSIh3OqFmXi
9l9xU3j8N/J8IbMlFbE/V+UO7pgeHTfputPREMCzgv6nlxOJGPibuNntGPLfw+7F
EOF4AV7E5RutoxOmYZQEPDfOvrYOnlPEM1LdQ1hDNHDsGvpqq6FBx7Wic66BAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUcXc1anKyJieRqUwXqta+l0AdhVMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTI4NDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJOaaQw
DQYJKoZIhvcNAQELBQADggEBAEE5q1E9z6EfZoTTkAe/Dc1q6By99ZJ0X4Kd/OM1
WN+fVvxj7+ahz1xNAzawxQi+9mjzrCzET3WFVxPDx/fzojFHNqI1eHhuJUfzQcN6
kpY0uxjOcuKVvVfVy6xxt9iarHKOnVban9koSGxaZkX8QZmQe4KlrV+lRSrXnybg
/MGmmL8wfMNWApaZ1UpzeaXBBjqNsrmory0yQEh9KYPpW7MfG7r/9DHG8+UJ7e2/
U6GUm7+XSihkwPbfOhyRHGoTO5QYv8/G445+WXF6DT95GQ5zafOjbk4BOtgFbXJQ
AaR01tKFSzJocyvZg7GPBlRsm9IXsKTidGu2kcbJz9roDXw=
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:33 2026 by rpki-client