Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: oR8Yf5tERg0aROZorGrlh6YtAn/7zxrT28r/yKUSLSg=
Subject key identifier: 09:4A:D5:81:C0:E7:90:BF:30:EF:01:36:46:21:AB:97:56:C7:F3:D9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 02FC808CD71A41E78DCF7255C39CFB433334D6D8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS812.roa
Signing time: Tue 29 Sep 2026 07:59:02 +0000
ROA not before: Tue 29 Sep 2026 07:54:02 +0000
ROA not after: Tue 28 Sep 2027 07:59:02 +0000
asID: 812
IP address blocks: 51.194.8.0/21 maxlen: 24
51.194.181.0/24 maxlen: 24
51.241.104.0/24 maxlen: 24
78.105.152.0/24 maxlen: 24
78.105.242.0/24 maxlen: 24
188.220.3.0/24 maxlen: 24
188.221.15.0/24 maxlen: 24
188.221.36.0/24 maxlen: 24
188.221.42.0/24 maxlen: 24
188.221.53.0/24 maxlen: 24
188.221.55.0/24 maxlen: 24
188.221.75.0/24 maxlen: 24
188.221.97.0/24 maxlen: 24
188.221.110.0/24 maxlen: 24
188.221.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fc:80:8c:d7:1a:41:e7:8d:cf:72:55:c3:9c:fb:43:33:34:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 29 07:54:02 2026 GMT
Not After : Sep 28 07:59:02 2027 GMT
Subject: CN=094AD581C0E790BF30EF01364621AB9756C7F3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:52:99:82:ba:64:48:c4:d9:c7:91:37:3d:
a1:71:bc:65:19:e3:ab:72:76:73:da:00:33:20:2b:
4e:e2:97:53:9b:fc:c1:08:0a:b5:eb:18:f3:c1:48:
14:c4:c6:67:a1:3a:9e:6c:a5:0d:9f:93:f2:54:b5:
d3:c3:91:54:1f:7f:8f:c6:a5:a1:72:7a:c9:78:75:
3e:85:18:61:13:ab:48:c3:c2:7a:ff:2a:fe:68:fc:
c4:ce:48:56:25:ca:a3:78:b7:4e:3f:83:88:4c:4d:
dd:3e:a9:45:6e:ed:df:92:96:13:e8:13:ae:34:f0:
27:2e:e6:0f:74:f3:7f:c5:93:eb:ce:aa:14:5b:3c:
3c:35:2f:0e:5d:17:1a:b4:b5:2f:ee:82:58:77:83:
e9:05:f4:67:7e:e0:8a:d4:34:7a:cd:39:ca:25:cb:
14:80:f8:5a:0d:76:d5:01:c9:de:13:8b:e5:65:f1:
df:c2:fc:6d:5d:5f:25:78:54:d8:5c:03:8f:5e:ce:
8d:ac:3d:f1:d7:ab:0d:0f:51:31:6a:29:96:2c:bc:
83:ee:fd:89:01:a4:9d:c4:d1:4e:05:f3:5f:f8:23:
c1:14:f8:4f:0a:b3:7d:20:15:d9:c4:8c:a3:41:8c:
02:0d:ef:a8:38:14:c9:9e:12:17:95:1e:ad:bc:11:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:D5:81:C0:E7:90:BF:30:EF:01:36:46:21:AB:97:56:C7:F3:D9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.8.0/21
51.194.181.0/24
51.241.104.0/24
78.105.152.0/24
78.105.242.0/24
188.220.3.0/24
188.221.15.0/24
188.221.36.0/24
188.221.42.0/24
188.221.53.0/24
188.221.55.0/24
188.221.75.0/24
188.221.97.0/24
188.221.110.0/24
188.221.130.0/24
Signature Algorithm: sha256WithRSAEncryption
88:63:70:ba:4b:13:aa:ab:78:fc:08:ff:90:b2:f7:76:3b:0e:
26:ca:31:10:d2:9c:12:4a:fa:58:ff:3a:cf:b4:ae:f2:9a:bb:
8f:ea:01:12:24:9b:a1:7c:b3:3b:2d:d5:ba:d5:a0:14:57:11:
e1:cd:e8:19:b3:9f:c3:db:cc:c5:d3:59:6c:a0:a7:36:91:32:
47:1e:45:2d:9a:84:fb:ee:c1:c4:fe:04:88:54:c7:da:ad:5b:
b8:96:df:27:a9:fb:2b:cc:83:01:0d:04:e3:a8:c5:1a:5b:61:
a7:33:4a:5b:f5:10:20:0d:a8:46:47:6c:bb:b3:58:21:30:52:
e2:89:fb:01:dd:6a:2f:61:bc:cd:12:d8:b0:af:63:d2:e9:bc:
5d:f6:a6:54:8b:4a:26:e5:e5:f5:83:bb:35:5c:18:09:0f:47:
17:4f:af:63:99:b1:19:8d:52:9f:28:17:43:e2:02:ad:4a:84:
f4:37:60:63:b1:46:4e:0a:50:44:f5:c5:ab:4a:dd:d6:69:ff:
66:53:79:ba:4d:9b:82:3c:5d:d9:5c:66:bd:31:8e:e1:dc:20:
e9:ba:19:8f:d7:a3:07:0b:23:b3:0e:54:83:9b:25:fe:9e:7a:
7b:16:b3:30:c1:59:d5:94:f5:09:27:5e:a3:8c:1a:5f:d8:dd:
c9:a3:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:51:59 2026 by rpki-client