Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: j1kyv2cGF4MxOTLOH7SzUsG6Z79gUq9bEfx2dOlera4=
Subject key identifier: 94:85:DA:F5:DC:B2:43:78:FB:30:17:17:CC:78:C7:D0:D4:E0:FB:B5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 780A83D71EBCEC98ED272C61EF64DA8037E49952
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS812.roa
Signing time: Wed 29 Jul 2026 04:03:36 +0000
ROA not before: Wed 29 Jul 2026 03:58:36 +0000
ROA not after: Wed 28 Jul 2027 04:03:36 +0000
asID: 812
IP address blocks: 51.194.8.0/21 maxlen: 24
51.194.181.0/24 maxlen: 24
188.221.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0a:83:d7:1e:bc:ec:98:ed:27:2c:61:ef:64:da:80:37:e4:99:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 29 03:58:36 2026 GMT
Not After : Jul 28 04:03:36 2027 GMT
Subject: CN=9485DAF5DCB24378FB301717CC78C7D0D4E0FBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:8f:8c:af:c3:50:c3:b9:1f:e2:b3:d7:76:
9f:95:50:40:60:8a:2c:c9:72:a5:6d:b0:fb:5e:e4:
52:9f:37:b8:80:07:f8:37:fc:e1:2e:58:47:b5:57:
ed:dc:e7:f1:03:a4:f2:cd:f3:9a:1e:a9:60:be:77:
ef:e7:b6:db:72:60:de:ab:49:8f:9a:be:43:d3:71:
82:58:df:b2:bf:05:c6:69:af:33:2b:ab:98:61:96:
42:64:16:0f:2c:b5:6a:17:2d:22:2d:8d:32:24:62:
f3:26:b9:c3:85:9c:02:2b:6e:68:10:b8:e0:1c:3f:
c1:28:3c:87:8c:a0:2c:54:98:d2:e5:7d:5d:ad:15:
5e:5a:82:04:ea:c5:63:72:4e:99:18:6c:59:b6:9a:
c5:9f:bc:fc:41:18:fb:62:fe:4e:b2:8a:34:31:45:
9a:f4:c9:d0:94:b3:ff:2d:4b:9d:4f:33:2a:b7:02:
b2:6b:0b:c2:e2:88:16:98:5a:84:2e:40:50:60:89:
59:e4:74:fd:88:84:10:b6:fd:3a:b3:e0:73:60:5e:
60:a0:b8:87:c5:c3:f2:1e:10:c4:08:00:81:b6:23:
ca:27:ee:5e:df:ac:9e:b2:31:07:32:03:00:41:3a:
6f:3f:d2:c9:d7:3f:79:3b:fa:db:39:9b:db:cb:ef:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:DA:F5:DC:B2:43:78:FB:30:17:17:CC:78:C7:D0:D4:E0:FB:B5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.8.0/21
51.194.181.0/24
188.221.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:21:c5:22:c6:4a:b8:52:17:e0:6f:7c:e0:3d:64:67:2d:02:
27:67:91:de:00:a9:5a:d4:59:99:b4:e3:c0:b3:35:a8:45:77:
49:be:0c:4b:5f:07:72:11:7d:a5:e1:54:9a:f0:d8:e5:d6:80:
9c:a4:ae:6d:98:c2:97:fd:1f:1e:c0:fc:3a:94:0a:4c:b3:75:
87:5a:a0:68:09:f5:cf:03:76:5b:62:8e:e4:37:73:89:4b:d6:
a1:80:90:e3:7b:26:2c:4e:ad:52:12:e1:df:58:bf:fe:a2:4a:
b0:36:b5:2b:f9:56:41:ac:f8:77:93:52:83:d8:bf:f2:c6:51:
c9:f5:18:9c:59:ce:76:59:65:55:3d:e2:4e:8d:8e:75:e2:0e:
99:9d:92:3d:e1:25:d7:cf:89:5a:92:3e:df:d5:f7:da:59:a8:
92:50:f8:08:a1:24:4e:96:46:a9:03:a2:ba:a2:f2:ff:68:df:
24:1a:70:07:76:06:c6:15:25:49:00:c0:21:e1:c2:57:aa:e1:
b4:e0:8a:4d:ef:38:80:29:95:89:c8:52:83:73:ed:5f:99:1e:
08:62:ec:a9:b9:2e:96:ff:f9:16:66:81:8e:bf:d9:19:88:07:
3b:6a:4e:8b:6d:55:5e:f0:0c:e0:dd:5b:a8:44:06:c5:cc:bb:
79:dc:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:09 2026 by rpki-client