Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12027.roa
File: AS12027.roa (raw, json)
Hash identifier: JeGeCfUPVm59Y5jlmAt2fYS1TW2mHqKvZX+/Vo4zjwQ=
Subject key identifier: CD:B2:3B:33:08:DA:CC:DD:91:F9:77:EA:29:EA:80:0C:13:98:E9:41
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0D096789510D7628F4DE1C93C4DEC63A15C0A123
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12027.roa
Signing time: Fri 12 Sep 2025 07:43:44 +0000
ROA not before: Fri 12 Sep 2025 07:38:44 +0000
ROA not after: Fri 11 Sep 2026 07:43:44 +0000
asID: 12027
IP address blocks: 95.134.117.0/24 maxlen: 24
178.92.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:67:89:51:0d:76:28:f4:de:1c:93:c4:de:c6:3a:15:c0:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 12 07:38:44 2025 GMT
Not After : Sep 11 07:43:44 2026 GMT
Subject: CN=CDB23B3308DACCDD91F977EA29EA800C1398E941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:d1:e2:91:7b:21:ee:1a:61:2c:97:2b:43:
3b:5d:51:cd:9d:02:96:df:2f:21:34:37:b7:28:44:
cf:ff:58:14:91:4a:a9:02:fb:2c:f4:cc:82:58:ae:
65:9a:fa:19:25:cf:c0:e4:25:58:2b:d7:a4:87:02:
d9:b8:52:42:1a:32:80:68:1b:17:20:f4:98:f8:b0:
66:60:96:fc:dc:14:49:91:61:b8:ef:11:80:ac:d8:
98:08:ea:cd:ad:91:2b:75:d3:6c:16:67:64:8d:20:
d6:f0:2b:d2:10:86:3d:5c:30:35:bc:a6:c8:64:19:
c4:03:6b:72:e5:5a:29:6f:e2:d9:8a:c4:fe:ca:c0:
ca:10:07:7a:6c:04:e4:3f:f9:33:e8:45:23:01:ed:
a7:ab:25:63:01:28:c0:1f:cc:95:d2:49:cb:e8:c3:
ec:18:cb:77:7c:ce:32:9c:2e:df:de:d6:cb:47:27:
41:d6:22:ab:ca:f3:88:ff:5a:4f:c4:1f:cd:87:fd:
c8:d3:32:d4:c7:8e:bf:3f:83:0f:50:5f:d0:74:cd:
77:76:90:cd:9d:07:65:79:de:83:33:b0:18:3d:b8:
4e:a5:a9:88:b4:6f:82:3e:8b:0b:d7:19:08:ae:7e:
34:8b:88:fc:67:af:d6:16:b0:ed:f6:33:8d:27:60:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:3B:33:08:DA:CC:DD:91:F9:77:EA:29:EA:80:0C:13:98:E9:41
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.117.0/24
178.92.72.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fb:08:68:15:58:1c:5c:59:25:61:e7:fa:b6:a0:5d:ec:2f:
85:6a:bc:60:a4:45:5b:37:9a:a9:90:10:46:7e:f8:72:2d:e5:
13:cf:aa:89:14:b7:24:92:82:80:72:38:6e:98:6c:f3:b1:01:
56:af:a9:71:58:45:a4:63:5e:64:15:ea:97:01:d3:b3:b4:d8:
ab:53:d8:0a:43:ab:8e:59:66:0d:61:60:0d:df:19:1b:7d:91:
68:72:95:de:e6:b4:52:0f:58:82:39:17:b3:e3:5e:59:3f:4b:
de:d0:dc:69:0c:eb:2b:e7:56:2b:39:fa:41:43:e5:a4:8b:09:
b8:a1:43:15:3f:41:f3:03:98:fa:f5:e8:4f:49:ee:06:5d:c4:
71:4d:2a:9d:05:22:cf:62:d8:2c:c8:f2:83:53:0e:4a:12:a9:
e0:91:4a:9e:7e:e0:d7:80:55:3a:f7:a8:dd:a0:57:2f:93:80:
7e:a9:cb:83:fa:2b:dd:dc:28:09:fc:da:71:27:42:98:90:32:
3b:b0:65:d5:07:fa:90:13:3e:d5:96:c5:27:f8:aa:b0:99:51:
e4:ce:20:35:82:57:40:cb:79:aa:c0:34:79:20:26:0a:8e:83:
e9:5e:d3:47:af:00:60:3e:85:29:98:da:c3:d5:16:89:78:b9:
2b:2b:84:0d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUDQlniVENdij03hyTxN7GOhXAoSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MTIwNzM4NDRaFw0yNjA5MTEwNzQzNDRaMDMxMTAvBgNV
BAMTKENEQjIzQjMzMDhEQUNDREQ5MUY5NzdFQTI5RUE4MDBDMTM5OEU5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6NHikXsh7hphLJcrQztdUc2d
ApbfLyE0N7coRM//WBSRSqkC+yz0zIJYrmWa+hklz8DkJVgr16SHAtm4UkIaMoBo
Gxcg9Jj4sGZglvzcFEmRYbjvEYCs2JgI6s2tkSt102wWZ2SNINbwK9IQhj1cMDW8
pshkGcQDa3LlWilv4tmKxP7KwMoQB3psBOQ/+TPoRSMB7aerJWMBKMAfzJXSScvo
w+wYy3d8zjKcLt/e1stHJ0HWIqvK84j/Wk/EH82H/cjTMtTHjr8/gw9QX9B0zXd2
kM2dB2V53oMzsBg9uE6lqYi0b4I+iwvXGQiufjSLiPxnr9YWsO32M40nYCiBAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUzbI7MwjazN2R+XfqKeqADBOY6UEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTIwMjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABfhnUD
BACyXEgwDQYJKoZIhvcNAQELBQADggEBAEf7CGgVWBxcWSVh5/q2oF3sL4VqvGCk
RVs3mqmQEEZ++HIt5RPPqokUtySSgoByOG6YbPOxAVavqXFYRaRjXmQV6pcB07O0
2KtT2ApDq45ZZg1hYA3fGRt9kWhyld7mtFIPWII5F7PjXlk/S97Q3GkM6yvnVis5
+kFD5aSLCbihQxU/QfMDmPr16E9J7gZdxHFNKp0FIs9i2CzI8oNTDkoSqeCRSp5+
4NeAVTr3qN2gVy+TgH6py4P6K93cKAn82nEnQpiQMjuwZdUH+pATPtWWxSf4qrCZ
UeTOIDWCV0DLearANHkgJgqOg+le00evAGA+hSmY2sPVFol4uSsrhA0=
-----END CERTIFICATE-----
Generated at Mon Sep 15 20:32:25 2025 by rpki-client