Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          8cleFIlHUWxQxiR6ryRrohtXi69/gVDbZjTS8LXO9EI=
Subject key identifier:   F1:D7:24:28:74:9F:80:15:9F:0C:33:23:67:97:38:DC:8D:9A:53:6F
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       2A6C45360CF7F8D3E8B790148EF4F9BA5A51397F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12083.roa
Signing time:             Fri 10 Jul 2026 20:25:36 +0000
ROA not before:           Fri 10 Jul 2026 20:20:36 +0000
ROA not after:            Fri 09 Jul 2027 20:25:36 +0000
asID:                     12083
IP address blocks:        92.112.32.0/24 maxlen: 24
                          92.112.33.0/24 maxlen: 24
                          92.112.34.0/24 maxlen: 24
                          92.112.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6c:45:36:0c:f7:f8:d3:e8:b7:90:14:8e:f4:f9:ba:5a:51:39:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jul 10 20:20:36 2026 GMT
            Not After : Jul  9 20:25:36 2027 GMT
        Subject: CN=F1D72428749F80159F0C3323679738DC8D9A536F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:68:18:fb:61:9c:22:89:42:e2:eb:64:5d:
                    a3:ab:1d:cb:10:5c:51:3b:95:27:0a:fa:5c:bf:f3:
                    08:2c:ff:cd:4c:64:88:e4:18:dc:2f:d7:b3:5f:24:
                    53:f3:55:81:81:3b:77:77:dc:fd:0e:b9:f3:7f:06:
                    02:4d:c2:06:5c:cd:b2:22:1a:5a:0d:d1:05:a1:60:
                    26:62:20:7e:e5:a4:8d:1e:56:07:0f:27:6d:d0:39:
                    c5:8c:95:31:30:f9:2c:b7:31:2c:d6:50:89:bc:a5:
                    c8:c7:d7:56:a3:db:93:85:f4:f8:ef:36:dc:d3:9c:
                    82:11:a2:2a:69:f0:41:37:a1:1b:e1:e8:bb:fa:83:
                    fb:c5:2c:68:63:20:6a:bd:2f:58:79:d4:b5:af:8c:
                    bd:e1:49:33:c3:5e:42:86:ba:40:e1:16:e2:00:44:
                    08:e9:36:d7:6f:e9:42:8d:e3:b2:7b:9a:34:80:ef:
                    9d:e1:ed:e1:9a:87:e2:c2:ad:16:fa:43:71:d4:17:
                    45:8f:cb:57:c5:47:98:e1:a7:f9:d6:6a:83:9e:5e:
                    a9:20:15:c2:47:ad:10:0a:08:22:90:48:71:37:4d:
                    4b:d6:9b:a1:1c:9f:43:6b:ef:b7:d8:be:6e:a8:9b:
                    33:2d:06:8d:a9:b1:9d:f6:a2:40:89:d3:fe:5d:a7:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D7:24:28:74:9F:80:15:9F:0C:33:23:67:97:38:DC:8D:9A:53:6F
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:3f:5b:61:f1:37:d1:78:56:46:20:9e:23:0a:bf:81:01:
         d2:dc:ef:58:a6:26:8e:f6:ae:5a:50:a2:13:a4:cf:2b:6e:a6:
         8f:de:53:d8:39:2e:2e:e7:4f:05:e2:07:5d:71:80:da:82:c6:
         07:b7:c8:ad:75:44:91:36:fd:a6:98:2e:3e:8d:76:aa:6d:60:
         ba:fa:47:81:9d:60:6a:34:5c:95:1e:ab:9c:e8:ab:ac:19:fa:
         88:b0:00:ce:c0:10:df:de:90:e9:0f:27:27:dc:69:ee:45:2a:
         dc:d7:02:b2:37:35:59:1a:8f:00:90:a1:15:38:d8:4c:fe:ff:
         c2:af:d0:8e:4d:36:28:87:7d:15:92:d1:c2:3b:f2:58:71:f2:
         e1:73:06:74:40:70:d6:31:6b:87:e2:92:8a:19:69:9e:ad:af:
         e2:8a:5c:47:d3:a9:ad:15:a1:0b:ee:2d:0d:92:79:0c:fd:3d:
         fc:98:57:ad:a0:2a:73:29:95:34:05:ce:6e:55:f9:fa:21:e7:
         5c:83:27:05:c3:12:3d:fd:92:78:9c:80:78:9e:eb:b2:6c:54:
         bb:83:81:43:97:be:95:d9:fe:41:98:44:c6:8a:5f:ad:f4:5b:
         67:3f:b6:6f:ef:5e:6a:c2:15:cc:70:1e:70:5a:ab:d2:a5:d3:
         02:97:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:58:43 2026 by rpki-client