Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: DTv9zsPmFnWLku1l03r8TfX2Cbkyq0hWEYrJSoxybTE=
Subject key identifier: AD:0B:C2:24:C4:10:59:A1:CA:26:36:CD:AC:D2:8F:60:3E:CA:0B:50
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E977EDD7125DEFA813449BE859B6331BCDB6876
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS812.roa
Signing time: Sun 08 Nov 2026 00:08:06 +0000
ROA not before: Sun 08 Nov 2026 00:03:06 +0000
ROA not after: Sun 07 Nov 2027 00:08:06 +0000
asID: 812
IP address blocks: 143.14.232.0/21 maxlen: 24
155.117.204.0/24 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.156.0/23 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:97:7e:dd:71:25:de:fa:81:34:49:be:85:9b:63:31:bc:db:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 8 00:03:06 2026 GMT
Not After : Nov 7 00:08:06 2027 GMT
Subject: CN=AD0BC224C41059A1CA2636CDACD28F603ECA0B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:e7:2c:3a:09:83:a5:3f:c1:5e:9e:9e:df:
f4:8c:d2:04:6b:bc:d7:14:82:83:35:be:6e:e4:7b:
26:83:f1:71:ce:e4:f8:29:2b:b7:96:3a:eb:26:21:
20:09:8e:ad:ef:28:f3:b7:a3:a4:05:f9:e0:f6:98:
76:af:b5:d7:f4:86:c9:f5:1b:5f:82:cc:ff:b0:f2:
6a:03:8a:89:a1:03:b6:9b:89:f2:c4:de:3c:45:64:
44:ac:dd:4e:cc:b8:bb:37:5e:0e:6e:8d:fa:27:65:
2d:ff:31:75:1a:c1:bb:bb:eb:18:61:81:ba:1e:84:
7b:0f:4b:88:e0:d4:6d:e8:b4:f4:5d:54:42:85:0f:
70:0b:13:80:93:d0:9f:3c:a1:06:87:aa:55:76:67:
85:30:19:99:c5:6d:f9:e3:d5:95:3d:ac:53:7f:94:
69:6a:d9:2e:14:79:3e:c0:7a:3c:59:27:8a:28:e2:
e1:5a:a9:8b:3b:37:9b:58:1a:3a:18:f5:de:3c:b2:
21:ef:14:cc:19:77:df:cb:d9:47:f1:2c:96:7f:4c:
56:47:f2:39:21:95:f3:ec:ab:4b:54:7c:21:a8:f1:
95:2f:aa:73:0d:d5:a9:44:6e:7f:38:b9:a3:0e:a4:
f5:ab:48:f5:95:8a:4c:1a:37:11:60:a2:a0:df:99:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:C2:24:C4:10:59:A1:CA:26:36:CD:AC:D2:8F:60:3E:CA:0B:50
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
155.117.204.0/24
162.141.22.0/23
162.141.28.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0/22
162.141.156.0/23
167.148.16.0/21
167.148.48.0/20
167.148.76.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ef:68:10:27:98:3a:1b:37:8a:86:56:c0:46:ca:6e:4f:92:
00:d7:5d:c1:18:09:a8:a4:40:fc:cc:4c:b1:84:e0:5d:a9:fe:
c9:da:8d:ee:07:35:a0:75:4e:2f:59:d7:a4:a2:f2:8f:5c:6e:
7d:81:03:f5:54:f4:04:97:1e:2e:e5:c0:5d:88:44:bc:27:02:
46:58:a4:35:98:a1:43:1f:38:14:f3:dd:25:ee:f6:2f:5e:a7:
60:10:93:33:05:d3:7a:1a:bc:a7:b3:e8:e4:50:5a:89:38:1b:
ae:88:53:8e:7f:d0:e3:fc:b6:e2:f8:44:b4:ca:15:88:f3:4f:
df:b6:dc:09:97:04:1b:f2:66:f9:44:ac:73:cc:c2:43:78:1d:
aa:12:ba:4a:87:f5:fa:bf:c4:e3:be:5b:50:47:c0:51:46:ee:
5a:fe:3b:95:f6:82:5a:d1:b9:9b:14:e1:57:92:83:cb:3d:33:
1a:e6:05:53:5a:d7:2d:fb:64:6d:e8:16:07:24:e7:d3:4d:5e:
3b:6f:37:6c:36:e3:46:7d:68:0e:0d:5a:c8:19:fc:e9:fe:da:
d5:74:4b:6e:97:2e:77:28:45:69:d5:ff:f3:f4:0c:ea:ff:fe:
71:1b:15:bc:1f:a6:9f:db:19:a5:e9:60:35:31:7b:25:64:83:
6b:df:d7:2b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfpd+3XEl3vqBNEm+hZtjMbzbaHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMDgwMDAzMDZaFw0yNzExMDcwMDA4MDZaMDMxMTAvBgNV
BAMTKEFEMEJDMjI0QzQxMDU5QTFDQTI2MzZDREFDRDI4RjYwM0VDQTBCNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1OcsOgmDpT/BXp6e3/SM0gRr
vNcUgoM1vm7keyaD8XHO5PgpK7eWOusmISAJjq3vKPO3o6QF+eD2mHavtdf0hsn1
G1+CzP+w8moDiomhA7abifLE3jxFZESs3U7MuLs3Xg5ujfonZS3/MXUawbu76xhh
gboehHsPS4jg1G3otPRdVEKFD3ALE4CT0J88oQaHqlV2Z4UwGZnFbfnj1ZU9rFN/
lGlq2S4UeT7AejxZJ4oo4uFaqYs7N5tYGjoY9d48siHvFMwZd9/L2UfxLJZ/TFZH
8jkhlfPsq0tUfCGo8ZUvqnMN1alEbn84uaMOpPWrSPWVikwaNxFgoqDfmVY5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUrQvCJMQQWaHKJjbNrNKPYD7KC1AwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTODEyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQDjw7oAwQA
m3XMAwQBoo0WMAwDBAKijRwDBAKijSADBAKijSgDBAOijTgDBAKijUgDBAGijZwD
BAOnlBADBASnlDADBAKnlEwwDQYJKoZIhvcNAQELBQADggEBABHvaBAnmDobN4qG
VsBGym5PkgDXXcEYCaikQPzMTLGE4F2p/snaje4HNaB1Ti9Z16Si8o9cbn2BA/VU
9ASXHi7lwF2IRLwnAkZYpDWYoUMfOBTz3SXu9i9ep2AQkzMF03oavKez6ORQWok4
G66IU45/0OP8tuL4RLTKFYjzT9+23AmXBBvyZvlErHPMwkN4HaoSukqH9fq/xOO+
W1BHwFFG7lr+O5X2glrRuZsU4VeSg8s9MxrmBVNa1y37ZG3oFgck59NNXjtvN2w2
40Z9aA4NWsgZ/On+2tV0S26XLncoRWnV//P0DOr//nEbFbwfpp/bGaXpYDUxeyVk
g2vf1ys=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:23 2026 by rpki-client