Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
File: AS12083.roa (raw, json)
Hash identifier: tVen4tURzVXGPSeqgxKmp3sD1XiI8gob+yqkJevLDAw=
Subject key identifier: 48:55:E7:E9:DA:DA:7E:26:6A:77:3B:0A:47:E7:98:D1:6F:83:91:FC
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 37C2F914FA995752A7B62A5F63355326E14147E7
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
Signing time: Thu 12 Nov 2026 15:30:30 +0000
ROA not before: Thu 12 Nov 2026 15:25:30 +0000
ROA not after: Thu 11 Nov 2027 15:30:30 +0000
asID: 12083
IP address blocks: 79.176.8.0/24 maxlen: 24
79.176.16.0/24 maxlen: 24
79.176.24.0/24 maxlen: 24
79.176.44.0/24 maxlen: 24
79.176.80.0/24 maxlen: 24
79.176.148.0/24 maxlen: 24
79.176.149.0/24 maxlen: 24
79.176.176.0/22 maxlen: 24
79.176.252.0/24 maxlen: 24
79.176.253.0/24 maxlen: 24
79.180.12.0/22 maxlen: 24
79.180.20.0/22 maxlen: 24
79.180.28.0/22 maxlen: 24
79.180.36.0/22 maxlen: 24
79.180.68.0/22 maxlen: 24
79.180.72.0/23 maxlen: 24
79.180.94.0/23 maxlen: 24
79.180.96.0/22 maxlen: 24
79.180.140.0/22 maxlen: 24
79.180.152.0/22 maxlen: 24
79.182.60.0/24 maxlen: 24
79.182.124.0/24 maxlen: 24
79.182.140.0/22 maxlen: 24
79.182.172.0/24 maxlen: 24
79.182.173.0/24 maxlen: 24
79.182.174.0/24 maxlen: 24
79.182.175.0/24 maxlen: 24
79.182.232.0/22 maxlen: 24
79.182.252.0/23 maxlen: 24
79.183.20.0/22 maxlen: 24
79.183.28.0/24 maxlen: 24
79.183.29.0/24 maxlen: 24
79.183.172.0/22 maxlen: 24
79.183.188.0/22 maxlen: 24
79.183.236.0/22 maxlen: 24
109.64.12.0/22 maxlen: 24
109.64.104.0/22 maxlen: 24
109.64.224.0/23 maxlen: 24
109.65.24.0/22 maxlen: 24
109.65.40.0/22 maxlen: 24
109.65.76.0/22 maxlen: 24
109.65.108.0/22 maxlen: 24
109.65.168.0/22 maxlen: 24
109.65.172.0/22 maxlen: 24
109.65.188.0/24 maxlen: 24
109.65.189.0/24 maxlen: 24
109.65.222.0/23 maxlen: 24
109.66.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c2:f9:14:fa:99:57:52:a7:b6:2a:5f:63:35:53:26:e1:41:47:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Nov 12 15:25:30 2026 GMT
Not After : Nov 11 15:30:30 2027 GMT
Subject: CN=4855E7E9DADA7E266A773B0A47E798D16F8391FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:82:0e:a1:bc:9a:f1:92:76:cc:7d:17:da:
1c:0c:1c:95:20:81:98:46:6f:f0:b9:3e:90:89:6a:
e0:78:3c:2f:27:8a:6b:fc:bd:a4:38:34:13:91:a4:
3e:ae:40:4b:69:09:83:f6:53:6a:1a:93:28:b5:d5:
44:21:15:dd:fb:38:4f:d2:8f:18:56:cb:13:58:d0:
c3:07:f5:89:6b:1f:c8:b4:32:eb:ee:c7:cf:74:29:
d9:09:77:a1:8a:0d:4f:14:ff:0a:e9:a5:e7:9d:8c:
51:8f:32:9f:e3:07:74:de:fb:ae:db:a4:25:66:c6:
fb:20:9e:1d:aa:be:47:ea:73:45:1f:29:5a:3d:55:
85:c2:e6:dc:e9:f9:f9:46:3e:7b:3a:3b:cb:9e:b0:
01:f4:9b:72:94:2e:3b:3d:ed:a4:f1:f4:8a:b0:61:
67:11:97:0a:b3:36:49:6a:a3:a9:b5:8b:4e:32:c6:
b7:2a:04:24:08:56:83:59:6c:2d:a1:86:ea:47:f7:
37:74:7f:71:99:34:89:f8:96:b5:68:9d:21:c7:12:
4c:6f:03:e7:54:3c:55:02:5b:14:ef:07:1a:5d:04:
54:63:d4:0f:0c:6f:4c:4b:d9:5c:b4:12:6a:a6:63:
37:69:8d:dc:b0:02:ac:67:f0:3a:82:d9:90:aa:88:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:55:E7:E9:DA:DA:7E:26:6A:77:3B:0A:47:E7:98:D1:6F:83:91:FC
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.8.0/24
79.176.16.0/24
79.176.24.0/24
79.176.44.0/24
79.176.80.0/24
79.176.148.0/23
79.176.176.0/22
79.176.252.0/23
79.180.12.0/22
79.180.20.0/22
79.180.28.0/22
79.180.36.0/22
79.180.68.0-79.180.73.255
79.180.94.0-79.180.99.255
79.180.140.0/22
79.180.152.0/22
79.182.60.0/24
79.182.124.0/24
79.182.140.0/22
79.182.172.0/22
79.182.232.0/22
79.182.252.0/23
79.183.20.0/22
79.183.28.0/23
79.183.172.0/22
79.183.188.0/22
79.183.236.0/22
109.64.12.0/22
109.64.104.0/22
109.64.224.0/23
109.65.24.0/22
109.65.40.0/22
109.65.76.0/22
109.65.108.0/22
109.65.168.0/21
109.65.188.0/23
109.65.222.0/23
109.66.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:f2:d0:ab:29:81:57:87:17:e4:94:70:8f:e0:7d:9b:4a:23:
c6:95:24:dd:99:0e:d1:43:88:8e:65:af:0c:8b:c4:b8:74:ad:
9e:fd:dc:49:b9:a6:70:db:3c:be:81:b7:f1:bd:33:36:28:99:
df:01:53:a4:61:66:49:af:db:23:93:a9:46:aa:08:d4:bf:c3:
c1:72:ab:38:7b:36:5c:be:e3:fe:bf:b4:5c:f0:ac:1b:c5:74:
e9:17:23:d4:b9:86:2a:8b:35:5f:e2:d1:90:4d:d7:20:8a:70:
57:89:09:09:78:e8:a3:95:6a:92:26:3e:be:7a:e7:59:13:66:
48:7e:2d:8f:07:39:23:78:82:00:c5:57:06:77:30:aa:b9:ba:
59:e8:da:82:76:7e:03:33:2b:02:8e:14:ec:44:a2:e4:e8:b9:
bc:a2:25:e8:6a:57:bc:ef:cb:1e:6c:cd:c7:dd:74:d9:1a:74:
23:35:ac:66:58:c6:af:cb:d7:c6:f1:a9:fe:15:74:2a:b9:a4:
74:39:6f:05:c3:bc:17:7e:fc:e2:5c:c6:40:cc:51:a0:24:a4:
2c:b3:1d:4a:2c:ff:db:0f:65:41:53:fc:73:de:f5:b9:88:24:
ae:ab:9c:22:6f:dd:8e:05:d5:2d:0f:76:76:0d:ff:e3:44:6a:
34:8a:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:53:44 2026 by rpki-client