Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: kWVYlaU9EGXIv0MgJnwMdx3NJ4QNzYLc23lU6mAoDGY=
Subject key identifier: E6:34:A6:F1:6F:52:B0:E4:0A:AD:78:49:9E:50:E7:F5:B5:F9:75:15
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6DA0286412E3D1F91C24CD0BC70E2ABCA7D457FF
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS812.roa
Signing time: Fri 13 Nov 2026 15:48:07 +0000
ROA not before: Fri 13 Nov 2026 15:43:07 +0000
ROA not after: Fri 12 Nov 2027 15:48:07 +0000
asID: 812
IP address blocks: 2a14:7580:fb00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a0:28:64:12:e3:d1:f9:1c:24:cd:0b:c7:0e:2a:bc:a7:d4:57:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 13 15:43:07 2026 GMT
Not After : Nov 12 15:48:07 2027 GMT
Subject: CN=E634A6F16F52B0E40AAD78499E50E7F5B5F97515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:9e:98:b7:e1:2a:5f:7f:20:06:2d:00:fa:
fd:c3:0e:52:20:50:a5:9b:13:3c:24:d8:8b:70:00:
e8:7f:c8:f5:f4:49:e7:97:6c:e9:f0:70:be:4e:8b:
3d:68:7e:9b:80:8c:27:c7:6e:cb:00:94:53:2e:2a:
18:da:af:4e:7f:c4:0c:16:5a:f3:f7:b2:57:d0:0e:
47:37:57:4d:fc:d0:b9:c8:f7:d7:67:f1:35:b2:2d:
ee:3d:cc:62:a6:28:af:63:e2:3e:c9:e5:03:f5:4b:
24:07:e2:91:91:91:35:1d:dd:74:5d:87:7b:6c:76:
b3:50:52:f8:7f:29:6d:45:3d:fb:13:d2:57:4b:e2:
41:49:79:18:09:ae:e1:0f:5a:2b:c7:ed:63:f1:57:
29:62:ef:3a:b4:5a:3f:6d:2c:ea:17:39:9c:56:b4:
09:3c:ab:a0:cc:0f:47:60:6c:59:54:aa:99:78:06:
0e:2c:f4:ae:67:4d:0a:7f:00:81:b1:99:b7:c6:ad:
93:d4:7b:b9:35:36:bd:62:dc:fd:cb:8d:7d:6f:2f:
d2:53:20:7f:03:49:54:e4:02:46:2d:08:23:14:45:
2a:54:10:ce:0b:27:ea:e9:37:dd:6a:83:86:c4:0f:
dc:84:50:f8:6c:73:57:2a:c5:c9:2d:e3:5e:d8:d4:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:A6:F1:6F:52:B0:E4:0A:AD:78:49:9E:50:E7:F5:B5:F9:75:15
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fb00::/40
Signature Algorithm: sha256WithRSAEncryption
21:58:14:bc:82:cb:00:21:38:80:65:3f:be:8f:bc:49:ee:8e:
80:3b:1b:f1:ab:12:dd:85:f6:af:3b:6a:1e:c6:10:3f:7d:1f:
49:d2:0f:a7:ec:a3:a6:d4:32:31:3a:07:75:5e:06:47:90:56:
e3:bb:bc:90:9b:3e:40:d1:f6:f4:ad:88:b9:24:74:f3:35:77:
28:da:44:ab:3f:ce:ff:67:cc:02:74:48:43:fc:35:49:92:89:
62:86:7f:d9:e8:82:f4:94:c2:3c:ec:2a:ae:3f:48:8e:0b:fe:
24:ab:f1:d1:1a:ac:2a:c9:4f:64:a8:e4:e7:0f:a3:e6:76:b9:
93:09:22:1e:c4:c8:c3:e3:3c:6e:14:90:64:b9:c9:8f:fc:c4:
bf:67:0f:a9:40:10:7a:b0:6d:b6:d1:1d:aa:42:17:f7:29:ba:
b3:7d:15:b4:0b:c1:90:c9:f2:91:dd:14:13:91:bc:1b:c9:17:
e9:3a:81:6e:21:83:7c:27:fa:b2:09:58:14:1b:f1:68:ec:5c:
bf:ce:f7:9d:9f:ff:ba:0b:c8:22:77:26:a8:8d:82:c6:e6:db:
d8:f1:91:ce:47:06:66:9a:34:40:63:96:c0:37:01:b8:23:e7:
f3:ac:12:cf:c6:9c:cb:c4:08:8b:ab:b4:74:2c:b9:30:d3:6a:
e4:36:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:24 2026 by rpki-client