Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
File: AS12083.roa (raw, json)
Hash identifier: NKMixf8JaS2rlMGQLDRzlQOPNff6ep2GzcB4elerZjw=
Subject key identifier: 04:90:69:50:71:0D:C7:D0:0B:4E:58:53:B2:62:AD:1D:D8:71:C0:02
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0DF28E69D153F8A14AC9BF5E0B71F507639D9456
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
Signing time: Thu 12 Nov 2026 14:30:49 +0000
ROA not before: Thu 12 Nov 2026 14:25:49 +0000
ROA not after: Thu 11 Nov 2027 14:30:49 +0000
asID: 12083
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
94.192.244.0/22 maxlen: 24
94.192.248.0/22 maxlen: 24
94.193.148.0/22 maxlen: 24
94.194.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f2:8e:69:d1:53:f8:a1:4a:c9:bf:5e:0b:71:f5:07:63:9d:94:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 14:25:49 2026 GMT
Not After : Nov 11 14:30:49 2027 GMT
Subject: CN=04906950710DC7D00B4E5853B262AD1DD871C002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0c:8b:6f:b7:2f:6c:12:d2:19:36:1c:e3:9d:
c9:31:24:64:61:de:4c:a3:3b:75:e3:22:1b:9e:a3:
50:f1:84:c7:5c:ed:d9:1b:30:bf:8e:50:18:16:78:
b3:29:a6:a8:a7:5e:fb:1c:43:ed:50:2c:17:55:20:
ea:94:05:65:d2:4c:10:e7:e4:e3:01:d2:ef:33:db:
c5:9a:91:9a:50:56:8b:dd:30:0f:6b:ba:7a:5a:bd:
2a:b1:b5:43:ef:b4:8a:16:04:62:f4:69:ab:c9:c8:
cf:4f:61:8e:49:5a:c1:2f:e8:ac:a5:e3:7b:f6:1c:
0c:b3:52:50:22:74:cf:a5:24:9a:d4:80:84:b9:a8:
d1:35:ec:00:01:a3:ed:31:8c:f5:d1:35:1b:78:c1:
58:cf:4f:b8:dc:af:aa:62:85:be:90:73:a1:3b:56:
75:cc:65:f9:2d:d1:0b:6b:2a:fc:46:38:4f:45:06:
8d:68:da:5e:a0:d3:6a:9f:5f:23:ed:44:26:f5:81:
83:b0:c1:49:60:c2:3a:da:01:f2:91:2d:2f:a9:82:
3e:30:a4:8a:7f:71:e6:56:da:7c:09:44:f0:19:79:
68:15:3c:d9:01:0e:4b:8b:a8:20:5f:48:9d:c1:5d:
a4:1e:ed:e3:42:ef:18:51:6a:79:1e:84:8c:ca:b9:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:90:69:50:71:0D:C7:D0:0B:4E:58:53:B2:62:AD:1D:D8:71:C0:02
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS12083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
94.192.244.0-94.192.251.255
94.193.148.0/22
94.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:58:42:6d:00:c7:b6:85:29:cf:89:67:12:44:18:c4:c1:67:
aa:13:1c:6e:30:ab:86:60:5a:5a:64:99:8d:84:6d:13:67:94:
96:56:31:82:d9:45:70:87:4b:05:47:b5:9a:e3:96:f8:46:de:
ac:da:91:75:f3:f9:db:0c:bc:47:5d:84:75:ee:38:c9:fa:4f:
eb:3f:f4:4a:a7:12:ff:37:58:58:67:1f:b4:61:31:b0:90:44:
c3:11:e8:8b:56:ac:71:ad:7e:37:53:c6:66:5f:89:f0:ba:4e:
fc:dd:42:03:ff:db:f7:13:2f:50:46:26:15:fd:ed:ac:26:a9:
a0:02:e6:a6:6d:b8:55:6b:cd:51:b1:6b:41:db:cd:c5:a9:04:
0a:d3:ac:c1:cf:8d:a0:63:42:90:9f:80:83:fb:0a:db:28:b5:
4c:2f:91:4f:82:a0:e3:ad:b3:c5:cc:17:66:3c:1a:14:40:37:
e4:9e:d4:75:d4:41:53:47:d8:12:91:d2:9e:41:e1:02:22:2b:
87:7d:e2:be:50:73:6a:03:43:db:c3:5d:a9:20:88:cb:7c:77:
9e:20:6e:92:6e:f7:d2:07:83:09:3b:57:42:24:3b:2c:02:2c:
4d:0c:24:0c:40:f2:7c:6c:28:31:6a:96:c0:17:47:a9:d0:8b:
d8:c6:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:54:52 2026 by rpki-client