Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12741.roa
File: AS12741.roa (raw, json)
Hash identifier: 21lhHNwM7UZakAQEvVlYyzYHjJ7EsBHi36A11e8veS8=
Subject key identifier: 98:68:54:6E:A1:46:F6:7A:B0:49:A2:72:BB:D7:A4:EE:F2:0B:11:EE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0DCC850ABD4CC91BE64AE4FEDCC0D9E47FA00DA6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12741.roa
Signing time: Wed 24 Jun 2026 14:48:39 +0000
ROA not before: Wed 24 Jun 2026 14:43:39 +0000
ROA not after: Wed 23 Jun 2027 14:48:39 +0000
asID: 12741
IP address blocks: 91.124.152.0/22 maxlen: 24
91.124.156.0/22 maxlen: 24
95.135.148.0/22 maxlen: 24
95.135.184.0/22 maxlen: 24
95.135.212.0/22 maxlen: 24
178.94.144.0/22 maxlen: 24
178.95.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cc:85:0a:bd:4c:c9:1b:e6:4a:e4:fe:dc:c0:d9:e4:7f:a0:0d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 24 14:43:39 2026 GMT
Not After : Jun 23 14:48:39 2027 GMT
Subject: CN=9868546EA146F67AB049A272BBD7A4EEF20B11EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:ad:86:f1:22:03:d7:d5:78:b1:7c:a1:7c:
6c:08:b8:f2:ca:c4:2b:57:48:fa:62:10:5e:78:2e:
38:a3:ee:05:a0:5f:5f:4c:bf:f7:a5:74:b5:8c:f9:
d3:a4:bd:91:28:a8:8d:84:8e:29:49:a8:ed:4e:7a:
67:74:1e:c0:70:d6:29:3f:11:af:a9:fb:fa:82:ad:
7b:69:c1:ea:ce:83:5c:32:8b:88:65:12:2b:8c:e3:
72:3b:d1:f9:83:ff:ba:08:11:58:07:03:01:7c:07:
be:a6:c0:cd:82:95:8b:0f:da:17:30:c1:7b:cb:06:
8a:6c:42:8a:20:11:19:7b:42:48:f6:83:c1:04:04:
60:53:3d:b5:1f:75:0b:e2:a3:0e:7d:53:8c:08:6f:
35:75:22:0f:9a:9b:ad:b9:02:7b:77:52:d4:a6:59:
4e:dd:c8:e0:31:10:78:de:ec:33:5f:f9:58:57:3d:
30:06:1a:a9:d2:88:8b:58:53:32:4a:ef:4d:ff:1b:
45:17:71:35:fc:0c:c6:d6:6b:76:0c:b6:f1:ee:28:
c9:2a:74:d4:09:e9:61:7f:80:31:db:7e:16:a4:a9:
2b:8c:5f:2c:79:87:de:3d:5e:3c:0a:44:3e:06:8a:
42:a9:5d:31:a4:9e:a1:1f:ea:5a:7e:89:dd:24:f6:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:54:6E:A1:46:F6:7A:B0:49:A2:72:BB:D7:A4:EE:F2:0B:11:EE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.152.0/21
95.135.148.0/22
95.135.184.0/22
95.135.212.0/22
178.94.144.0/22
178.95.28.0/22
Signature Algorithm: sha256WithRSAEncryption
27:b8:e6:d1:6a:1e:17:12:d5:10:ff:0f:43:97:32:89:c3:21:
10:4b:4d:60:02:cd:ef:ea:60:9e:98:6b:02:5c:12:41:24:fd:
de:a5:46:72:aa:46:ae:84:9a:00:8c:c5:db:7d:52:47:0d:7c:
2a:07:04:e8:64:01:3b:17:1a:a0:5a:a5:fd:ad:97:4d:44:b6:
c1:a5:25:23:5b:86:28:9d:ca:76:1f:e4:db:b7:16:68:6d:ca:
f1:2f:d4:2e:26:ee:36:c9:0c:a6:18:76:97:43:52:7f:e4:67:
33:ae:e7:8e:a4:05:50:d9:fc:8c:f6:fa:1c:e2:cb:d2:69:26:
f5:3d:84:2c:f0:2a:b3:ae:b6:d9:81:0d:08:48:b9:a6:00:59:
94:f8:18:cd:a0:16:38:7f:f3:d8:63:b5:12:fe:17:21:74:39:
88:bd:d8:f7:7e:ec:32:f8:f2:6b:74:6c:ce:6e:9b:e7:50:83:
07:cd:36:8e:6f:cc:b7:d3:66:f9:9f:c8:37:88:31:cc:74:30:
bf:60:a8:5c:6f:e3:93:c3:61:8a:2d:21:bc:3b:de:88:85:22:
35:30:76:64:7e:ed:6a:61:7a:c3:52:cd:64:df:0b:44:8a:5e:
21:8f:22:24:0e:0f:34:fa:d2:13:c4:0b:2c:17:87:6d:fc:e6:
c5:aa:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:55:10 2026 by rpki-client