Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: +v1OfuIeVD4wJ5SEnOYm00xvqPk8hKZ4/QxXRtOwv+M=
Subject key identifier: 28:AF:A2:E7:05:0D:8E:5A:B0:EA:AD:E5:C6:F7:CE:AB:7D:A6:DD:4A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 447B23D8BAA5048EEF4B38BC6947D1F9FC525166
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS812.roa
Signing time: Tue 08 Sep 2026 00:07:33 +0000
ROA not before: Tue 08 Sep 2026 00:02:33 +0000
ROA not after: Tue 07 Sep 2027 00:07:33 +0000
asID: 812
IP address blocks: 143.14.232.0/21 maxlen: 24
155.117.204.0/24 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7b:23:d8:ba:a5:04:8e:ef:4b:38:bc:69:47:d1:f9:fc:52:51:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:02:33 2026 GMT
Not After : Sep 7 00:07:33 2027 GMT
Subject: CN=28AFA2E7050D8E5AB0EAADE5C6F7CEAB7DA6DD4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:08:93:7e:8e:1c:e7:ff:d4:0b:5e:66:cb:
50:f4:d9:d2:40:6d:8f:5b:bb:dc:c3:63:58:48:7a:
57:46:02:8b:74:e5:cb:a2:54:8d:39:03:69:cb:04:
ed:87:f1:5b:b4:36:26:2f:1c:43:8d:a5:85:e4:61:
a3:2c:bb:9e:32:a1:35:9f:79:cf:da:de:15:fd:c2:
e2:ee:d3:e0:8e:0d:7a:ac:1f:20:62:42:f2:27:87:
c8:ba:c4:fd:4f:df:ef:30:75:5f:96:73:6b:3c:4f:
e8:7a:0e:4c:08:7a:5f:4a:91:0a:cf:fa:5d:32:96:
65:c9:41:68:8a:f9:f5:26:a7:c1:5e:4e:9d:23:77:
01:8e:9c:0f:e5:4a:ea:f2:85:a0:fa:4a:c4:b2:08:
ca:54:a7:23:75:e9:0d:7b:05:17:eb:2b:ae:35:66:
cb:26:24:12:c6:e0:62:90:1f:72:d3:26:f0:1e:be:
fe:75:f5:10:9a:b7:cd:7d:67:20:d8:a1:84:04:d3:
6c:fd:ae:5f:2a:d7:dd:30:5d:f8:e7:02:1a:96:cb:
31:46:6d:a0:fa:7e:8b:f9:1e:bf:d9:c5:b5:36:b8:
39:ff:ad:c0:20:3f:c5:d4:1b:b3:d0:1a:4a:e0:91:
74:79:9a:30:8d:6e:a0:6b:9f:94:43:cb:8a:b5:71:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:A2:E7:05:0D:8E:5A:B0:EA:AD:E5:C6:F7:CE:AB:7D:A6:DD:4A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
155.117.204.0/24
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0/22
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
167.148.16.0/21
167.148.48.0-167.148.67.255
167.148.76.0/22
167.148.108.0/22
Signature Algorithm: sha256WithRSAEncryption
51:3c:f5:b7:67:67:15:95:db:5e:dc:67:f6:c6:a9:54:f4:90:
93:06:ac:0e:d7:b0:ad:84:db:85:d7:16:32:16:97:97:8d:46:
88:83:ea:fc:1f:3f:c5:d5:26:db:6b:84:28:39:9a:f4:b4:7f:
9e:a8:3c:b4:f8:1f:0a:9d:1a:87:17:a9:c5:c4:4e:6e:f7:e1:
27:c4:ea:d7:08:aa:46:ad:75:38:65:79:72:b1:d1:c7:c6:8e:
f9:b2:cc:62:a0:1a:5c:42:40:61:4f:a3:28:a6:bd:56:ab:86:
91:bd:dd:b6:9a:76:9e:99:7f:fc:01:57:a3:fe:cb:44:a8:2c:
a3:27:98:8d:27:91:e8:58:df:f6:4b:ea:25:0b:b3:03:00:65:
7b:f9:3e:cb:78:37:7a:c6:c2:36:a4:d4:fa:ff:3c:2b:02:10:
a5:3b:59:cd:68:6e:78:77:f5:97:5e:c1:57:c8:96:f8:f5:7f:
a9:ec:2d:1e:87:a5:c3:05:51:e1:83:8a:bd:e7:32:3b:e3:5a:
a2:6f:6d:06:92:6f:a1:67:76:4f:4d:02:1b:77:8d:ac:1e:c8:
0f:8f:8a:cb:5c:00:cc:34:85:69:fb:a0:45:72:b8:a4:c5:c8:
b7:37:14:f8:88:96:16:5c:59:e8:db:a9:d3:0b:cb:be:73:15:
0d:85:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:49:41 2026 by rpki-client