Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: qG2/hzplLkHWDkeqbamekGTpkJVpGUJn5QEIHucu0jY=
Subject key identifier: 19:E7:4D:6E:DE:36:8E:54:B2:C2:AB:A9:12:DC:5F:BA:32:D4:FD:F7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3BE2309DCE9351F856A641D5BEA372C79907FDAA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
Signing time: Tue 03 Nov 2026 15:27:29 +0000
ROA not before: Tue 03 Nov 2026 15:22:29 +0000
ROA not after: Tue 02 Nov 2027 15:27:29 +0000
asID: 812
IP address blocks: 2a0a:ba00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e2:30:9d:ce:93:51:f8:56:a6:41:d5:be:a3:72:c7:99:07:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 3 15:22:29 2026 GMT
Not After : Nov 2 15:27:29 2027 GMT
Subject: CN=19E74D6EDE368E54B2C2ABA912DC5FBA32D4FDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:31:ed:da:cc:e0:00:6d:ea:eb:48:e7:d1:
91:af:bc:ba:cd:eb:23:ce:ac:c2:39:64:27:15:fc:
83:a4:3d:0f:b8:56:0e:94:09:89:1f:3a:48:45:88:
be:2f:98:53:89:32:02:6b:0b:fd:be:4e:91:2d:ba:
1e:b0:7a:89:8e:72:b2:dd:ac:a6:8b:6f:b3:43:1e:
dc:b6:0e:d8:2e:47:82:99:5a:f9:b1:d5:d4:dc:aa:
ed:e6:cd:a6:4e:67:69:ce:2d:de:19:80:0c:05:4a:
51:28:99:8f:e3:62:cc:20:d7:ad:d6:46:06:b1:8e:
3b:f4:0e:4f:f9:8e:8b:f8:8b:3a:92:40:e5:71:01:
aa:2a:d1:aa:75:02:32:07:6c:07:1d:e9:53:e5:c0:
1f:59:e5:a1:a3:af:e2:a2:6f:5d:04:7d:45:0d:97:
79:6d:3d:1a:d7:bf:c7:92:2b:36:ce:95:1f:4c:71:
ca:a2:eb:62:ad:3c:2e:07:ee:8a:52:f7:72:38:c4:
f6:2a:c2:22:59:c4:6e:8b:18:38:b4:59:8f:8b:33:
fc:38:68:e0:dc:29:7e:c0:06:14:d7:d7:1e:94:00:
40:57:7a:08:9e:a9:eb:87:de:e4:38:67:95:32:fe:
f7:40:ae:f7:40:cd:77:95:39:ad:bb:d3:9e:09:50:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:4D:6E:DE:36:8E:54:B2:C2:AB:A9:12:DC:5F:BA:32:D4:FD:F7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
26:de:56:4b:72:80:27:5c:ce:f5:65:48:d9:27:65:2a:3c:d9:
f2:9a:24:8e:5b:f1:02:0f:55:20:1a:49:dd:7d:26:c5:79:36:
11:53:e6:df:40:d3:1a:70:76:1e:94:36:07:2c:1c:72:43:04:
a6:23:49:84:70:df:f8:24:72:aa:b9:09:cc:cf:fe:20:d4:53:
be:14:cb:7f:e0:de:9d:0d:84:20:d8:c0:0d:83:16:7d:08:09:
9b:64:87:d8:3c:74:33:26:1a:64:f8:81:8b:ad:73:3e:46:d3:
be:f7:69:df:0c:e0:ed:24:47:82:ba:23:e0:2c:72:5a:87:63:
38:b9:46:4f:a6:52:e4:14:fe:26:03:55:53:6a:34:7e:da:a4:
e1:09:b0:7a:8b:b6:2f:f4:a4:5c:c3:5c:36:dd:5a:e4:7e:5f:
7d:2e:7a:bc:95:7c:8e:a9:f4:aa:4f:01:3f:11:63:48:3b:39:
f3:78:c9:47:33:99:83:f3:5d:9d:12:62:77:d8:ee:2a:11:a1:
30:15:b1:10:ab:0e:fa:14:0e:f3:1d:5d:16:24:29:32:7d:fa:
22:d6:80:d8:e5:2c:36:bc:6b:63:da:ef:c6:18:cf:63:17:be:
7c:7a:77:0c:ef:7e:da:95:79:9a:a3:74:f3:00:d5:4a:95:ff:
0d:8e:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 09:39:42 2026 by rpki-client