
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
File: AS12083.roa (raw, json)
Hash identifier: 6U51/XLQbjfnmMiQicTXFgwenX5U0s80GByCj/j+/Ps=
Subject key identifier: 96:8D:0F:97:50:B3:86:7A:BE:AE:43:34:D9:50:69:EA:61:0C:4B:28
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 3A4936783BB434BDAEDDB844649E8704A83C4C21
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
Signing time: Mon 12 Oct 2026 02:24:55 +0000
ROA not before: Mon 12 Oct 2026 02:19:55 +0000
ROA not after: Mon 11 Oct 2027 02:24:55 +0000
asID: 12083
IP address blocks: 79.176.176.0/22 maxlen: 24
79.180.12.0/22 maxlen: 24
79.180.20.0/22 maxlen: 24
79.180.28.0/22 maxlen: 24
79.180.36.0/22 maxlen: 24
79.182.140.0/22 maxlen: 24
79.182.232.0/22 maxlen: 24
79.183.20.0/22 maxlen: 24
79.183.172.0/22 maxlen: 24
79.183.188.0/22 maxlen: 24
79.183.236.0/22 maxlen: 24
109.64.12.0/22 maxlen: 24
109.64.104.0/22 maxlen: 24
109.65.24.0/22 maxlen: 24
109.65.40.0/22 maxlen: 24
109.65.76.0/22 maxlen: 24
109.65.108.0/22 maxlen: 24
109.65.168.0/22 maxlen: 24
109.65.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:49:36:78:3b:b4:34:bd:ae:dd:b8:44:64:9e:87:04:a8:3c:4c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 12 02:19:55 2026 GMT
Not After : Oct 11 02:24:55 2027 GMT
Subject: CN=968D0F9750B3867ABEAE4334D95069EA610C4B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:56:87:e9:ad:04:dc:ce:b0:8d:86:fd:98:
8a:df:5b:8e:15:7d:04:d7:33:30:f4:22:6d:80:84:
5a:5e:e2:21:42:6a:43:57:5d:ce:3a:a8:9f:09:ab:
9b:2d:c7:dd:f5:99:91:91:53:b9:6b:39:ab:b3:f1:
a1:18:4e:c7:57:7a:f5:d4:16:6f:8a:1f:b8:ab:c6:
3d:2d:36:c6:fb:01:87:c8:bd:ed:ce:69:91:eb:89:
82:9f:82:45:0d:32:14:03:1d:f3:6c:1e:ba:9a:20:
30:e7:be:5e:e2:20:2b:1b:b5:5d:84:27:54:f7:50:
cf:54:47:ba:3c:b6:2c:7b:b5:b3:d1:67:e2:39:b0:
8b:7d:39:d4:46:4f:5e:58:6c:21:06:cc:c7:84:52:
4b:53:32:3c:e3:09:e2:ea:27:86:7f:a3:98:c4:09:
84:a0:13:ce:95:3a:05:08:9b:1a:0c:a8:ea:0f:45:
07:25:3e:f6:06:2d:8d:16:2e:97:8c:12:be:2d:3c:
51:62:2d:12:1c:4f:11:84:76:02:6c:4b:80:23:30:
35:69:fd:5a:66:6a:f2:81:18:97:8a:de:ef:da:0c:
3d:0e:49:2b:08:63:4e:82:ef:e2:0d:17:d5:d2:d0:
cc:e6:ad:d7:48:74:8e:58:2c:40:75:fd:5f:2c:15:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:0F:97:50:B3:86:7A:BE:AE:43:34:D9:50:69:EA:61:0C:4B:28
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.176.0/22
79.180.12.0/22
79.180.20.0/22
79.180.28.0/22
79.180.36.0/22
79.182.140.0/22
79.182.232.0/22
79.183.20.0/22
79.183.172.0/22
79.183.188.0/22
79.183.236.0/22
109.64.12.0/22
109.64.104.0/22
109.65.24.0/22
109.65.40.0/22
109.65.76.0/22
109.65.108.0/22
109.65.168.0/21
Signature Algorithm: sha256WithRSAEncryption
86:00:81:79:3f:6e:a2:8b:bb:42:63:20:5c:ec:0b:98:86:6c:
92:6d:ff:63:dd:1a:59:25:23:15:e7:8b:d8:c5:7d:9a:fd:69:
f5:e2:06:05:37:6c:40:f1:89:02:ce:44:b3:91:2e:91:31:01:
48:6e:21:5b:d1:aa:21:11:7a:d4:e5:45:51:ac:fe:a8:98:72:
69:33:13:54:8e:a1:5e:e7:b8:67:4f:2c:f6:a9:2f:28:a3:db:
14:85:ea:da:22:2f:91:8a:f2:3c:5b:8e:fc:77:f8:f4:7c:99:
45:98:b9:28:c8:f2:d3:86:19:a7:8c:1d:13:c4:a0:22:62:53:
17:0a:0e:50:26:02:c8:40:5c:17:61:12:0c:01:6c:62:a3:55:
e1:f4:d3:ab:64:46:33:7a:dc:0f:db:e7:c7:cf:b3:bd:9a:c5:
7e:e3:41:17:21:86:0b:69:fb:43:ee:b2:8e:31:39:e1:ef:dd:
d3:4b:00:77:08:cc:c2:7d:c2:ae:5b:ef:e3:65:8b:cd:1c:45:
82:02:fb:bb:58:d5:b9:b4:70:87:67:7c:5d:fd:dd:01:bf:b5:
4d:bd:3d:34:7e:b0:d7:4d:e9:1d:1b:08:7b:92:c7:dd:4b:b0:
57:ba:96:d4:b6:2a:c5:52:af:74:94:1f:11:b0:95:88:6a:ba:
4b:ed:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:11 2026 by rpki-client