Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          6U51/XLQbjfnmMiQicTXFgwenX5U0s80GByCj/j+/Ps=
Subject key identifier:   96:8D:0F:97:50:B3:86:7A:BE:AE:43:34:D9:50:69:EA:61:0C:4B:28
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       3A4936783BB434BDAEDDB844649E8704A83C4C21
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa
Signing time:             Mon 12 Oct 2026 02:24:55 +0000
ROA not before:           Mon 12 Oct 2026 02:19:55 +0000
ROA not after:            Mon 11 Oct 2027 02:24:55 +0000
asID:                     12083
IP address blocks:        79.176.176.0/22 maxlen: 24
                          79.180.12.0/22 maxlen: 24
                          79.180.20.0/22 maxlen: 24
                          79.180.28.0/22 maxlen: 24
                          79.180.36.0/22 maxlen: 24
                          79.182.140.0/22 maxlen: 24
                          79.182.232.0/22 maxlen: 24
                          79.183.20.0/22 maxlen: 24
                          79.183.172.0/22 maxlen: 24
                          79.183.188.0/22 maxlen: 24
                          79.183.236.0/22 maxlen: 24
                          109.64.12.0/22 maxlen: 24
                          109.64.104.0/22 maxlen: 24
                          109.65.24.0/22 maxlen: 24
                          109.65.40.0/22 maxlen: 24
                          109.65.76.0/22 maxlen: 24
                          109.65.108.0/22 maxlen: 24
                          109.65.168.0/22 maxlen: 24
                          109.65.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:36:78:3b:b4:34:bd:ae:dd:b8:44:64:9e:87:04:a8:3c:4c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 12 02:19:55 2026 GMT
            Not After : Oct 11 02:24:55 2027 GMT
        Subject: CN=968D0F9750B3867ABEAE4334D95069EA610C4B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:56:87:e9:ad:04:dc:ce:b0:8d:86:fd:98:
                    8a:df:5b:8e:15:7d:04:d7:33:30:f4:22:6d:80:84:
                    5a:5e:e2:21:42:6a:43:57:5d:ce:3a:a8:9f:09:ab:
                    9b:2d:c7:dd:f5:99:91:91:53:b9:6b:39:ab:b3:f1:
                    a1:18:4e:c7:57:7a:f5:d4:16:6f:8a:1f:b8:ab:c6:
                    3d:2d:36:c6:fb:01:87:c8:bd:ed:ce:69:91:eb:89:
                    82:9f:82:45:0d:32:14:03:1d:f3:6c:1e:ba:9a:20:
                    30:e7:be:5e:e2:20:2b:1b:b5:5d:84:27:54:f7:50:
                    cf:54:47:ba:3c:b6:2c:7b:b5:b3:d1:67:e2:39:b0:
                    8b:7d:39:d4:46:4f:5e:58:6c:21:06:cc:c7:84:52:
                    4b:53:32:3c:e3:09:e2:ea:27:86:7f:a3:98:c4:09:
                    84:a0:13:ce:95:3a:05:08:9b:1a:0c:a8:ea:0f:45:
                    07:25:3e:f6:06:2d:8d:16:2e:97:8c:12:be:2d:3c:
                    51:62:2d:12:1c:4f:11:84:76:02:6c:4b:80:23:30:
                    35:69:fd:5a:66:6a:f2:81:18:97:8a:de:ef:da:0c:
                    3d:0e:49:2b:08:63:4e:82:ef:e2:0d:17:d5:d2:d0:
                    cc:e6:ad:d7:48:74:8e:58:2c:40:75:fd:5f:2c:15:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8D:0F:97:50:B3:86:7A:BE:AE:43:34:D9:50:69:EA:61:0C:4B:28
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.176.0/22
                  79.180.12.0/22
                  79.180.20.0/22
                  79.180.28.0/22
                  79.180.36.0/22
                  79.182.140.0/22
                  79.182.232.0/22
                  79.183.20.0/22
                  79.183.172.0/22
                  79.183.188.0/22
                  79.183.236.0/22
                  109.64.12.0/22
                  109.64.104.0/22
                  109.65.24.0/22
                  109.65.40.0/22
                  109.65.76.0/22
                  109.65.108.0/22
                  109.65.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:00:81:79:3f:6e:a2:8b:bb:42:63:20:5c:ec:0b:98:86:6c:
         92:6d:ff:63:dd:1a:59:25:23:15:e7:8b:d8:c5:7d:9a:fd:69:
         f5:e2:06:05:37:6c:40:f1:89:02:ce:44:b3:91:2e:91:31:01:
         48:6e:21:5b:d1:aa:21:11:7a:d4:e5:45:51:ac:fe:a8:98:72:
         69:33:13:54:8e:a1:5e:e7:b8:67:4f:2c:f6:a9:2f:28:a3:db:
         14:85:ea:da:22:2f:91:8a:f2:3c:5b:8e:fc:77:f8:f4:7c:99:
         45:98:b9:28:c8:f2:d3:86:19:a7:8c:1d:13:c4:a0:22:62:53:
         17:0a:0e:50:26:02:c8:40:5c:17:61:12:0c:01:6c:62:a3:55:
         e1:f4:d3:ab:64:46:33:7a:dc:0f:db:e7:c7:cf:b3:bd:9a:c5:
         7e:e3:41:17:21:86:0b:69:fb:43:ee:b2:8e:31:39:e1:ef:dd:
         d3:4b:00:77:08:cc:c2:7d:c2:ae:5b:ef:e3:65:8b:cd:1c:45:
         82:02:fb:bb:58:d5:b9:b4:70:87:67:7c:5d:fd:dd:01:bf:b5:
         4d:bd:3d:34:7e:b0:d7:4d:e9:1d:1b:08:7b:92:c7:dd:4b:b0:
         57:ba:96:d4:b6:2a:c5:52:af:74:94:1f:11:b0:95:88:6a:ba:
         4b:ed:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:11 2026 by rpki-client