Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: xaPtxc5L0VMS0/VQLlaBjARmrkwKwIke7C4lgAl2fjU=
Subject key identifier: 4F:A0:8E:64:4A:70:75:E1:17:DA:EA:16:06:73:70:81:C9:E4:88:79
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7FA5444805E9AD87019DAFF91CD89761F2E30ACD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS812.roa
Signing time: Thu 12 Feb 2026 00:41:06 +0000
ROA not before: Thu 12 Feb 2026 00:36:06 +0000
ROA not after: Thu 11 Feb 2027 00:41:06 +0000
asID: 812
IP address blocks: 82.21.60.0/24 maxlen: 24
82.21.61.0/24 maxlen: 24
82.22.158.0/24 maxlen: 24
82.23.92.0/24 maxlen: 24
82.23.93.0/24 maxlen: 24
82.23.94.0/24 maxlen: 24
82.23.95.0/24 maxlen: 24
82.23.96.0/24 maxlen: 24
82.23.97.0/24 maxlen: 24
82.23.98.0/24 maxlen: 24
82.23.99.0/24 maxlen: 24
82.23.100.0/24 maxlen: 24
82.23.101.0/24 maxlen: 24
82.23.102.0/24 maxlen: 24
82.23.103.0/24 maxlen: 24
82.23.104.0/24 maxlen: 24
82.23.105.0/24 maxlen: 24
82.23.106.0/24 maxlen: 24
82.23.107.0/24 maxlen: 24
82.23.108.0/24 maxlen: 24
82.23.109.0/24 maxlen: 24
82.23.110.0/24 maxlen: 24
82.23.111.0/24 maxlen: 24
82.23.112.0/24 maxlen: 24
82.23.113.0/24 maxlen: 24
82.23.114.0/24 maxlen: 24
82.23.115.0/24 maxlen: 24
82.23.116.0/24 maxlen: 24
82.23.117.0/24 maxlen: 24
82.23.118.0/24 maxlen: 24
82.23.124.0/24 maxlen: 24
82.23.125.0/24 maxlen: 24
82.23.127.0/24 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.174.0/24 maxlen: 24
82.29.115.0/24 maxlen: 24
82.29.122.0/24 maxlen: 24
178.83.42.0/23 maxlen: 24
178.83.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a5:44:48:05:e9:ad:87:01:9d:af:f9:1c:d8:97:61:f2:e3:0a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 12 00:36:06 2026 GMT
Not After : Feb 11 00:41:06 2027 GMT
Subject: CN=4FA08E644A7075E117DAEA1606737081C9E48879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:6a:2e:49:97:38:a2:5a:d9:d2:40:bf:d9:
80:9f:08:be:bc:1f:4f:cb:24:27:b4:d0:81:54:00:
ff:44:68:dc:7e:34:03:66:b1:1d:15:e6:eb:fe:3b:
df:07:5d:3d:78:07:f7:00:53:91:4a:ca:13:4f:ed:
49:a0:b7:85:f2:3c:65:fa:70:f2:e2:5b:6e:72:04:
6c:23:d9:d2:37:92:25:9e:bd:d4:a4:74:3a:c8:53:
54:b7:1b:f8:51:a6:b2:c7:08:28:a3:6e:1e:98:cf:
c0:14:4b:83:ec:0c:80:9b:9c:f4:75:f3:26:90:49:
fa:08:47:b1:13:9c:d4:6f:e4:d2:f7:22:84:ad:5b:
7a:34:78:09:83:3f:97:58:5c:b1:3c:3f:c7:58:e2:
4d:e3:04:7b:3f:1c:e7:99:29:28:17:97:b3:09:1c:
a0:b2:11:31:f0:b9:40:fd:d3:01:c4:bd:ac:0c:2a:
3d:c2:3f:41:e7:ef:49:a7:91:0e:66:e6:e3:09:ce:
72:43:2d:9a:e1:b1:c9:b1:b6:5c:a6:59:dc:b4:37:
e8:40:9d:98:d3:48:23:55:e7:c3:71:de:f1:db:a7:
ac:a0:2e:d8:9c:d3:b4:1b:f9:bd:f0:3d:1c:e0:29:
b7:c7:32:1a:8f:7c:4f:88:fc:6a:a0:7a:01:31:dd:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:8E:64:4A:70:75:E1:17:DA:EA:16:06:73:70:81:C9:E4:88:79
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.60.0/23
82.22.158.0/24
82.23.92.0-82.23.118.255
82.23.124.0/23
82.23.127.0/24
82.23.140.0/23
82.23.174.0/24
82.29.115.0/24
82.29.122.0/24
178.83.42.0/23
178.83.242.0/23
Signature Algorithm: sha256WithRSAEncryption
87:c6:b6:0d:87:82:e5:da:e8:74:4b:0e:38:24:14:56:80:56:
23:d8:43:dd:4d:4f:e4:55:97:ef:4d:1c:31:09:7b:e5:7b:2f:
18:1d:a4:a3:f6:d7:ca:ea:8d:a2:c9:dd:bf:e1:71:46:d1:1d:
92:ec:36:1a:99:95:eb:35:d5:1d:83:0a:bc:6a:2c:d6:51:fc:
4b:87:e5:28:72:76:6d:3a:93:4c:4a:eb:4d:2b:b3:5d:4e:27:
5a:b2:ca:61:bc:6f:02:71:da:92:f4:26:64:35:96:06:e1:81:
26:29:d9:6f:bb:ac:db:8c:25:e5:92:3c:9f:06:37:0b:4f:6a:
25:d7:94:d0:15:51:40:dc:a5:77:dc:ca:04:ac:69:ec:cc:d1:
24:df:4b:07:14:dc:79:3b:ae:ff:22:52:c6:87:a7:26:0d:3e:
c6:c4:f0:38:a7:86:40:cd:45:58:9b:6b:de:7f:52:6b:29:2b:
2e:5a:9b:73:8b:80:18:29:99:bb:a7:53:01:e4:f9:27:61:d0:
56:8e:c1:a3:95:53:48:11:7f:27:ca:fa:cb:0b:0f:2d:72:d1:
bf:03:61:b0:65:23:fe:ad:91:12:58:d0:4d:9c:6e:27:fe:09:
53:24:2e:3d:b0:01:3c:36:76:cb:11:99:23:01:05:e0:05:b2:
e1:0c:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:31 2026 by rpki-client