Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12027.roa
File: AS12027.roa (raw, json)
Hash identifier: X2Na0/Oj0Eu/QJ/53BF3E3l3TxobFPjjp/3O7iAI2OI=
Subject key identifier: 6E:2D:20:71:00:1E:94:BC:AF:18:5E:34:A8:CC:E9:C6:ED:3B:37:72
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4CFEED39E15A16135ACB74D36D4E5584CF16F49D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12027.roa
Signing time: Tue 28 Oct 2025 09:09:14 +0000
ROA not before: Tue 28 Oct 2025 09:04:14 +0000
ROA not after: Tue 27 Oct 2026 09:09:14 +0000
asID: 12027
IP address blocks: 178.92.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:ed:39:e1:5a:16:13:5a:cb:74:d3:6d:4e:55:84:cf:16:f4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 28 09:04:14 2025 GMT
Not After : Oct 27 09:09:14 2026 GMT
Subject: CN=6E2D2071001E94BCAF185E34A8CCE9C6ED3B3772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:f4:e5:40:f1:75:a6:e2:89:cb:44:2e:31:
b7:3b:16:64:05:c4:b6:a4:19:c6:68:ea:46:d2:cd:
22:f3:5c:e0:ab:29:5a:bc:83:59:73:8c:65:2a:3f:
79:8a:65:b3:59:84:cc:ae:b2:98:3a:50:5b:47:ab:
8a:c1:a8:bd:c6:41:23:60:e6:1b:a3:64:85:67:d6:
d6:11:47:fc:c9:a7:51:74:cf:50:b7:63:0e:b1:7b:
92:4d:ab:af:2c:c5:9b:e5:87:7d:f7:a1:6a:3e:c8:
55:10:35:dc:b5:af:13:ff:85:ab:36:0f:bc:dc:29:
84:7f:03:50:2e:c9:c9:81:40:61:58:d5:ee:e4:2f:
49:35:43:9b:78:fe:13:89:6a:4a:6a:cb:67:b1:3f:
ec:20:fb:51:a2:6b:19:24:5c:e0:ad:f7:9b:af:7e:
8e:85:37:73:0a:5f:d6:a3:29:25:a8:8a:f7:a3:e9:
dd:75:9e:d5:33:dc:2d:9f:21:7c:24:eb:62:6e:c1:
25:1f:7d:ea:4e:74:23:e1:e7:6a:03:f5:5f:b6:b2:
15:0c:4b:82:f1:ef:96:1d:1d:a3:65:b8:a9:90:1f:
e9:6e:7c:34:55:52:95:f8:41:21:11:25:04:71:5f:
74:3c:87:eb:2f:2d:20:56:6a:c5:3d:ff:8c:b8:34:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:20:71:00:1E:94:BC:AF:18:5E:34:A8:CC:E9:C6:ED:3B:37:72
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.72.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cb:d4:0b:0f:44:d4:33:d8:19:5c:af:88:da:ed:a9:a3:69:
10:da:4a:75:83:82:cb:cc:27:0f:4b:e0:7d:4a:5b:6b:c3:0f:
02:8d:c7:d6:45:d3:6a:87:ae:cb:a2:e2:49:8c:1c:45:01:4d:
2f:73:ec:99:af:66:be:25:b5:85:eb:7c:0a:e7:c8:96:47:a0:
e2:48:72:50:63:67:77:12:cd:bf:d7:52:09:a0:7b:0d:92:cc:
82:be:56:15:4e:53:e9:41:72:be:0e:56:49:f7:ee:23:35:51:
a7:0d:de:da:51:ca:8b:d2:9a:1e:86:97:76:2c:65:35:da:20:
44:98:11:3c:b0:ea:d3:23:bb:74:00:01:df:3c:4d:fc:f8:e4:
01:16:3e:bf:0d:9d:58:d7:72:a2:0c:7f:31:71:ec:07:b2:34:
34:7e:b5:a9:cb:c1:24:3d:dc:52:ef:f0:99:04:82:a8:06:f4:
be:ad:8f:17:96:49:1c:a6:8a:b9:e8:0d:74:52:4b:6f:17:01:
fa:82:98:d4:a0:51:0d:75:67:33:99:28:42:47:28:ae:54:d4:
47:16:46:80:ad:5b:dc:e9:3b:af:80:c1:ac:78:b5:b8:76:53:
fd:21:3d:4f:f2:d2:27:dc:39:80:d9:75:13:3b:95:34:9e:78:
8a:9b:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:11 2025 by rpki-client