Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: pJfJgun4BrHQbPLVUaH6Az26BBkg3kyO4OGdSEWlZoA=
Subject key identifier: 7C:94:33:30:CD:8D:F4:49:7B:85:9C:3A:74:C5:E6:0B:CA:B0:10:12
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5B52F954E5ED5CD56FC4B7D1826EFFD12AA873E9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS812.roa
Signing time: Sun 13 Jul 2025 04:22:08 +0000
ROA not before: Sun 13 Jul 2025 04:17:08 +0000
ROA not after: Sun 12 Jul 2026 04:22:08 +0000
asID: 812
IP address blocks: 95.134.114.0/23 maxlen: 24
178.94.167.0/24 maxlen: 24
178.94.191.0/24 maxlen: 24
178.95.77.0/24 maxlen: 24
178.95.82.0/24 maxlen: 24
178.95.236.0/24 maxlen: 24
178.95.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:52:f9:54:e5:ed:5c:d5:6f:c4:b7:d1:82:6e:ff:d1:2a:a8:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 13 04:17:08 2025 GMT
Not After : Jul 12 04:22:08 2026 GMT
Subject: CN=7C943330CD8DF4497B859C3A74C5E60BCAB01012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:cf:47:cd:a9:17:bd:00:08:d5:b8:36:47:
98:a6:01:30:62:a0:ba:5c:a7:92:c7:6c:14:95:1d:
14:c2:5c:36:6e:05:3b:84:17:1a:00:d5:d6:cd:f8:
d5:d0:40:19:c1:f4:90:4a:0a:56:9a:ad:15:1b:6f:
c4:9a:ec:6e:58:04:b2:0b:71:05:29:32:64:2e:0c:
9c:e3:d0:bc:58:76:16:c5:87:3e:3a:c1:54:42:45:
52:d9:31:a6:2e:49:a1:0e:b9:8f:7d:07:9e:9c:33:
a9:17:8c:11:e7:40:db:94:27:b4:5c:2d:8c:8a:d1:
50:e6:c9:db:31:26:3f:01:e2:9a:bf:e5:ef:95:f2:
27:59:ee:8f:fd:7e:4e:b1:4d:b6:b0:01:20:72:3f:
cc:75:5e:d2:51:cf:3f:07:4c:b3:a7:4e:a5:02:cc:
08:d3:7e:84:0a:77:c8:ed:27:a6:c0:b3:10:38:f7:
b6:f0:ca:72:45:7c:54:fb:4a:ce:35:4d:14:b8:9b:
9b:e8:0a:9a:2f:65:83:85:34:ad:d1:12:f9:7e:ac:
dc:d8:6c:42:c6:c6:29:ca:f9:55:dc:61:4c:f2:68:
d1:d5:0f:62:c7:c5:69:c1:d8:30:ad:96:a2:a5:7f:
8a:95:b7:83:3e:28:33:eb:08:82:94:27:68:31:61:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:33:30:CD:8D:F4:49:7B:85:9C:3A:74:C5:E6:0B:CA:B0:10:12
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.114.0/23
178.94.167.0/24
178.94.191.0/24
178.95.77.0/24
178.95.82.0/24
178.95.236.0/24
178.95.251.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:fd:8a:8b:ae:f9:8a:65:d8:66:24:c6:4a:d6:c4:76:30:ef:
61:21:b4:14:73:e6:c4:31:d3:9f:77:c3:bf:01:9a:a9:30:b9:
15:3d:87:7d:05:2c:36:b1:ac:51:ba:84:b9:b1:9b:0a:85:19:
6e:bc:61:45:d0:81:1c:19:b2:15:c0:3d:6b:b7:2e:a3:e5:c0:
5b:c3:c6:a4:3d:fc:9d:33:1d:43:01:45:85:0a:84:e4:ff:27:
9f:82:1b:8c:74:ff:71:db:05:61:3e:9f:01:27:ec:75:30:d7:
54:1a:41:3b:fa:41:71:75:40:24:ab:e2:fa:16:8d:b4:73:c5:
90:be:62:72:01:e9:8b:ba:05:a9:71:d8:47:33:e8:7e:86:a1:
6c:1a:0a:58:5d:db:37:90:ca:33:00:36:3f:ed:af:9c:1b:e3:
92:f0:5e:52:16:66:5f:5b:04:21:01:2e:dc:ae:5f:a6:ad:22:
5d:75:98:6a:79:31:22:65:00:1f:97:b9:82:e5:86:39:14:f6:
99:92:40:ec:55:f7:b6:81:74:87:72:1c:e7:81:fb:1b:06:ff:
32:4e:76:fc:44:2b:4f:60:bd:13:8e:7c:ed:8b:c4:7a:a8:31:
27:d5:65:ee:3a:30:2a:e3:fc:ca:2d:29:e8:89:37:21:e9:75:
24:6e:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:54:31 2025 by rpki-client