Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202264.roa
File:                     AS202264.roa (raw, json)
Hash identifier:          5vxOMyT+T45H8wHZv2w6Tzemp5wIbv31Ml/DXjPpRdI=
Subject key identifier:   8D:61:7E:0F:20:AF:2B:D4:9A:B6:26:A6:D6:0B:C7:44:DD:ED:09:BC
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       29808BD85AF8334A89D21E8117DF0B67267285BF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202264.roa
Signing time:             Tue 13 Oct 2026 19:36:10 +0000
ROA not before:           Tue 13 Oct 2026 19:31:10 +0000
ROA not after:            Tue 12 Oct 2027 19:36:10 +0000
asID:                     202264
IP address blocks:        78.105.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:80:8b:d8:5a:f8:33:4a:89:d2:1e:81:17:df:0b:67:26:72:85:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct 13 19:31:10 2026 GMT
            Not After : Oct 12 19:36:10 2027 GMT
        Subject: CN=8D617E0F20AF2BD49AB626A6D60BC744DDED09BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:aa:18:d7:81:8b:f3:74:44:56:2e:1d:c2:
                    1a:25:43:41:78:ba:73:cb:b0:f8:20:54:a2:61:46:
                    db:2f:e9:25:da:79:cd:d0:a3:a0:d6:01:fe:d2:0d:
                    04:40:e7:7f:d4:d2:7d:75:17:d4:67:02:7e:2b:8a:
                    66:ed:14:d1:e8:14:5d:bd:da:9b:45:3d:0b:dd:52:
                    f8:7c:00:02:51:9f:4e:b8:34:68:f5:67:c5:65:20:
                    f2:28:58:a4:99:37:dc:be:cd:70:a3:eb:25:93:45:
                    2f:86:1f:3e:79:07:74:ab:09:22:85:a4:94:8e:f5:
                    fc:84:de:4e:a8:d1:b6:3f:e8:e7:7c:30:c7:d8:72:
                    00:94:2e:8f:22:b9:5a:25:52:49:df:db:c9:64:d7:
                    7e:09:8a:5d:7c:ab:d3:9a:ed:36:87:c3:e9:ad:89:
                    c0:d1:ab:88:0b:3c:0b:cb:2f:95:54:34:73:ed:a0:
                    47:12:5d:b7:ce:00:b7:b3:e4:c9:d8:e1:82:56:6c:
                    ec:2b:95:50:3a:53:e3:a7:4c:e2:34:80:d8:b0:ee:
                    dd:ec:5c:5a:a6:e4:4d:78:45:33:03:d6:d0:9d:74:
                    d8:db:fc:86:6b:1c:08:31:ca:3f:77:d4:0c:60:1c:
                    c6:58:82:d5:8c:ba:4c:e4:8c:f6:d6:a1:77:55:d4:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:7E:0F:20:AF:2B:D4:9A:B6:26:A6:D6:0B:C7:44:DD:ED:09:BC
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202264.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.105.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:3b:d1:90:90:2e:fa:04:36:a0:bc:ab:d8:4e:f0:05:e0:
         cd:c9:04:ad:2f:8b:40:aa:ff:c8:a3:af:51:a2:0d:85:57:7b:
         fc:73:72:7b:74:ac:f9:47:6e:af:7a:2c:7d:13:cb:75:ec:7f:
         a2:59:b6:27:7d:c2:1a:ae:97:9f:5c:80:45:12:2f:e6:fa:3a:
         d3:84:c5:cf:f2:27:46:94:e8:b0:ca:f3:c8:8c:74:58:ac:2a:
         e0:34:a9:dd:1a:1b:85:bc:65:fd:81:7b:52:f9:76:47:a3:09:
         dd:22:a0:01:a6:68:ef:bc:01:40:56:e7:5d:67:58:16:79:1c:
         25:de:5b:7e:5c:2c:c9:2b:4d:5f:94:7a:6e:90:7c:63:e2:cc:
         82:f0:65:35:09:b6:4e:49:8c:39:58:73:e2:c8:d4:a9:4b:83:
         17:0c:88:38:a6:31:76:1a:81:7e:52:af:c6:fd:b6:29:0d:a2:
         1b:18:0b:9a:13:8b:b9:ff:3b:75:03:0a:07:f8:4b:40:36:99:
         a3:e0:40:29:3e:f4:ae:a8:43:e8:ca:69:78:66:7d:29:fb:11:
         3e:f4:bf:5b:e9:26:56:10:78:a8:ce:c3:bd:4b:32:fd:1e:7a:
         b1:7b:aa:88:c8:35:e3:80:1a:ab:d4:94:aa:65:5e:d6:59:87:
         15:e1:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:38:54 2026 by rpki-client