Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa
File:                     AS6762.roa (raw, json)
Hash identifier:          8VyOgsA5hAfVsFJWgxXxEwyQ8I0gQ5Jju9JWIclln74=
Subject key identifier:   A1:93:69:E9:68:12:30:92:46:EA:1F:CB:C1:95:2F:A7:3A:9E:16:86
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       111877625F4405046EE6911FFB6EE560FEAE97D6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa
Signing time:             Thu 24 Sep 2026 11:29:26 +0000
ROA not before:           Thu 24 Sep 2026 11:24:26 +0000
ROA not after:            Thu 23 Sep 2027 11:29:26 +0000
asID:                     6762
IP address blocks:        51.146.191.0/24 maxlen: 24
                          51.146.211.0/24 maxlen: 24
                          51.241.117.0/24 maxlen: 24
                          188.220.40.0/24 maxlen: 24
                          188.220.96.0/24 maxlen: 24
                          188.220.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:77:62:5f:44:05:04:6e:e6:91:1f:fb:6e:e5:60:fe:ae:97:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Sep 24 11:24:26 2026 GMT
            Not After : Sep 23 11:29:26 2027 GMT
        Subject: CN=A19369E96812309246EA1FCBC1952FA73A9E1686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:48:51:df:d4:e1:e8:df:83:af:99:f2:65:
                    99:5c:6a:4c:e5:ae:81:d6:8d:04:a1:d8:a7:20:02:
                    ff:fa:1f:ae:01:88:d6:25:be:33:ac:c2:0d:54:a0:
                    54:f4:31:11:2d:04:36:3e:4a:73:43:5c:4e:66:d4:
                    01:8e:14:85:d4:5e:3b:1e:ff:21:84:1d:fd:84:96:
                    09:10:a8:9e:3c:b4:c0:34:c4:46:18:0b:3e:92:d1:
                    96:7a:c9:b8:06:5d:25:d9:f4:eb:6f:45:a9:97:ba:
                    b0:a5:d0:a2:68:22:dc:13:b7:f2:23:d5:f4:69:80:
                    24:94:38:45:60:ac:bb:81:22:46:75:c0:a7:99:fa:
                    76:65:45:ab:ba:35:cf:7d:45:6c:51:91:7c:8d:9c:
                    37:18:9b:b5:6f:c0:90:a2:ef:cc:4e:8d:df:18:71:
                    35:3d:01:36:57:25:34:45:44:a2:ed:c6:3f:d2:d6:
                    f5:68:99:92:4f:65:f9:55:cc:a2:9c:3b:b8:32:df:
                    0e:46:cf:81:b9:86:c1:6d:f5:97:88:15:91:f8:53:
                    cc:28:cc:0f:3e:46:f1:a5:b2:9c:42:21:ac:07:c8:
                    d0:bb:f6:fb:89:89:46:43:6a:e9:a0:b9:53:15:44:
                    d4:3a:b0:fd:a7:a4:2b:ca:76:57:98:23:5e:c0:8e:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:93:69:E9:68:12:30:92:46:EA:1F:CB:C1:95:2F:A7:3A:9E:16:86
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.191.0/24
                  51.146.211.0/24
                  51.241.117.0/24
                  188.220.40.0/24
                  188.220.96.0/24
                  188.220.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:a1:ba:31:a7:80:fc:de:7c:37:cb:99:5e:04:c7:d8:dc:
         54:a3:ab:03:91:64:25:61:31:64:b3:e2:ff:14:17:f0:3d:06:
         5f:93:e8:a9:8b:9f:d4:08:88:d7:a6:ae:48:2b:01:45:e7:15:
         79:37:d4:4d:1c:62:80:76:fc:d8:98:d0:39:bb:17:c1:cb:93:
         d1:55:14:74:b9:ad:33:ea:67:fe:20:aa:46:57:66:d2:51:ee:
         66:27:a3:66:11:35:aa:8f:77:a6:66:00:dd:c3:9d:7e:8c:93:
         0d:cf:fb:f8:3a:9a:7c:27:43:65:c6:5c:fa:48:62:b5:74:27:
         96:34:84:84:4d:d6:c3:76:92:e3:1b:79:fa:2e:fd:c4:c2:07:
         22:73:37:92:54:01:4c:b9:7d:01:63:08:81:b2:78:38:11:31:
         db:a8:36:5e:d1:df:00:8a:30:b3:d9:d5:57:92:f6:38:aa:3c:
         e9:27:75:d6:31:14:00:0a:8b:5b:fb:66:50:bb:8a:9f:22:34:
         f7:7a:89:56:0b:21:8f:13:c7:70:2f:c5:55:ec:04:35:7a:fc:
         35:f9:d1:c3:1d:94:b2:6f:bc:9c:90:67:ae:52:15:16:e8:72:
         64:12:02:a5:60:1c:8b:55:ad:1f:72:c0:52:17:c6:c3:82:a1:
         07:c8:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:34:20 2026 by rpki-client