Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218911.roa
File:                     AS218911.roa (raw, json)
Hash identifier:          Wded+nDQsBeHNNyPIGYcmgMLFCg6fZHFMA4dKDHrVcg=
Subject key identifier:   1E:E3:3C:E3:D4:BD:8A:B1:E2:89:2C:DF:7C:01:5F:C4:64:82:E8:46
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       5894CFB5040C66B9D814F3AEF646AF9527134543
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218911.roa
Signing time:             Fri 23 Oct 2026 09:25:31 +0000
ROA not before:           Fri 23 Oct 2026 09:20:31 +0000
ROA not after:            Fri 22 Oct 2027 09:25:31 +0000
asID:                     218911
IP address blocks:        177.177.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 11:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:94:cf:b5:04:0c:66:b9:d8:14:f3:ae:f6:46:af:95:27:13:45:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Oct 23 09:20:31 2026 GMT
            Not After : Oct 22 09:25:31 2027 GMT
        Subject: CN=1EE33CE3D4BD8AB1E2892CDF7C015FC46482E846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:2d:e0:80:91:33:7c:d6:92:d1:8f:fc:9b:
                    76:70:96:84:79:6f:be:00:57:06:3c:6d:78:81:67:
                    47:6d:47:92:3c:ce:fb:f8:1d:ca:77:e7:12:ce:61:
                    e2:9a:a9:48:ac:ad:0d:93:06:b0:d4:eb:56:96:c2:
                    a9:97:f8:df:bd:af:1b:84:ab:74:6b:cd:b4:9f:1b:
                    bb:4e:5a:be:04:d6:0c:8b:32:44:15:7b:34:7e:11:
                    b0:90:e2:82:46:f6:08:d1:33:b2:14:9e:d2:d3:1a:
                    ff:33:ee:dd:e8:3f:82:16:b4:4f:da:67:e1:01:c1:
                    b2:39:d4:12:11:e5:6c:57:a8:83:fe:3e:ae:aa:4e:
                    95:ef:9a:73:1f:89:24:7b:f1:81:ff:5b:14:92:5e:
                    c7:c2:e0:43:35:2a:08:f7:47:ce:e6:7d:7b:de:b5:
                    38:a6:d0:49:14:8f:0b:53:94:41:60:82:f0:11:4b:
                    8a:07:ac:c8:cf:62:94:24:36:51:b1:a2:6c:50:d4:
                    d1:58:56:27:b2:d5:54:e1:ae:45:ca:46:14:3c:61:
                    32:72:0c:53:38:ff:2a:56:ae:09:87:fe:ac:d0:b2:
                    2c:1e:80:5a:61:65:26:6d:4f:9f:22:87:7b:81:7b:
                    94:f2:e7:4f:2b:58:cf:8b:93:f8:52:b5:0d:87:92:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:3C:E3:D4:BD:8A:B1:E2:89:2C:DF:7C:01:5F:C4:64:82:E8:46
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218911.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.177.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:72:76:18:67:bd:5d:2e:57:3a:3e:63:47:c6:4f:d6:0b:c8:
         ae:73:6c:b2:a3:70:71:33:9b:50:e8:14:8f:69:ca:46:73:d7:
         cb:7f:45:6e:32:9d:ca:a8:36:8d:b3:5a:c6:af:b8:86:07:bc:
         ae:eb:ca:6a:d3:bb:29:53:65:08:7b:9b:ee:51:84:a9:07:1d:
         7a:9f:0d:58:9e:d1:81:eb:ec:a3:8b:c9:8c:9f:8b:f6:6d:49:
         90:86:cd:db:16:f5:9e:5d:e2:bb:a5:4d:38:42:dc:49:51:05:
         47:13:d7:54:cb:bd:8d:00:ae:68:ae:a3:a0:ed:74:28:7e:23:
         5c:bd:b9:e3:e6:5d:52:a9:bd:81:3d:f2:2b:0c:92:2b:40:38:
         9d:8e:58:8d:f9:53:bc:46:79:ac:d7:ff:f1:df:72:d8:4f:55:
         65:c9:07:43:0e:d4:1d:f3:4e:02:c9:28:96:91:e1:24:c0:13:
         ff:55:e6:df:3d:67:18:77:1b:d0:8a:5c:5d:86:85:6c:98:39:
         3e:b6:89:41:39:23:3b:3d:b5:21:b3:84:69:cb:7e:19:69:8a:
         a5:5c:b0:b8:b5:f0:b8:80:64:8e:0b:2b:d4:55:dd:51:2e:6a:
         45:0a:aa:c2:40:4c:7f:ca:48:f8:68:1e:b2:40:32:b9:34:cb:
         2b:a0:95:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:21 2026 by rpki-client