Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS274496.roa
File:                     AS274496.roa (raw, json)
Hash identifier:          Q5eOh/wPgNg4uFRTUTE1dujt7AVVEboQqjOLyBptjnc=
Subject key identifier:   EC:61:24:12:64:C6:72:A0:4F:FB:43:58:94:11:ED:59:8E:9F:CD:7C
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       65896E323848ABC0D5456B5EE532387B74FFC193
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS274496.roa
Signing time:             Mon 12 Oct 2026 15:47:27 +0000
ROA not before:           Mon 12 Oct 2026 15:42:27 +0000
ROA not after:            Mon 11 Oct 2027 15:47:27 +0000
asID:                     274496
IP address blocks:        152.237.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:6e:32:38:48:ab:c0:d5:45:6b:5e:e5:32:38:7b:74:ff:c1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Oct 12 15:42:27 2026 GMT
            Not After : Oct 11 15:47:27 2027 GMT
        Subject: CN=EC61241264C672A04FFB43589411ED598E9FCD7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:8d:6f:71:db:27:18:9f:7f:f8:24:ad:ee:
                    ec:4a:74:45:48:dd:8b:7a:55:21:83:06:75:50:3a:
                    06:91:ab:b4:42:96:f7:32:20:a9:77:3a:f0:f8:2d:
                    6b:f5:db:a8:96:3c:d7:78:2a:0e:8e:d0:a8:f4:23:
                    e0:6f:e4:25:24:78:d5:6f:bf:ee:73:03:ae:d6:78:
                    13:b1:84:68:3a:3e:f5:b2:73:21:2b:b5:2d:6d:10:
                    ec:9e:bd:99:12:8c:64:5c:93:13:8d:c8:70:28:03:
                    99:77:ae:a8:29:29:09:90:5d:6c:3e:82:27:ea:e3:
                    3c:9b:cc:e5:c6:9a:24:0d:79:06:43:02:1b:bd:56:
                    c3:06:cd:fe:9a:42:89:4a:69:40:63:bd:d8:a5:a5:
                    6e:71:e0:3f:b6:bf:ac:d6:45:cd:e7:db:6b:c3:d4:
                    ab:bb:6b:fa:ab:ee:15:38:24:d8:e9:a1:59:fa:0f:
                    ef:ea:6f:2a:55:4b:54:0b:7e:d6:87:5e:1b:9c:9e:
                    42:76:a7:de:17:e6:d7:5c:6d:b0:bf:3a:00:5d:3e:
                    bf:4d:34:32:02:12:ac:39:ab:5c:ae:28:91:67:ce:
                    ea:a3:5e:4a:1b:81:ca:72:ec:72:de:43:36:03:b5:
                    18:01:9a:8c:0d:65:af:a2:90:0f:1c:b9:01:3c:58:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:61:24:12:64:C6:72:A0:4F:FB:43:58:94:11:ED:59:8E:9F:CD:7C
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS274496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.237.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:69:03:9f:3e:b4:81:2a:a5:00:07:a3:99:e1:80:0d:66:52:
         bf:20:db:15:78:7e:b4:28:4c:7f:93:30:9f:a9:b8:d9:c1:6a:
         17:20:6b:4d:75:50:41:11:a7:14:97:48:79:fe:46:75:c4:78:
         2a:35:b5:d4:3c:59:65:c9:21:16:52:72:d5:26:c6:9d:09:03:
         63:5d:a5:a0:64:31:35:ec:dc:89:de:b1:67:89:26:3f:b5:92:
         53:2d:92:d9:9d:5a:fb:21:1a:6d:51:ad:72:73:ac:b9:1c:ac:
         b8:0e:51:23:01:ef:2d:ae:85:c1:ed:ea:ee:41:4e:47:db:e7:
         c4:2f:a0:60:f2:ff:59:26:79:2c:27:d1:35:b9:2e:c1:29:ff:
         89:e4:2a:82:5b:d0:60:a9:db:c8:c2:9e:1e:62:e9:31:71:98:
         2a:d7:c9:0e:b7:03:b0:72:8f:a6:63:58:98:85:21:bb:03:94:
         74:3b:46:fa:43:cd:60:25:c8:2e:18:44:f6:55:c8:9e:03:f5:
         d2:45:d8:8c:45:30:e0:00:88:51:90:76:e9:02:88:20:56:c2:
         7e:81:6f:79:4e:0c:7f:aa:fc:e9:ce:75:13:59:41:34:47:11:
         93:27:08:dc:ec:8a:4f:c8:19:9d:89:db:0e:8d:d0:48:c6:04:
         b0:67:ae:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:54 2026 by rpki-client