Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS63793.roa
File:                     AS63793.roa (raw, json)
Hash identifier:          iCsGnXRT1STKvaC5cNDVsCnyM+kKgxgGTJ395yxmC20=
Subject key identifier:   C0:37:F8:D5:75:C8:7F:EC:43:5D:44:E5:8D:C3:60:F6:97:A7:78:91
Certificate issuer:       /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial:       6C15BCE402A408E284B3AF3A4B04AB2D50802A9F
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS63793.roa
Signing time:             Wed 16 Sep 2026 07:25:20 +0000
ROA not before:           Wed 16 Sep 2026 07:20:20 +0000
ROA not after:            Wed 15 Sep 2027 07:25:20 +0000
asID:                     63793
IP address blocks:        212.74.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 08:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:15:bc:e4:02:a4:08:e2:84:b3:af:3a:4b:04:ab:2d:50:80:2a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
        Validity
            Not Before: Sep 16 07:20:20 2026 GMT
            Not After : Sep 15 07:25:20 2027 GMT
        Subject: CN=C037F8D575C87FEC435D44E58DC360F697A77891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:19:d8:4e:f8:74:50:f7:87:79:b4:37:6a:
                    01:ae:66:80:a2:f1:52:85:c4:3e:be:68:8e:0b:32:
                    30:61:2d:d8:57:50:1f:6a:91:c2:b9:53:0e:92:e3:
                    83:b8:ec:07:76:fc:9b:e2:3c:34:4e:74:4a:c7:95:
                    e9:2e:ce:58:59:f3:46:26:ff:2a:16:3f:49:97:c2:
                    3c:1c:62:ca:e0:6c:43:1a:ce:a7:2c:17:ee:8d:5b:
                    e1:ff:41:73:45:f8:10:9b:21:05:06:a9:0f:f2:80:
                    fb:92:78:25:a4:a4:1e:5d:8d:08:12:73:df:14:37:
                    c4:57:b3:f1:71:da:f0:36:39:e2:7a:33:e0:e7:9d:
                    95:c8:f1:f9:2f:20:7c:c0:a9:09:29:4d:3f:a5:77:
                    9f:a9:07:37:9e:d7:9f:fd:1b:91:a6:7c:f1:de:0f:
                    9f:91:cc:7a:91:76:5d:77:5a:cf:78:e7:aa:d2:5f:
                    fb:1d:68:a1:dc:e6:47:b8:18:ef:94:51:66:1f:fd:
                    3a:db:28:66:21:4f:a0:f6:ec:eb:fd:f9:15:ea:f5:
                    4b:2d:bb:b2:a1:67:57:ed:5b:44:88:63:6a:a7:65:
                    2a:70:d8:d3:6b:02:13:8c:00:f8:fe:35:6a:17:fa:
                    2d:3d:b1:90:97:73:cb:b5:4f:5a:2e:eb:d9:a4:0e:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:F8:D5:75:C8:7F:EC:43:5D:44:E5:8D:C3:60:F6:97:A7:78:91
            X509v3 Authority Key Identifier:
                keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS63793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.74.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:e6:cd:43:16:6f:f2:db:71:bc:21:f8:9d:b8:0f:d8:b1:2b:
         02:66:50:4b:df:95:ac:c5:59:28:de:e7:7b:fc:86:fa:f9:16:
         ac:3d:f9:6a:69:1b:60:b5:97:b8:b5:db:e2:6c:78:eb:e1:42:
         cb:ab:35:89:f5:aa:d6:54:f0:db:51:b6:6a:18:9b:c1:9f:ec:
         54:af:40:48:b5:68:20:6e:4b:93:c7:22:ef:c8:66:56:44:ff:
         df:88:22:56:6c:59:c6:ad:d1:61:6c:e5:a3:76:cc:f3:46:79:
         4f:0d:d3:bc:0f:c5:e0:16:3a:76:1a:c7:87:af:9e:b2:8f:25:
         8e:4c:cc:78:cc:f1:25:4e:fa:1b:8d:23:f5:eb:0f:0d:6f:8d:
         e1:d3:ee:e4:79:45:66:1d:24:3f:ba:f5:a6:cf:ca:a9:a5:f9:
         ad:01:0d:51:da:19:c5:a1:74:8c:a6:6c:49:df:7e:6c:0a:98:
         ea:d7:1e:16:80:f1:e3:e5:da:a5:ca:83:33:17:de:59:e4:64:
         81:d0:64:6c:8c:4a:36:0a:8e:a5:1d:2b:de:a1:dd:cb:19:3f:
         7b:6f:4e:f2:6c:7c:00:4c:9a:fd:7e:2d:7e:af:fa:22:3a:9b:
         44:19:22:1c:44:c1:d4:c8:8c:ab:30:4a:67:a4:1f:7c:5c:82:
         1b:6d:89:8c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUbBW85AKkCOKEs686SwSrLVCAKp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTYwNzIwMjBaFw0yNzA5MTUwNzI1MjBaMDMxMTAvBgNV
BAMTKEMwMzdGOEQ1NzVDODdGRUM0MzVENDRFNThEQzM2MEY2OTdBNzc4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GxnYTvh0UPeHebQ3agGuZoCi
8VKFxD6+aI4LMjBhLdhXUB9qkcK5Uw6S44O47Ad2/JviPDROdErHlekuzlhZ80Ym
/yoWP0mXwjwcYsrgbEMazqcsF+6NW+H/QXNF+BCbIQUGqQ/ygPuSeCWkpB5djQgS
c98UN8RXs/Fx2vA2OeJ6M+DnnZXI8fkvIHzAqQkpTT+ld5+pBzee15/9G5GmfPHe
D5+RzHqRdl13Ws9456rSX/sdaKHc5ke4GO+UUWYf/TrbKGYhT6D27Ov9+RXq9Ust
u7KhZ1ftW0SIY2qnZSpw2NNrAhOMAPj+NWoX+i09sZCXc8u1T1ou69mkDpMRAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUwDf41XXIf+xDXUTljcNg9peneJEwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTNjM3OTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUSj0w
DQYJKoZIhvcNAQELBQADggEBAN3mzUMWb/Lbcbwh+J24D9ixKwJmUEvflazFWSje
53v8hvr5Fqw9+WppG2C1l7i12+JseOvhQsurNYn1qtZU8NtRtmoYm8Gf7FSvQEi1
aCBuS5PHIu/IZlZE/9+IIlZsWcat0WFs5aN2zPNGeU8N07wPxeAWOnYax4evnrKP
JY5MzHjM8SVO+huNI/XrDw1vjeHT7uR5RWYdJD+69abPyqml+a0BDVHaGcWhdIym
bEnffmwKmOrXHhaA8ePl2qXKgzMX3lnkZIHQZGyMSjYKjqUdK96h3csZP3tvTvJs
fABMmv1+LX6v+iI6m0QZIhxEwdTIjKswSmekH3xcghttiYw=
-----END CERTIFICATE-----
Generated at Thu Sep 17 22:58:40 2026 by rpki-client