Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS201073.roa
File:                     AS201073.roa (raw, json)
Hash identifier:          vkXSOLMq1cayc8ewj6k6WcWglm+OZrFx6+7XCtJb2IA=
Subject key identifier:   CC:1D:7B:90:E5:6F:6F:8A:69:10:6B:99:BD:D7:4A:F9:86:A6:E0:13
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       37117857588573CBFADDF8DCF2694FF091A0F85B
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS201073.roa
Signing time:             Sun 04 Oct 2026 00:52:44 +0000
ROA not before:           Sun 04 Oct 2026 00:47:44 +0000
ROA not after:            Sun 03 Oct 2027 00:52:44 +0000
asID:                     201073
IP address blocks:        82.80.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:11:78:57:58:85:73:cb:fa:dd:f8:dc:f2:69:4f:f0:91:a0:f8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:44 2026 GMT
            Not After : Oct  3 00:52:44 2027 GMT
        Subject: CN=CC1D7B90E56F6F8A69106B99BDD74AF986A6E013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:83:12:48:52:05:ab:86:5c:6d:9e:b9:6b:
                    bd:a3:d1:a0:c1:c1:0d:51:98:22:12:ac:cd:5d:9c:
                    81:fd:08:d7:f3:95:3c:a7:ae:55:4c:d6:f2:6b:ba:
                    b7:cc:59:13:d5:15:5f:88:8c:1e:38:01:38:22:d6:
                    7e:9f:91:fb:05:71:e4:87:b9:d1:fc:d0:f1:ab:a5:
                    a9:11:76:fa:e3:4b:c1:f8:71:54:62:00:62:1c:2b:
                    0d:fa:18:7d:5f:7c:bb:56:b7:be:e1:fc:af:0f:07:
                    47:c6:cf:49:d9:53:07:a8:75:46:69:6e:85:c0:b6:
                    8d:3e:8b:c4:4e:45:b9:56:8b:ab:16:94:10:01:54:
                    8d:a3:c2:8e:be:79:2b:7e:8d:b8:ad:0a:16:c5:0b:
                    b1:0c:0a:9a:b2:f4:80:e4:f4:c6:a8:f8:3c:e3:8a:
                    5f:c9:a5:be:79:ce:c8:2a:64:36:49:11:61:90:14:
                    23:6a:80:15:1d:5a:3a:9e:3f:1e:53:db:0c:72:64:
                    76:09:67:89:70:5a:cb:a6:bd:0a:44:8d:46:4c:ed:
                    1a:41:d6:aa:be:a7:3b:d1:5b:2f:d9:31:ad:c2:b2:
                    71:bc:33:11:5f:88:da:f3:39:4a:c7:0e:a5:da:4e:
                    0e:f8:a5:aa:f8:dd:95:77:55:27:e8:ba:12:26:ea:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1D:7B:90:E5:6F:6F:8A:69:10:6B:99:BD:D7:4A:F9:86:A6:E0:13
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS201073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.80.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:47:8a:73:a5:ba:43:4a:b8:97:d3:16:8c:62:b0:0f:8c:
         3c:81:a5:3d:d9:72:fb:e2:72:00:83:3f:7d:d5:f9:14:86:db:
         6a:fc:a6:b3:df:53:3c:c1:65:8c:2b:ca:3a:0b:c1:a5:47:15:
         3e:64:8a:ad:5a:34:19:47:c6:79:43:62:33:f0:31:97:9a:67:
         84:cd:aa:95:9a:94:ae:36:ff:8e:7a:6d:8e:20:4b:9f:28:98:
         44:eb:bd:6e:49:42:5d:5f:6f:64:3a:2a:c7:c3:ac:28:b4:fd:
         b5:94:3d:92:b5:0d:f0:1c:9c:16:de:2b:5f:17:82:22:2d:ab:
         05:49:bc:5c:6b:84:f2:d3:13:eb:c1:98:20:19:b2:ae:cd:52:
         c1:4c:fe:9c:8e:4c:7c:83:da:f3:e7:ba:17:12:b0:b6:b1:12:
         bd:77:d0:a7:29:50:3f:11:06:7a:c1:e7:7b:33:4c:64:a7:99:
         8c:a0:03:0a:c0:30:85:06:9e:a5:83:28:1c:4a:8d:c9:f1:b8:
         af:a0:a3:44:45:d3:ff:36:70:7a:c6:1b:28:23:42:56:22:26:
         a2:4e:5c:09:08:41:83:68:d7:f1:b9:1e:07:db:23:c8:4d:45:
         4f:34:f2:3c:53:70:ea:49:fd:86:b4:44:e8:1c:1a:68:b0:09:
         fb:0f:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:54 2026 by rpki-client