Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS22363.roa
File:                     AS22363.roa (raw, json)
Hash identifier:          dU0H3HOqAFzvSS0oq+C/hDeUF9qszI3CRj95pOjjFuM=
Subject key identifier:   BD:C6:B5:45:65:7A:7D:10:07:22:57:D0:C9:8C:9C:A8:4E:94:21:D0
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       4F3CE4F8200F6124AA9DF4D5D21A8B5D971ACD06
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS22363.roa
Signing time:             Sun 04 Oct 2026 00:52:43 +0000
ROA not before:           Sun 04 Oct 2026 00:47:43 +0000
ROA not after:            Sun 03 Oct 2027 00:52:43 +0000
asID:                     22363
IP address blocks:        82.81.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3c:e4:f8:20:0f:61:24:aa:9d:f4:d5:d2:1a:8b:5d:97:1a:cd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct  4 00:47:43 2026 GMT
            Not After : Oct  3 00:52:43 2027 GMT
        Subject: CN=BDC6B545657A7D10072257D0C98C9CA84E9421D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:39:ef:f3:f2:d5:34:91:ab:e2:d6:60:d0:
                    f4:4b:3b:41:b7:35:00:d7:c0:56:7e:a5:a3:6c:6b:
                    96:af:10:43:f9:53:b5:c6:12:21:eb:45:03:fa:d3:
                    19:f0:68:db:61:7e:bc:05:2c:62:91:ba:4d:a1:a9:
                    ee:2f:19:43:15:60:2a:c1:8c:1d:89:b1:5c:05:33:
                    03:bc:b1:29:86:eb:8c:9a:d7:40:e4:88:c8:10:a7:
                    b2:ca:87:5c:c4:87:d5:19:77:ad:82:86:2d:eb:8f:
                    13:4b:91:77:39:e8:21:d2:07:ed:ce:06:0c:46:c8:
                    cc:81:a9:a2:9a:d2:2a:6f:a9:cb:79:ef:0a:83:df:
                    7e:cb:12:ac:90:01:d9:a7:2c:8e:42:c0:49:cc:95:
                    a6:48:14:fc:4e:48:84:f9:57:91:5a:f1:75:65:52:
                    78:95:01:d5:2a:04:91:43:ff:b1:2e:4b:3a:c5:5e:
                    cc:19:1e:83:35:fd:1a:2f:0b:1f:e4:08:70:00:81:
                    e7:84:67:7c:1b:5a:d3:16:ee:ae:79:87:9c:a0:e3:
                    a3:70:6d:76:ee:c0:c6:e9:84:13:e8:db:7e:7f:a3:
                    48:b6:20:21:f8:26:a0:c4:01:54:7c:16:98:27:b9:
                    18:9f:d8:7e:c5:87:7c:75:60:a2:01:b8:6f:93:a0:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:B5:45:65:7A:7D:10:07:22:57:D0:C9:8C:9C:A8:4E:94:21:D0
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS22363.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.81.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:d3:6b:4b:45:57:b2:5f:32:ab:4d:0a:06:01:1b:4c:37:
         e4:a7:6f:53:52:f9:98:cc:88:5f:25:08:96:bf:d0:9c:d9:f9:
         0f:30:3a:b4:88:5f:36:33:05:22:b3:0a:01:40:50:98:1e:43:
         bf:3d:03:9d:27:9e:38:12:4d:cc:5a:65:54:91:c3:83:24:1a:
         1c:29:ff:ac:65:c3:07:93:9b:a7:c5:1e:44:7e:aa:d6:46:da:
         b8:4f:48:df:4d:98:6f:b2:f3:8b:11:47:55:a8:25:94:a4:3f:
         4b:aa:ed:84:50:e8:f7:aa:19:e4:86:4f:1d:a0:b6:be:ca:38:
         12:39:d3:76:ec:37:c1:f4:a3:60:a9:12:93:fd:fa:2e:30:40:
         7d:93:f8:81:9d:90:ca:f7:a0:a1:7b:2c:06:49:99:95:b2:a5:
         60:87:b9:84:fa:cc:8c:c4:b0:9d:d6:22:21:44:ce:32:a5:df:
         e2:5d:9d:8d:85:9e:bc:e2:8c:72:25:88:f1:f2:17:94:cf:24:
         20:50:42:75:60:72:86:db:a6:d7:73:e1:5a:2f:ce:e5:82:06:
         de:18:9e:cd:4a:04:c4:85:5e:38:ce:39:eb:9b:8e:4c:9b:69:
         44:4a:48:03:a7:42:c6:13:a6:76:a6:d5:d5:f9:ae:cb:0c:74:
         4a:53:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:27 2026 by rpki-client