Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137410.roa
File:                     AS137410.roa (raw, json)
Hash identifier:          RVuRd1Qab0Stvj06dVmupHanzCZgMxvSjWDkJ7Y8JV8=
Subject key identifier:   58:10:A0:AB:64:85:DE:73:DE:68:CE:18:89:E9:F7:54:CD:F9:78:BC
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       06F9527EAB22F2A982B860DC16964DA1E5E72B3D
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137410.roa
Signing time:             Wed 21 Oct 2026 07:45:52 +0000
ROA not before:           Wed 21 Oct 2026 07:40:52 +0000
ROA not after:            Wed 20 Oct 2027 07:45:52 +0000
asID:                     137410
IP address blocks:        79.180.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f9:52:7e:ab:22:f2:a9:82:b8:60:dc:16:96:4d:a1:e5:e7:2b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 21 07:40:52 2026 GMT
            Not After : Oct 20 07:45:52 2027 GMT
        Subject: CN=5810A0AB6485DE73DE68CE1889E9F754CDF978BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:31:96:ee:4d:e8:f6:52:7e:19:37:8d:a2:
                    78:57:b7:84:21:27:f3:15:4e:49:b0:a6:02:15:6d:
                    5e:c0:49:ae:28:ea:89:5c:b4:89:1d:6f:c6:dc:67:
                    e3:aa:cb:ba:5b:f6:93:9a:d1:a3:74:4a:5d:7e:80:
                    dc:6c:e3:1a:f5:ae:99:b6:90:dd:4b:b1:ca:f2:3d:
                    b4:ed:3e:86:e9:b0:7b:7b:a2:f8:a2:8c:e4:6a:6e:
                    c0:7c:f7:f4:f2:8f:25:50:94:c1:cd:de:01:b6:4c:
                    a1:f7:72:72:e8:b9:fc:79:5e:ab:5e:e3:f4:c9:f1:
                    c1:45:4e:84:4a:bb:c8:d0:06:0d:3b:9b:37:e8:0d:
                    c5:b0:58:9f:2c:75:17:b6:35:36:88:87:20:f0:76:
                    aa:dd:8f:54:96:cb:3d:b4:cb:dc:bd:f8:52:0e:86:
                    80:d7:9a:b0:fb:c5:8b:b3:85:4b:91:85:07:dd:b8:
                    e0:ce:f3:59:35:48:e8:a0:f3:8c:46:4b:9e:33:24:
                    cd:be:ab:6c:50:b0:10:ac:74:3c:1c:0e:6f:27:67:
                    d5:c8:df:ef:8c:8c:36:5d:8f:48:76:88:18:5a:b8:
                    b0:1f:b4:53:f0:7c:99:73:ca:04:f9:2c:15:1c:bf:
                    4a:cc:31:d3:36:cf:05:7b:1d:60:20:e6:bd:db:74:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:A0:AB:64:85:DE:73:DE:68:CE:18:89:E9:F7:54:CD:F9:78:BC
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137410.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a1:53:04:54:a1:02:40:8b:ce:15:ba:59:09:8a:b9:5b:64:
         2a:64:04:5e:54:67:34:9c:9e:cd:40:a1:38:2a:0f:2f:28:86:
         9d:c2:28:6c:d0:4e:de:95:b9:ae:33:03:2e:3e:5a:e3:11:46:
         ed:85:14:88:0c:61:31:98:fb:06:a4:17:2a:11:33:a9:9c:07:
         6a:4d:4d:1e:c9:79:9f:34:2c:9a:07:aa:5c:cc:e6:c8:81:f5:
         96:47:ad:bb:f9:a0:da:a4:ec:aa:a0:dc:c4:43:b3:66:31:a4:
         20:e4:55:35:4f:82:8a:ef:e1:09:95:7f:2e:26:4b:de:7d:c8:
         25:43:48:a2:1f:2d:64:a4:9f:8a:a3:12:10:61:29:d9:ab:00:
         21:e2:39:10:1f:6f:c6:05:76:b7:b5:7b:0a:01:88:83:78:7d:
         33:9a:0d:9f:8c:54:8b:c6:54:98:76:53:df:53:c9:ef:91:a5:
         3a:8c:98:48:ac:88:be:a0:4b:4a:8e:39:13:c5:a1:72:4e:93:
         b6:ee:15:3b:0e:5b:fb:2b:75:e4:7d:96:1a:e6:2b:47:ad:5d:
         3f:05:35:02:1c:f2:18:ed:7d:95:71:97:da:8f:07:9f:04:0e:
         bf:f7:4d:12:ea:d3:c9:89:90:70:14:18:67:c5:9e:d5:24:1c:
         7d:69:48:9c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUBvlSfqsi8qmCuGDcFpZNoeXnKz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMjEwNzQwNTJaFw0yNzEwMjAwNzQ1NTJaMDMxMTAvBgNV
BAMTKDU4MTBBMEFCNjQ4NURFNzNERTY4Q0UxODg5RTlGNzU0Q0RGOTc4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VjGW7k3o9lJ+GTeNonhXt4Qh
J/MVTkmwpgIVbV7ASa4o6olctIkdb8bcZ+Oqy7pb9pOa0aN0Sl1+gNxs4xr1rpm2
kN1LscryPbTtPobpsHt7oviijORqbsB89/TyjyVQlMHN3gG2TKH3cnLoufx5Xqte
4/TJ8cFFToRKu8jQBg07mzfoDcWwWJ8sdRe2NTaIhyDwdqrdj1SWyz20y9y9+FIO
hoDXmrD7xYuzhUuRhQfduODO81k1SOig84xGS54zJM2+q2xQsBCsdDwcDm8nZ9XI
3++MjDZdj0h2iBhauLAftFPwfJlzygT5LBUcv0rMMdM2zwV7HWAg5r3bdOcDAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUWBCgq2SF3nPeaM4Yien3VM35eLwwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzc0MTAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABPtDswDQYJKoZIhvcNAQELBQADggEBAKahUwRUoQJAi84VulkJirlb
ZCpkBF5UZzScns1AoTgqDy8ohp3CKGzQTt6Vua4zAy4+WuMRRu2FFIgMYTGY+wak
FyoRM6mcB2pNTR7JeZ80LJoHqlzM5siB9ZZHrbv5oNqk7Kqg3MRDs2YxpCDkVTVP
gorv4QmVfy4mS959yCVDSKIfLWSkn4qjEhBhKdmrACHiORAfb8YFdre1ewoBiIN4
fTOaDZ+MVIvGVJh2U99Tye+RpTqMmEisiL6gS0qOORPFoXJOk7buFTsOW/srdeR9
lhrmK0etXT8FNQIc8hjtfZVxl9qPB58EDr/3TRLq08mJkHAUGGfFntUkHH1pSJw=
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:05 2026 by rpki-client