Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS141750.roa
File:                     AS141750.roa (raw, json)
Hash identifier:          6ouxOXsqwTXc/DyCy44wvb60P6Di06BnQb4ZYCjxhPY=
Subject key identifier:   7A:71:6F:3B:98:DB:D3:68:34:A0:94:91:D7:09:F2:2D:1B:95:B2:80
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       548E67A57503ECB9AF8A15E2FD3B0B17FFE7310B
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS141750.roa
Signing time:             Mon 19 Oct 2026 13:19:01 +0000
ROA not before:           Mon 19 Oct 2026 13:14:01 +0000
ROA not after:            Mon 18 Oct 2027 13:19:01 +0000
asID:                     141750
IP address blocks:        79.182.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8e:67:a5:75:03:ec:b9:af:8a:15:e2:fd:3b:0b:17:ff:e7:31:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 19 13:14:01 2026 GMT
            Not After : Oct 18 13:19:01 2027 GMT
        Subject: CN=7A716F3B98DBD36834A09491D709F22D1B95B280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:47:2b:bc:d2:7a:67:bc:7e:dc:e2:22:83:
                    d0:a6:ac:77:0b:97:3f:ac:95:03:09:c2:21:aa:03:
                    75:fb:21:b2:9a:09:e1:d4:48:fe:43:f7:4a:95:15:
                    58:c0:b1:3f:be:67:70:a6:54:fb:a9:b1:a5:91:0a:
                    17:5e:76:5d:b8:5a:31:b4:fa:1b:70:1d:de:cb:16:
                    12:af:d9:e7:1a:5d:cc:3b:95:86:19:a5:d4:43:fd:
                    32:c4:70:18:b7:52:40:3f:29:f2:ce:6c:3b:ca:e0:
                    f9:3a:31:ac:a0:7c:2d:66:e0:b1:7a:e3:e1:56:e9:
                    72:dc:b3:a5:90:77:ec:f7:f2:e6:e4:34:0f:aa:13:
                    7e:0d:38:4c:14:38:d7:d6:bc:1b:be:dc:2e:f4:85:
                    58:d4:a5:a6:61:da:10:37:4f:07:33:a2:52:92:93:
                    21:a3:a5:b5:0f:e9:3e:a7:46:ab:c4:f8:98:a9:58:
                    70:9f:a7:de:f9:0e:8b:28:44:d6:82:4e:32:a1:00:
                    eb:13:a2:8d:89:80:48:fd:f3:69:4a:09:90:90:7a:
                    15:e9:59:1f:9f:6b:48:9a:72:db:3e:97:8a:d2:46:
                    aa:3f:9a:9d:77:f0:70:78:da:dd:a9:dd:ae:13:a4:
                    df:63:23:cd:61:f2:7f:df:99:d7:e9:8a:76:94:f7:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:71:6F:3B:98:DB:D3:68:34:A0:94:91:D7:09:F2:2D:1B:95:B2:80
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS141750.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:79:37:2f:8f:4d:94:b8:be:a2:53:61:04:df:37:21:7c:38:
         d1:76:f4:a4:dd:36:7a:52:85:7e:eb:a2:70:4b:71:fb:ec:a7:
         97:4c:94:da:8b:21:90:63:e3:dc:25:05:43:63:3a:59:20:b0:
         05:71:f1:b2:88:b6:45:35:70:13:25:72:44:0e:a6:05:7b:d4:
         34:fb:26:12:56:d3:3c:5d:a0:f4:98:80:e8:03:a1:d9:55:03:
         6e:0b:e3:06:5e:ec:09:cf:12:03:a3:07:84:68:aa:1f:8d:b2:
         58:41:c0:f8:82:df:40:4f:17:e7:75:9f:2a:7b:a7:b8:75:17:
         de:3c:e7:48:48:be:bf:9a:da:01:6a:cf:33:bf:09:5a:e8:05:
         86:9b:11:32:4a:5e:e0:34:82:91:13:a4:ee:dd:36:52:89:ec:
         96:04:b2:18:f1:14:1b:2b:6c:ff:f5:fa:76:47:4f:02:ae:29:
         b4:5d:5c:36:76:1b:50:4d:23:b1:e2:33:e4:a0:26:71:6a:f4:
         4d:a2:cc:86:cb:61:8d:14:06:6e:3a:0f:86:7c:1c:f8:8a:56:
         ad:b3:58:84:9c:eb:0a:5e:67:9e:24:5c:af:58:93:17:32:ef:
         63:42:d4:e1:b3:0d:1b:a9:42:38:42:27:33:97:77:a3:ad:1c:
         b6:29:fb:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:37:20 2026 by rpki-client