Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS197537.roa
File:                     AS197537.roa (raw, json)
Hash identifier:          PMPHSMulrOnMe+5fOpfCTYKTqkiLZoNp0fcIDyECYGE=
Subject key identifier:   56:6A:AE:2E:C6:75:3B:22:08:6A:53:EC:2B:3B:E1:47:9B:38:C8:9F
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       1864954E3DC090F163FFD1FB036E6E08CC8B4137
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS197537.roa
Signing time:             Mon 05 Oct 2026 06:12:58 +0000
ROA not before:           Mon 05 Oct 2026 06:07:58 +0000
ROA not after:            Mon 04 Oct 2027 06:12:58 +0000
asID:                     197537
IP address blocks:        79.180.4.0/22 maxlen: 23
                          109.64.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:64:95:4e:3d:c0:90:f1:63:ff:d1:fb:03:6e:6e:08:cc:8b:41:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:58 2026 GMT
            Not After : Oct  4 06:12:58 2027 GMT
        Subject: CN=566AAE2EC6753B22086A53EC2B3BE1479B38C89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:2f:d6:bd:bf:14:21:84:9e:fa:86:7b:8c:
                    8e:83:d7:1b:f0:7c:4b:af:71:31:cc:e5:e5:41:15:
                    5d:a8:9c:7e:d6:8b:61:26:59:8d:54:97:ae:9a:8a:
                    11:44:ef:bc:c6:4a:cb:2d:2e:42:cd:ad:b6:f9:ff:
                    71:b2:ac:82:88:14:0e:e5:13:5e:65:b4:bf:4a:0a:
                    e7:31:d1:fc:2f:57:a8:a9:67:c0:36:95:a9:f2:d1:
                    4d:1a:7a:28:12:2d:8f:c5:5b:99:02:c3:5e:d8:e4:
                    e9:ff:e9:47:f9:c5:76:99:d9:98:56:b2:35:b8:66:
                    16:15:1b:cf:12:57:33:09:ea:11:87:1d:3e:6b:c2:
                    4e:f7:92:d5:50:62:a4:de:c1:1c:22:7c:b3:cb:28:
                    40:a7:cf:9d:ec:2c:3a:a2:e3:1f:d4:20:60:b6:20:
                    9a:6a:7f:46:4f:af:67:56:bc:f7:e1:91:af:78:3f:
                    c4:4e:3d:b9:81:51:a7:9c:5d:b1:ff:af:b9:ee:35:
                    6a:3d:d9:48:7f:a1:fc:54:58:ed:54:6a:54:44:be:
                    4a:16:41:89:f5:c7:d8:52:d8:3d:c7:bf:9a:cb:2d:
                    7c:68:61:74:92:c0:9b:e8:6d:95:c2:8b:0d:59:91:
                    0f:7a:d7:51:13:6a:ba:0f:c6:3c:70:4b:3f:d4:da:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6A:AE:2E:C6:75:3B:22:08:6A:53:EC:2B:3B:E1:47:9B:38:C8:9F
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS197537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.4.0/22
                  109.64.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:8c:15:58:9e:87:c8:b3:6e:4c:65:20:1b:d8:bd:07:6e:47:
         6a:35:a4:00:6a:ac:61:3b:7f:ac:eb:b7:8e:2e:bb:f6:93:6b:
         38:bc:9e:4e:62:cf:67:58:11:4f:75:7d:6f:5d:a7:58:d7:1e:
         c4:d4:ce:d3:ff:10:6d:2c:cd:70:48:4c:f6:0c:a2:da:b7:d6:
         ad:d9:9e:fc:67:82:bf:83:4a:85:41:80:9d:77:93:f2:5a:c8:
         8e:62:dc:3c:13:f8:71:9c:c6:33:2b:97:24:10:c0:3a:bf:6e:
         75:e3:50:67:0c:99:8c:4c:cf:82:db:af:2f:79:a2:b9:61:88:
         d8:00:79:be:e8:58:d7:14:98:a5:dc:30:cf:90:fa:86:e9:f4:
         10:8e:21:99:49:ca:f3:a7:49:37:38:45:4d:15:36:9c:f6:76:
         33:91:2d:85:9f:76:00:65:3e:31:90:e5:7e:e8:23:8a:ee:71:
         a5:b0:ce:db:df:c1:ec:18:05:1c:99:6a:7c:4f:2b:25:ca:ea:
         0f:c5:81:26:8d:80:1c:5d:7c:a8:29:b8:3b:f3:6c:b7:e2:36:
         aa:22:4e:d2:52:01:41:7e:c2:51:63:4b:19:78:d3:d8:b8:88:
         14:10:3a:7c:2d:77:f2:47:d1:77:2f:78:b1:0d:4f:6e:20:82:
         c0:ce:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:47:10 2026 by rpki-client