Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198316.roa
File:                     AS198316.roa (raw, json)
Hash identifier:          y8zjblbfGWcwsQea6dKw//Wu+1hs0oGMEj0qMd97cGg=
Subject key identifier:   B5:9C:5E:D4:43:C8:F8:F1:8B:B9:C1:D8:D8:EC:8B:E4:95:DF:D0:EA
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       61641DCB20C51FB3CDE6DC7B7449770F085ED545
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198316.roa
Signing time:             Wed 14 Oct 2026 15:44:33 +0000
ROA not before:           Wed 14 Oct 2026 15:39:33 +0000
ROA not after:            Wed 13 Oct 2027 15:44:33 +0000
asID:                     198316
IP address blocks:        79.182.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:64:1d:cb:20:c5:1f:b3:cd:e6:dc:7b:74:49:77:0f:08:5e:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 14 15:39:33 2026 GMT
            Not After : Oct 13 15:44:33 2027 GMT
        Subject: CN=B59C5ED443C8F8F18BB9C1D8D8EC8BE495DFD0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:86:8a:4e:c8:3d:93:ce:3a:b9:9c:2a:29:
                    1c:c1:b8:99:a2:d7:3e:02:25:4f:7b:47:c1:e4:27:
                    c8:01:48:2e:7b:a4:34:e5:6d:b7:ff:3b:09:a0:7a:
                    c6:ce:8e:10:21:c7:a8:d1:c3:69:09:d8:be:32:62:
                    5d:b4:63:6e:fa:be:01:f3:f2:28:b7:97:96:8b:d1:
                    cb:54:41:6f:4c:18:ae:57:25:74:82:d7:8f:4b:0f:
                    fc:6f:05:a4:ee:3e:19:19:fe:35:17:b1:d8:97:63:
                    f3:9c:09:23:37:48:40:30:e3:d5:6f:8b:3f:39:d2:
                    51:30:ca:19:ec:8e:35:47:62:df:46:3f:70:84:6b:
                    65:28:d4:1a:60:50:29:9c:e7:30:a4:14:9d:55:34:
                    d7:8c:2f:89:3a:8c:e4:5c:5b:5e:e9:8e:1b:51:5b:
                    5a:ca:25:9c:a4:ed:30:e6:0b:ac:87:e3:b2:46:f6:
                    a4:7c:de:bb:4e:6d:54:08:74:97:67:ea:03:89:8c:
                    70:56:39:22:80:75:9d:54:2c:80:30:ac:3f:e4:16:
                    25:e1:30:a1:30:de:4b:0e:fd:ba:f3:61:51:16:8e:
                    c5:94:7c:13:35:ef:bb:36:57:08:17:42:00:68:22:
                    4f:47:b5:cf:c3:54:ea:b5:3c:3e:08:46:b1:a1:49:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:5E:D4:43:C8:F8:F1:8B:B9:C1:D8:D8:EC:8B:E4:95:DF:D0:EA
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:bb:2c:2d:6e:6b:ef:56:70:b8:74:81:c3:10:4d:c0:d2:
         ad:1b:c7:f1:f9:b3:b5:32:a5:d6:13:22:f4:fd:de:73:6e:38:
         0d:af:77:6d:d9:6e:29:22:36:ff:f2:55:94:ba:a8:eb:6c:66:
         77:36:c4:ef:8d:18:00:43:94:44:d8:99:ba:d9:61:3d:fa:4f:
         f7:5b:96:7f:8e:90:ab:e4:e7:4e:14:fd:97:be:2f:4d:65:e2:
         42:78:ae:41:5e:70:7a:6a:91:ed:ea:04:09:63:3f:36:b8:24:
         8a:4b:4e:f6:76:c2:a6:10:f5:3d:a0:20:c2:7d:51:53:67:0e:
         8a:6c:fc:4a:3b:7c:cd:18:11:7d:af:f4:1d:82:a6:42:9a:ae:
         eb:e4:31:a7:0c:00:bb:e6:b3:5e:13:55:ec:db:2e:94:f8:ed:
         d8:a3:b0:ad:85:c4:c3:17:6c:2a:7d:1c:25:48:08:61:b7:c5:
         01:fe:fb:bb:2d:78:47:46:bc:7d:1a:33:3d:73:43:3b:16:45:
         f9:39:ae:8c:b7:c4:7d:1f:0c:1f:ff:a8:7c:5f:95:5a:a5:ae:
         3d:fc:59:a6:d9:47:e6:06:39:2d:3b:df:c2:6d:5e:0e:c6:aa:
         fd:80:06:5b:8a:88:61:93:c5:75:46:39:bf:fb:90:8e:3e:ba:
         61:39:ff:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 00:32:42 2026 by rpki-client