Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19949.roa
File:                     AS19949.roa (raw, json)
Hash identifier:          r8xrLbAYl7RPHMx9FX05Xi/QNC2IZ+0eyGZcIE0RKDo=
Subject key identifier:   CE:1D:1E:0F:C3:E3:BA:20:CF:94:C3:AB:B1:95:82:C0:50:CA:88:22
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       73FF08A0EBC9867EEBFCC6F796802631D4D45467
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19949.roa
Signing time:             Fri 09 Oct 2026 01:50:08 +0000
ROA not before:           Fri 09 Oct 2026 01:45:08 +0000
ROA not after:            Fri 08 Oct 2027 01:50:08 +0000
asID:                     19949
IP address blocks:        79.182.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:08:a0:eb:c9:86:7e:eb:fc:c6:f7:96:80:26:31:d4:d4:54:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  9 01:45:08 2026 GMT
            Not After : Oct  8 01:50:08 2027 GMT
        Subject: CN=CE1D1E0FC3E3BA20CF94C3ABB19582C050CA8822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:58:e2:8b:e8:c6:ab:1a:fc:88:1d:d2:9b:
                    8c:02:42:55:eb:03:60:98:61:b9:80:e8:6e:6b:9e:
                    c8:2c:b3:d6:ac:44:98:e4:02:7f:05:45:c6:48:78:
                    13:b3:55:b4:8e:47:06:03:74:20:59:b4:7c:bc:03:
                    21:4a:e0:88:d9:a4:5f:79:e5:b1:3c:30:02:21:53:
                    56:04:84:2b:83:28:5e:1a:02:fb:51:e1:52:ae:dd:
                    f2:76:aa:32:5d:4d:3c:47:8d:de:9c:bc:95:57:da:
                    f4:ea:c9:90:71:92:29:78:0d:12:e9:a3:95:20:09:
                    65:f7:69:2b:18:9f:55:3a:99:cc:5b:74:31:df:7a:
                    b7:71:15:ba:0c:67:fe:89:7f:35:f0:89:ba:cd:b7:
                    31:7b:a3:01:9b:c6:31:d6:cb:6d:a6:51:5e:60:0e:
                    63:63:d6:69:c7:71:a0:6b:18:75:24:5f:8a:54:6f:
                    ab:5d:6f:40:75:a1:6a:a9:f3:f1:58:97:a8:d6:d6:
                    94:8f:61:7d:01:04:0d:36:93:a2:98:34:67:1e:21:
                    28:4b:95:56:49:d7:4d:f2:c7:b9:6a:52:77:9f:ed:
                    c9:74:fb:4d:fd:cb:b1:a5:0e:94:66:cc:c7:70:00:
                    0e:90:d6:45:00:4d:f1:eb:ed:78:64:be:43:91:f9:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:1E:0F:C3:E3:BA:20:CF:94:C3:AB:B1:95:82:C0:50:CA:88:22
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:65:e2:80:33:9e:01:ae:64:f7:55:80:86:7e:e2:9c:7e:
         33:e1:f3:6b:27:1f:23:c0:27:3c:bc:87:5b:56:47:09:16:1d:
         c3:dc:74:57:db:90:e4:84:60:28:2a:ac:b6:7e:46:91:6a:ee:
         25:0a:ac:32:e8:2c:8b:98:c1:6d:95:88:29:92:8f:90:b5:fa:
         ff:e8:a4:4a:8d:97:3b:6a:d2:01:bc:0c:e1:20:e0:21:01:02:
         91:14:45:ee:c4:89:f1:ec:9a:61:95:c4:00:a2:6b:d7:88:8c:
         06:4e:e6:36:2d:e3:7b:75:c7:cb:30:87:b6:a2:95:ba:ff:ed:
         d1:91:d8:fb:ef:c8:8b:f5:f8:11:37:ab:20:ff:0d:45:91:0b:
         3e:d5:b2:ba:1f:14:f3:3e:86:e7:bb:cc:c9:c5:13:66:e5:b7:
         05:bc:c5:e6:3f:87:ec:88:d5:80:8a:01:f2:d5:65:06:b9:96:
         a5:81:ca:e8:ec:08:a7:67:c0:09:ab:b1:bb:5a:76:0c:20:1b:
         7b:bd:db:0f:99:c2:d2:60:2f:b0:d8:56:9b:5b:17:66:36:79:
         78:3a:c4:15:b4:e2:84:95:28:02:b7:72:ab:8c:3c:34:d4:f4:
         f6:76:0a:bb:57:a4:a3:e7:e7:c7:2d:5d:d4:a5:4f:d9:e3:33:
         35:31:c1:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:30 2026 by rpki-client