Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199550.roa
File:                     AS199550.roa (raw, json)
Hash identifier:          mJOAZSY9gIaCw9b5yljcGHgcONmC8w3QE3Dc+XTluv0=
Subject key identifier:   2E:C9:3C:C7:85:0D:FF:AC:DD:98:F1:8F:44:E9:DD:90:60:92:47:57
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       310C9E2A52D89BBB24FB4D647E7D11C4E1ACDC7D
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199550.roa
Signing time:             Tue 13 Oct 2026 19:02:28 +0000
ROA not before:           Tue 13 Oct 2026 18:57:28 +0000
ROA not after:            Tue 12 Oct 2027 19:02:28 +0000
asID:                     199550
IP address blocks:        79.183.54.0/24 maxlen: 24
                          79.183.254.0/24 maxlen: 24
                          109.65.82.0/23 maxlen: 24
                          109.65.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0c:9e:2a:52:d8:9b:bb:24:fb:4d:64:7e:7d:11:c4:e1:ac:dc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 13 18:57:28 2026 GMT
            Not After : Oct 12 19:02:28 2027 GMT
        Subject: CN=2EC93CC7850DFFACDD98F18F44E9DD9060924757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:cc:d5:f4:72:21:e1:37:9f:88:72:cc:da:
                    6d:f2:16:47:86:f8:46:62:d7:ac:21:90:96:11:7c:
                    61:0d:14:7a:ca:3d:01:d4:e6:ed:b9:72:bb:3e:b7:
                    2d:17:53:d4:74:f9:d0:8c:9e:4f:15:8a:e2:bf:f6:
                    3f:d7:f0:7c:00:76:04:50:12:d8:5c:d1:ef:a9:ee:
                    92:96:6f:47:d3:43:d9:4b:14:c6:9b:80:48:9e:07:
                    2a:22:d1:17:2c:b4:25:ce:77:da:03:ce:87:3f:a2:
                    eb:71:7b:ba:31:a2:fa:c8:53:41:6f:9d:30:55:09:
                    3b:86:89:ae:ba:69:ed:8a:3f:62:9e:54:a3:e2:0d:
                    66:b3:47:52:90:e5:76:30:cc:3f:01:af:3c:d9:32:
                    6b:73:5f:db:5e:98:30:75:a8:ae:93:4e:6d:de:c4:
                    10:2f:50:35:44:86:ea:e2:c7:3a:cc:e9:a3:ba:aa:
                    f5:bb:e8:20:22:ae:10:06:cf:62:8a:44:29:46:ad:
                    d4:06:f8:1c:7a:ab:0e:74:bd:60:3a:3e:bb:26:95:
                    5a:e9:4c:71:6e:41:6d:d4:98:30:b5:91:a3:4e:59:
                    2b:05:cb:3c:9b:eb:1a:70:f1:4c:f0:35:db:9b:2f:
                    7d:38:32:bd:4e:a8:9c:eb:1c:e9:c1:ae:a1:65:40:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:3C:C7:85:0D:FF:AC:DD:98:F1:8F:44:E9:DD:90:60:92:47:57
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199550.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.54.0/24
                  79.183.254.0/24
                  109.65.82.0/23
                  109.65.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:a6:26:7f:88:d4:39:d5:76:11:5f:46:bc:40:94:0e:44:e8:
         99:92:37:f8:5c:58:13:02:2d:92:9f:6e:62:35:9e:cf:7f:94:
         19:56:29:e1:aa:db:e9:c4:06:6d:87:03:49:ff:6a:a6:8a:2f:
         1b:5d:32:b4:ed:2a:0d:b5:d8:a0:4e:89:27:2a:30:b7:84:bd:
         00:d6:03:1f:3b:28:20:e0:d0:be:fa:91:19:fe:c1:79:f9:db:
         38:85:90:b9:14:3a:4d:8f:dd:14:04:ac:bb:6a:09:1e:fa:97:
         09:58:3e:db:63:58:85:e4:d1:2a:81:ce:b9:91:60:7b:ed:c7:
         9b:ea:54:79:46:d1:e3:32:96:80:e6:bd:9c:04:7c:fc:05:ea:
         66:5d:3b:dd:14:83:52:f4:ac:8c:2a:83:a1:75:98:0c:0c:50:
         91:56:02:14:a7:bc:50:ae:ae:01:3b:48:31:db:ca:cc:0e:b7:
         22:29:85:a7:b6:e9:ba:be:dc:ea:d0:64:62:7f:0e:06:5c:e3:
         a0:f8:4c:de:a7:77:91:d6:5b:c2:ec:ef:70:a1:d5:6d:a7:41:
         87:3a:c7:c7:29:61:92:00:72:96:ed:b1:17:75:30:ab:eb:07:
         0a:6b:34:b2:24:19:32:65:d9:55:38:9e:c5:2c:b9:c5:7a:87:
         79:40:e9:5f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUMQyeKlLYm7sk+01kfn0RxOGs3H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMTMxODU3MjhaFw0yNzEwMTIxOTAyMjhaMDMxMTAvBgNV
BAMTKDJFQzkzQ0M3ODUwREZGQUNERDk4RjE4RjQ0RTlERDkwNjA5MjQ3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPszV9HIh4TefiHLM2m3yFkeG
+EZi16whkJYRfGENFHrKPQHU5u25crs+ty0XU9R0+dCMnk8ViuK/9j/X8HwAdgRQ
Ethc0e+p7pKWb0fTQ9lLFMabgEieByoi0RcstCXOd9oDzoc/outxe7oxovrIU0Fv
nTBVCTuGia66ae2KP2KeVKPiDWazR1KQ5XYwzD8BrzzZMmtzX9temDB1qK6TTm3e
xBAvUDVEhurixzrM6aO6qvW76CAirhAGz2KKRClGrdQG+Bx6qw50vWA6PrsmlVrp
THFuQW3UmDC1kaNOWSsFyzyb6xpw8UzwNdubL304Mr1OqJzrHOnBrqFlQLN7AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQULsk8x4UN/6zdmPGPROndkGCSR1cwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxOTk1NTAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4E
AgABMBgDBABPtzYDBABPt/4DBAFtQVIDBAFtQcowDQYJKoZIhvcNAQELBQADggEB
ALGmJn+I1DnVdhFfRrxAlA5E6JmSN/hcWBMCLZKfbmI1ns9/lBlWKeGq2+nEBm2H
A0n/aqaKLxtdMrTtKg212KBOiScqMLeEvQDWAx87KCDg0L76kRn+wXn52ziFkLkU
Ok2P3RQErLtqCR76lwlYPttjWIXk0SqBzrmRYHvtx5vqVHlG0eMyloDmvZwEfPwF
6mZdO90Ug1L0rIwqg6F1mAwMUJFWAhSnvFCurgE7SDHbyswOtyIphae26bq+3OrQ
ZGJ/DgZc46D4TN6nd5HWW8Ls73Ch1W2nQYc6x8cpYZIAcpbtsRd1MKvrBwprNLIk
GTJl2VU4nsUsucV6h3lA6V8=
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:14 2026 by rpki-client