Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          f9I5sItmoI6h7sB95lOCv6mE3cHiwtM6ZstP45GNTqk=
Subject key identifier:   3E:A8:99:62:B2:06:71:EA:CB:4C:42:F5:D2:D6:68:8D:EB:85:24:42
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       3ABC11E186D8A01002C5734C7677D7C9F475BB2B
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS206092.roa
Signing time:             Mon 05 Oct 2026 06:13:33 +0000
ROA not before:           Mon 05 Oct 2026 06:08:33 +0000
ROA not after:            Mon 04 Oct 2027 06:13:33 +0000
asID:                     206092
IP address blocks:        79.176.10.0/24 maxlen: 24
                          79.176.79.0/24 maxlen: 24
                          109.66.24.0/24 maxlen: 24
                          109.66.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bc:11:e1:86:d8:a0:10:02:c5:73:4c:76:77:d7:c9:f4:75:bb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:08:33 2026 GMT
            Not After : Oct  4 06:13:33 2027 GMT
        Subject: CN=3EA89962B20671EACB4C42F5D2D6688DEB852442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:02:6e:a7:e2:21:52:72:ab:5c:38:35:7b:
                    2d:9e:33:c9:0e:21:12:82:d1:1f:e2:b7:8b:03:73:
                    94:a9:95:cc:ad:e4:f3:ec:cc:fd:75:9e:ca:d9:96:
                    a6:f6:3f:18:c3:bb:49:d1:97:cb:84:01:f3:a4:e0:
                    49:9b:ba:cc:01:b2:34:5e:00:2c:41:52:35:8b:02:
                    b2:09:3f:50:e1:59:76:ff:d9:e0:c7:ac:e2:65:44:
                    f7:2a:b3:f1:63:bd:55:06:33:91:34:45:24:f3:ab:
                    7d:d3:d4:ed:65:3d:b4:51:df:d5:a4:8d:52:a4:99:
                    5e:c8:41:53:6f:42:0a:ca:4b:2c:2f:ec:fe:cd:1e:
                    19:2b:2f:e3:2d:7e:30:95:77:1f:30:c8:41:9e:30:
                    d9:d2:e1:e9:3c:91:68:62:8b:a4:03:df:80:ab:ef:
                    1d:d9:27:a5:7e:61:0a:25:9a:95:d6:fe:b1:46:d2:
                    9d:5f:d2:6e:e0:c9:4a:09:bd:03:fd:a7:e8:82:28:
                    4a:c2:1a:da:4f:4c:ac:88:bc:1c:03:22:b5:22:64:
                    10:68:41:c1:9b:1d:66:2b:8a:b2:bf:57:8b:f0:6a:
                    47:35:89:3c:cc:59:bf:6b:68:28:3e:3a:ec:0d:02:
                    a9:ff:36:98:d6:e0:26:ef:69:2d:b1:86:30:41:1f:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A8:99:62:B2:06:71:EA:CB:4C:42:F5:D2:D6:68:8D:EB:85:24:42
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.10.0/24
                  79.176.79.0/24
                  109.66.24.0/24
                  109.66.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:8f:ae:52:c6:3c:60:af:24:7c:55:1b:8d:df:48:df:41:
         99:83:c5:c2:fa:85:90:7a:e4:cc:45:5b:ff:6c:39:71:15:a3:
         48:97:48:85:e4:15:98:52:77:f7:71:ba:2f:9b:1c:eb:82:5e:
         e7:bf:d1:99:f9:6d:15:f9:ce:07:75:18:7f:2f:b6:d5:88:8c:
         61:83:f6:85:25:05:e1:5f:70:9a:53:b9:4f:03:7a:51:f1:ca:
         99:4f:6d:0b:82:68:7f:25:7e:4e:c6:fb:c7:aa:65:f6:33:29:
         b2:42:65:03:8f:f7:2a:20:0f:2e:06:b6:7a:65:43:e2:de:59:
         a3:fe:65:4f:3b:cd:ee:68:09:db:6f:5e:18:de:9e:86:d6:ec:
         04:80:aa:c9:6e:0c:60:72:0c:1e:07:b9:c3:81:36:ad:41:91:
         7b:1e:51:f2:9b:0e:d5:39:91:91:b3:9e:85:aa:b8:49:44:7d:
         71:f4:51:95:bf:f0:10:15:a5:38:91:0f:d4:1c:5e:df:5f:18:
         42:38:1f:64:78:fc:49:57:62:cc:72:13:a4:ff:b2:4f:25:20:
         ae:09:ef:51:8e:d9:88:9b:71:08:46:ad:7b:e6:fb:df:34:ca:
         16:ca:33:c2:16:6f:f3:d6:b9:b9:16:d0:f6:ee:da:20:b6:a4:
         65:ab:78:7c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUOrwR4YbYoBACxXNMdnfXyfR1uyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzNaFw0yNzEwMDQwNjEzMzNaMDMxMTAvBgNV
BAMTKDNFQTg5OTYyQjIwNjcxRUFDQjRDNDJGNUQyRDY2ODhERUI4NTI0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsAJup+IhUnKrXDg1ey2eM8kO
IRKC0R/it4sDc5Splcyt5PPszP11nsrZlqb2PxjDu0nRl8uEAfOk4EmbuswBsjRe
ACxBUjWLArIJP1DhWXb/2eDHrOJlRPcqs/FjvVUGM5E0RSTzq33T1O1lPbRR39Wk
jVKkmV7IQVNvQgrKSywv7P7NHhkrL+MtfjCVdx8wyEGeMNnS4ek8kWhii6QD34Cr
7x3ZJ6V+YQolmpXW/rFG0p1f0m7gyUoJvQP9p+iCKErCGtpPTKyIvBwDIrUiZBBo
QcGbHWYrirK/V4vwakc1iTzMWb9raCg+OuwNAqn/NpjW4CbvaS2xhjBBH/7LAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUPqiZYrIGcerLTEL10tZojeuFJEIwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDYwOTIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4E
AgABMBgDBABPsAoDBABPsE8DBABtQhgDBABtQo8wDQYJKoZIhvcNAQELBQADggEB
ACtVj65SxjxgryR8VRuN30jfQZmDxcL6hZB65MxFW/9sOXEVo0iXSIXkFZhSd/dx
ui+bHOuCXue/0Zn5bRX5zgd1GH8vttWIjGGD9oUlBeFfcJpTuU8DelHxyplPbQuC
aH8lfk7G+8eqZfYzKbJCZQOP9yogDy4GtnplQ+LeWaP+ZU87ze5oCdtvXhjenobW
7ASAqsluDGByDB4HucOBNq1BkXseUfKbDtU5kZGznoWquElEfXH0UZW/8BAVpTiR
D9QcXt9fGEI4H2R4/ElXYsxyE6T/sk8lIK4J71GO2YibcQhGrXvm+980yhbKM8IW
b/PWubkW0Pbu2iC2pGWreHw=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:38 2026 by rpki-client