Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS211440.roa
File:                     AS211440.roa (raw, json)
Hash identifier:          n0esvj+RqOXql/ZAmq1g8bRzGZYszg2jy3Pyh64DJT8=
Subject key identifier:   F6:44:E3:0C:5B:25:EB:8C:81:DF:5F:F4:B8:27:83:65:01:F0:DB:FA
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       104CA6A47F8536117631D2F7A733BBCF6ED4529C
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS211440.roa
Signing time:             Mon 05 Oct 2026 06:12:17 +0000
ROA not before:           Mon 05 Oct 2026 06:07:17 +0000
ROA not after:            Mon 04 Oct 2027 06:12:17 +0000
asID:                     211440
IP address blocks:        79.182.0.0/24 maxlen: 24
                          79.182.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4c:a6:a4:7f:85:36:11:76:31:d2:f7:a7:33:bb:cf:6e:d4:52:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:17 2026 GMT
            Not After : Oct  4 06:12:17 2027 GMT
        Subject: CN=F644E30C5B25EB8C81DF5FF4B827836501F0DBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:b1:1f:0a:31:45:91:51:2b:96:b8:ed:b4:
                    48:c9:57:48:81:84:c7:03:a7:87:ed:03:b3:c9:dd:
                    f5:b8:4c:f7:75:e2:f6:d3:2d:02:7f:50:0b:f1:f4:
                    77:1c:5e:a0:f7:54:b5:4d:8d:da:b6:20:cf:f3:c3:
                    c0:78:db:c1:5d:52:89:31:1d:15:0b:e2:9d:97:1d:
                    4d:e6:3d:8c:88:58:58:c5:2c:c9:44:57:a8:81:dd:
                    21:52:5a:84:32:fa:ff:4d:49:b8:e1:49:21:f4:6a:
                    91:80:fd:7a:be:f4:fb:88:72:fb:13:95:c1:d7:f2:
                    5c:19:dd:8b:b9:95:28:b5:94:f4:65:aa:59:ef:2a:
                    ad:57:a4:78:46:40:7d:be:97:bd:b5:7e:1f:24:92:
                    8d:84:1f:b1:6b:79:73:ab:9b:89:a9:6a:7a:40:5b:
                    c3:b3:2b:65:2e:5f:b6:bf:62:bc:67:69:73:48:2f:
                    b6:fa:ba:76:14:be:ea:5a:af:62:0d:be:fb:3e:ca:
                    91:10:31:4e:7f:4b:09:ed:38:0a:50:e8:0f:2a:58:
                    bf:fc:80:63:c1:c7:e9:f4:71:20:54:8d:9c:08:d7:
                    7e:ec:09:23:65:4f:9a:9e:0a:ff:43:13:4a:64:3c:
                    eb:d5:4d:21:a8:2d:b7:25:e8:48:1c:81:9b:b3:bc:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:44:E3:0C:5B:25:EB:8C:81:DF:5F:F4:B8:27:83:65:01:F0:DB:FA
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS211440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.0.0/24
                  79.182.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:72:99:2a:d4:78:a3:e1:58:c6:35:5d:78:c1:d1:9d:7c:69:
         31:10:e5:7a:c8:dd:e8:44:0a:9e:13:d1:09:13:19:4b:b4:ea:
         33:24:f6:dc:ac:8b:b4:18:9e:d1:45:ef:73:2c:ee:1f:e5:1c:
         dc:78:dd:95:39:33:86:f3:c5:45:af:5f:10:f3:6d:2a:83:b5:
         71:dc:f2:fb:37:5c:03:2d:0b:9f:f6:7b:f2:57:16:2f:74:26:
         fc:63:6c:6b:95:8b:4b:54:2e:6a:7a:f9:24:34:de:4f:42:57:
         bf:64:37:92:bd:d4:75:05:36:82:bb:0d:f1:f7:4b:9e:ef:aa:
         1d:06:0f:9e:f4:52:5a:d0:8f:06:02:d2:57:d2:08:53:01:c9:
         80:c5:6a:e6:53:8d:32:79:86:c5:20:eb:fc:35:98:63:db:23:
         55:53:5f:78:1c:db:4f:fa:3b:17:f6:cc:1d:75:b0:e0:f3:d9:
         08:61:bf:0f:52:ff:b5:aa:de:42:2c:8a:85:ae:0d:ff:b7:09:
         4d:bb:46:b9:1d:2a:0f:71:62:a0:80:f3:c8:06:10:0e:cb:55:
         f0:0a:eb:c0:11:a2:9a:23:d1:1c:66:78:6e:dd:09:f4:87:b4:
         c2:7d:05:e8:28:ef:17:d1:63:52:d9:a5:5a:55:ea:a8:9e:28:
         42:11:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:56:01 2026 by rpki-client