Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212616.roa
File:                     AS212616.roa (raw, json)
Hash identifier:          d2uINPJ2xkP4cktB+cdQh9ks1fhrsrmPEjIfRmm8X5k=
Subject key identifier:   23:B6:96:9D:FD:0D:A5:87:FC:62:36:74:88:80:86:DF:45:40:16:41
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       631EB674EEA6918196A476E8288B7794627A1F76
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212616.roa
Signing time:             Tue 06 Oct 2026 09:24:47 +0000
ROA not before:           Tue 06 Oct 2026 09:19:47 +0000
ROA not after:            Tue 05 Oct 2027 09:24:47 +0000
asID:                     212616
IP address blocks:        79.182.96.0/20 maxlen: 20
                          79.182.144.0/20 maxlen: 24
                          109.64.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:b6:74:ee:a6:91:81:96:a4:76:e8:28:8b:77:94:62:7a:1f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  6 09:19:47 2026 GMT
            Not After : Oct  5 09:24:47 2027 GMT
        Subject: CN=23B6969DFD0DA587FC623674888086DF45401641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:63:eb:96:33:4b:34:8b:07:57:b0:28:5b:
                    dd:29:10:af:be:79:2e:bf:b9:9d:2c:24:d7:e5:e7:
                    36:90:ad:99:35:9a:9c:18:cf:ba:7f:4d:98:c2:e5:
                    6f:99:f8:8d:68:20:1b:da:32:d0:74:59:a6:98:26:
                    b1:a2:cc:99:88:2e:b0:1d:ba:13:2c:85:8a:32:91:
                    b6:56:13:eb:2b:f8:f2:35:31:ac:98:fd:3b:05:c4:
                    b8:0d:62:01:bf:f3:58:b5:a0:62:1d:d0:ef:96:d2:
                    18:21:9e:26:00:92:61:4e:50:8e:21:07:8b:e1:86:
                    f5:17:ba:0e:e7:79:70:17:48:10:b4:de:f7:47:bd:
                    53:06:90:74:f8:82:f3:01:12:a0:0f:56:ae:1a:45:
                    06:0c:ac:4c:1e:9d:15:3b:d1:ea:45:e5:41:a1:6a:
                    3a:b8:e2:58:f2:fc:5b:b0:98:ef:8d:36:f9:0f:8c:
                    58:cc:b1:83:64:0a:f7:0b:03:8b:33:71:7c:1d:08:
                    3a:c5:a4:8a:92:1b:86:a2:43:8f:58:dc:e8:d4:1b:
                    83:5d:a8:da:36:84:ff:2f:52:76:a3:a6:92:75:e7:
                    00:fb:9f:cf:29:cc:57:fc:dc:ed:ac:19:86:f5:7f:
                    72:95:6e:4c:49:e0:95:2c:da:05:86:e6:63:3a:9f:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B6:96:9D:FD:0D:A5:87:FC:62:36:74:88:80:86:DF:45:40:16:41
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.96.0/20
                  79.182.144.0/20
                  109.64.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:06:29:5b:cb:e3:10:b6:0c:97:c9:43:4d:49:b5:74:e0:
         60:70:bc:d2:6d:56:15:4e:93:db:91:6f:eb:4e:75:61:5f:c5:
         7c:5c:3f:9c:61:f8:76:67:96:0c:d4:be:1d:8e:f1:61:37:4b:
         4b:34:05:94:b3:3a:cb:ec:8a:69:7d:59:97:ad:22:94:5e:45:
         fc:4b:91:db:83:54:35:8a:1c:e9:18:53:11:eb:18:d2:ab:ee:
         da:c9:13:2d:01:b4:83:15:45:55:61:0a:6a:69:0e:8a:96:39:
         98:7f:42:c7:51:04:eb:2d:91:9b:c9:0e:39:c2:38:0e:32:f4:
         5d:0a:fb:78:6a:68:88:b0:b7:17:fa:76:c2:fb:9a:44:68:2a:
         3f:c4:42:d4:68:03:57:a2:2b:79:0a:f6:a9:cc:76:4b:15:6c:
         f7:f8:8e:90:f8:94:72:8a:05:ce:6e:5e:f9:b9:fb:69:92:13:
         f9:a9:d4:6a:21:95:62:7c:33:77:5b:31:f4:b1:b4:6f:b4:33:
         65:af:1b:d5:e0:2b:28:83:7d:34:36:b2:7a:a9:5b:15:02:44:
         b8:4a:a7:4b:b6:30:4d:65:45:08:6f:ea:65:79:26:f7:a2:6d:
         44:81:39:f1:9d:36:84:76:ad:0e:18:79:fa:3d:27:7e:f6:a5:
         0c:08:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:47:05 2026 by rpki-client