Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215294.roa
File:                     AS215294.roa (raw, json)
Hash identifier:          sbmpoKmRBGo6PUwhF9ermKpQaqxPN54ccIH6dFmj42I=
Subject key identifier:   59:67:7B:1D:74:60:9F:91:F4:03:2F:CF:1B:6B:AE:42:DD:1D:81:E6
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       4C38CD8D9EED59EC0E22AA709848C69F1354D28A
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215294.roa
Signing time:             Mon 05 Oct 2026 06:12:32 +0000
ROA not before:           Mon 05 Oct 2026 06:07:32 +0000
ROA not after:            Mon 04 Oct 2027 06:12:32 +0000
asID:                     215294
IP address blocks:        79.176.65.0/24 maxlen: 24
                          79.176.205.0/24 maxlen: 24
                          79.183.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:38:cd:8d:9e:ed:59:ec:0e:22:aa:70:98:48:c6:9f:13:54:d2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:32 2026 GMT
            Not After : Oct  4 06:12:32 2027 GMT
        Subject: CN=59677B1D74609F91F4032FCF1B6BAE42DD1D81E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:da:ac:98:2a:09:f3:33:53:ad:a9:d8:08:
                    14:47:98:2e:a2:14:7a:9e:6d:95:e0:91:90:f2:15:
                    dc:36:31:2c:a2:c6:d1:71:c5:6d:2a:d0:78:4d:03:
                    bd:d2:19:4b:04:2e:21:fc:70:d3:ce:f6:3f:79:84:
                    a8:b1:be:27:5e:d3:92:6f:fb:b2:a9:21:43:87:c0:
                    fc:18:8b:dd:02:46:df:80:ef:24:8f:7e:a5:ee:38:
                    64:88:de:ea:ee:4a:41:d9:80:a2:b9:c7:c3:72:50:
                    68:19:5a:6b:b7:e4:e7:d3:2f:78:3a:b8:7e:1f:90:
                    0c:5a:dd:ea:a7:a7:1d:23:52:32:5c:fd:63:36:98:
                    5a:1b:14:d4:06:4f:3f:b8:91:53:6a:94:1f:0e:8e:
                    7b:70:c7:65:9b:3e:3e:e9:9d:80:31:77:55:6f:df:
                    28:f4:9b:ca:e4:ac:60:5d:15:10:92:ba:e3:5b:19:
                    ff:4f:8f:66:f9:b6:2a:af:02:b9:54:3a:aa:2d:11:
                    22:85:f0:99:9f:9a:8d:ac:c4:98:fd:2d:42:f2:ba:
                    1a:a2:ba:89:d6:12:1e:15:89:47:42:e0:08:c5:9a:
                    db:4b:bf:7e:c0:60:36:b3:4c:e3:1f:0e:4a:dc:1d:
                    b7:01:2b:03:b0:16:8a:f6:71:b0:2d:74:48:8a:4e:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:67:7B:1D:74:60:9F:91:F4:03:2F:CF:1B:6B:AE:42:DD:1D:81:E6
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.65.0/24
                  79.176.205.0/24
                  79.183.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:81:e8:49:ed:c6:d9:cd:ce:e8:ad:0b:a8:49:83:10:a7:
         f5:f3:b1:0a:26:6a:74:01:eb:fb:11:cb:a9:c0:79:fa:2e:62:
         42:f2:08:b5:0d:ec:a1:da:c3:e0:14:2e:9e:1a:9c:28:25:79:
         16:f2:b2:a5:95:7a:ed:b2:64:ff:60:9e:1d:f2:bf:d8:f3:aa:
         5f:2b:9a:8d:97:03:b4:a3:65:96:e3:0e:15:b5:af:3a:94:22:
         6e:88:1e:db:bb:f4:76:7f:53:4a:9b:88:cf:20:e2:6d:78:ca:
         d0:75:14:be:c2:13:45:92:cc:14:e3:ba:1c:7a:b4:c9:c6:8d:
         33:10:e9:72:bf:e9:f7:ea:92:df:96:a0:a3:d2:da:92:7c:70:
         d6:a0:29:8e:46:29:9a:33:3f:14:ce:90:70:c8:8c:c1:37:f5:
         a4:0f:44:17:d4:c5:ce:ac:41:f8:a8:04:63:75:6e:cd:fb:5b:
         a1:f0:d0:8b:8a:af:bb:8d:76:66:03:b1:4b:73:8a:2c:55:d0:
         15:46:20:6f:e9:ac:dc:16:4e:37:33:3f:68:70:a9:fd:5f:76:
         96:8d:9d:6f:8f:80:16:00:64:5a:96:eb:4d:86:93:b5:a9:34:
         c2:25:d3:fd:f5:4c:40:34:8d:60:c1:91:6d:1e:8b:70:08:f8:
         13:7b:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:50 2026 by rpki-client