Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215817.roa
File:                     AS215817.roa (raw, json)
Hash identifier:          oPfHlQD9P7Qz4l2dR4bi7Y+WY7itBhGUaeCixNNHyGI=
Subject key identifier:   BB:AB:4B:95:42:1B:3C:F1:AC:81:40:17:D9:DD:D2:1C:DD:B8:28:6A
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       73F7CCED757F2034D43655480153A36FC6C905D1
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215817.roa
Signing time:             Mon 05 Oct 2026 06:12:46 +0000
ROA not before:           Mon 05 Oct 2026 06:07:46 +0000
ROA not after:            Mon 04 Oct 2027 06:12:46 +0000
asID:                     215817
IP address blocks:        79.183.1.0/24 maxlen: 24
                          79.183.4.0/24 maxlen: 24
                          79.183.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f7:cc:ed:75:7f:20:34:d4:36:55:48:01:53:a3:6f:c6:c9:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:46 2026 GMT
            Not After : Oct  4 06:12:46 2027 GMT
        Subject: CN=BBAB4B95421B3CF1AC814017D9DDD21CDDB8286A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:69:da:6b:b6:4d:b4:13:70:7b:1b:e7:36:
                    03:2f:9e:09:bf:b3:24:7a:06:24:c0:c7:3f:2d:09:
                    ce:6f:b3:da:81:11:11:4b:d1:50:80:c6:4a:9f:e0:
                    86:87:84:1c:00:f3:51:4c:af:a7:41:cd:d6:82:f8:
                    0d:a7:30:52:2d:f4:89:a2:00:fb:2b:50:19:24:74:
                    b7:16:80:e0:4b:b7:bf:4d:b9:c8:86:96:bf:f7:aa:
                    b7:f6:4c:3d:c5:ec:b1:26:8e:d8:73:36:5e:97:ca:
                    1b:00:96:99:08:f7:83:57:9a:cf:87:1a:05:5a:f7:
                    78:b4:bb:22:2c:42:25:44:a6:60:9f:06:b3:7a:73:
                    68:7b:02:1d:09:2f:43:07:94:7b:eb:8b:ea:d7:ec:
                    8a:7c:14:d0:4d:47:8f:c5:8f:b6:35:3f:50:14:21:
                    d1:b6:ec:a0:bc:b8:e8:93:13:45:38:f9:59:e6:94:
                    03:f7:fa:2b:68:73:d4:bf:65:55:d0:63:fc:a2:65:
                    34:88:fc:f3:00:a3:aa:a7:a6:3a:85:49:8b:5e:74:
                    75:67:a3:4e:c6:22:eb:ca:6a:f2:f4:5a:24:ec:08:
                    1c:26:07:f7:e8:67:fc:8b:48:5d:38:7c:d8:07:68:
                    30:71:23:1f:57:39:ef:a7:1f:67:1b:94:5b:99:a2:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AB:4B:95:42:1B:3C:F1:AC:81:40:17:D9:DD:D2:1C:DD:B8:28:6A
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.1.0/24
                  79.183.4.0/24
                  79.183.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:81:53:04:d5:b6:bc:75:89:01:00:fc:23:ff:86:e5:5e:
         34:1e:3b:ae:28:d9:6f:ed:c8:2c:0a:ce:ab:83:18:39:a9:5d:
         ab:25:b7:ce:4b:3d:1d:91:ef:b6:80:fd:1b:64:fd:8d:28:95:
         ab:8d:c1:f4:2c:3b:01:27:b9:f4:b6:4a:ec:36:35:7f:fa:b0:
         a6:13:bd:c7:d3:36:a2:6e:83:ba:40:cb:15:b0:d0:bc:e3:65:
         56:d4:b1:3a:bf:f6:76:57:c0:03:98:63:92:31:e1:63:7d:b3:
         79:17:4a:e9:c6:82:78:9a:ed:9c:0a:15:c0:47:93:78:22:98:
         6d:de:5a:96:d3:89:3f:12:f5:68:c8:6e:05:08:56:9a:5f:19:
         8e:ff:f1:ce:d9:22:0f:0a:40:47:ed:d6:8e:d9:6a:6a:92:ef:
         1c:f5:61:a8:0c:81:37:ba:1a:a6:35:68:73:ff:85:0b:ef:be:
         90:dd:d0:d1:aa:da:34:f6:e9:e3:58:7c:a7:33:71:f5:94:e5:
         90:93:91:ff:c0:d3:94:ab:64:2e:5e:a3:e1:4d:0f:50:82:c9:
         ef:55:6f:e1:4b:36:a0:e1:eb:a5:d9:d7:ae:81:b7:63:34:60:
         1a:41:22:95:60:4f:c6:46:85:4c:12:29:76:ce:83:c6:a0:6b:
         b8:fc:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:54 2026 by rpki-client