Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218616.roa
File:                     AS218616.roa (raw, json)
Hash identifier:          7oGP0otCdwXT2zYStV2HoPrBD3HRFcJrBNgDcpWSpzQ=
Subject key identifier:   52:5E:10:34:53:1E:82:44:EA:53:A0:8F:9E:08:6F:03:42:B3:F8:15
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       70327BA930537284D8877CDB41BDBC73508EB603
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218616.roa
Signing time:             Mon 05 Oct 2026 06:11:10 +0000
ROA not before:           Mon 05 Oct 2026 06:06:10 +0000
ROA not after:            Mon 04 Oct 2027 06:11:10 +0000
asID:                     218616
IP address blocks:        79.176.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:32:7b:a9:30:53:72:84:d8:87:7c:db:41:bd:bc:73:50:8e:b6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:06:10 2026 GMT
            Not After : Oct  4 06:11:10 2027 GMT
        Subject: CN=525E1034531E8244EA53A08F9E086F0342B3F815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:55:c8:da:d3:ee:28:e4:d0:b0:fd:78:92:
                    5b:0e:0d:80:ac:0f:6e:61:c6:5c:60:0b:48:c0:dc:
                    f2:73:52:82:7e:1d:27:68:e9:bd:c6:4d:20:d2:9a:
                    e5:22:62:69:d2:73:a8:32:18:da:f7:45:be:ec:77:
                    5a:08:76:35:4a:68:47:ad:ff:bd:51:43:89:1f:9b:
                    fd:20:11:2e:bb:28:39:c1:4d:e1:7b:8b:c1:1f:d9:
                    f4:06:cf:94:66:97:ad:4f:e9:0c:03:5d:c6:58:2d:
                    0a:f0:72:b7:73:43:89:10:0b:d8:0a:7d:f6:e2:11:
                    37:e6:0a:f6:8e:35:b5:0b:b2:d5:9a:4a:6e:5c:7a:
                    d9:ed:fd:71:ec:74:47:31:53:6b:a2:d7:4f:08:4d:
                    28:7f:a9:a4:9a:cd:05:3e:35:8b:3e:ad:6f:01:8f:
                    c7:da:0f:3a:1f:f5:d1:0f:28:44:22:8d:80:f4:ad:
                    67:7e:c7:c1:dd:6b:df:5b:5f:86:42:f5:c3:e4:f8:
                    94:bc:c7:86:88:ac:3f:55:9a:0d:a9:23:44:a1:c6:
                    31:c7:71:7d:65:e9:ca:b3:8c:c5:72:f0:36:ee:08:
                    a0:49:3f:17:53:1a:f0:f9:40:54:3c:5c:47:5a:44:
                    f3:b5:cf:73:90:8a:90:4d:89:60:df:46:b9:56:22:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5E:10:34:53:1E:82:44:EA:53:A0:8F:9E:08:6F:03:42:B3:F8:15
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:d3:34:31:76:0d:30:f3:3f:f9:5f:81:3a:ae:3f:4c:e3:
         08:1d:6e:be:5c:02:5b:4f:2a:9a:c3:48:8b:d7:6e:32:5a:27:
         ea:91:8d:99:10:93:3b:46:c6:85:cd:15:e4:64:9a:d9:1b:f0:
         1e:d6:a1:e7:e3:ff:b9:54:69:28:ba:9a:f9:53:e3:44:77:21:
         ef:41:1b:ec:25:75:1f:87:90:88:ff:71:40:bd:84:b2:70:72:
         bc:f7:3f:3c:9f:c4:d3:87:d1:9d:76:a0:71:15:8c:ac:81:08:
         f3:4d:49:41:2c:fa:21:fb:3b:f9:ce:8d:6f:48:81:4c:aa:22:
         b3:c6:46:4b:2c:91:d2:95:92:df:61:2d:5e:8f:12:b5:dd:a8:
         28:d3:bc:f5:f6:de:6a:7d:85:87:9b:99:15:d3:72:d6:46:f2:
         94:77:db:80:f2:7c:cc:79:b5:0a:ac:3e:dd:ea:f0:f0:79:eb:
         62:3b:4d:bc:3e:55:0e:2f:7f:79:cc:99:38:44:a3:30:5d:c4:
         d8:af:ea:36:1c:3b:8b:bf:15:d3:ef:c6:3e:e6:af:0d:8d:ac:
         b1:12:6a:3f:28:3e:67:9a:67:60:90:46:ea:06:02:80:b8:ab:
         ae:7b:5c:34:fc:f3:b5:d3:f9:db:5e:18:01:53:21:5d:63:2e:
         21:ba:fc:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:56:04 2026 by rpki-client