Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218944.roa
File:                     AS218944.roa (raw, json)
Hash identifier:          O9rhGFyyIIFa5Bq3Xv5zZ6IWn6/kOU9Vc78Yz6Bh4KY=
Subject key identifier:   FC:30:6D:65:6D:6C:B3:9A:51:F0:D3:0E:85:9C:38:0C:A7:AF:02:66
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       2F345931F4DE47FE68CDBDD08E48159F404E3DB7
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218944.roa
Signing time:             Sat 10 Oct 2026 19:01:05 +0000
ROA not before:           Sat 10 Oct 2026 18:56:05 +0000
ROA not after:            Sat 09 Oct 2027 19:01:05 +0000
asID:                     218944
IP address blocks:        79.183.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:34:59:31:f4:de:47:fe:68:cd:bd:d0:8e:48:15:9f:40:4e:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 10 18:56:05 2026 GMT
            Not After : Oct  9 19:01:05 2027 GMT
        Subject: CN=FC306D656D6CB39A51F0D30E859C380CA7AF0266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:50:f5:97:d6:81:12:16:2f:b1:a0:14:50:
                    1e:f8:5b:b4:3f:eb:d5:d2:c4:58:a2:da:cd:b1:1c:
                    ad:06:37:80:f8:64:6c:0e:9c:a0:b6:1c:d6:b6:98:
                    db:a2:34:a0:85:45:2d:db:a7:2f:5a:92:b6:29:33:
                    2b:db:6a:7f:6f:b9:30:71:2b:d4:96:9a:a6:50:d9:
                    a3:2b:d7:93:2b:4a:da:e9:d6:80:9d:b1:0c:4d:a7:
                    aa:ea:9b:a4:2e:87:6e:2d:19:e8:ed:fc:62:d1:d3:
                    3b:8f:b3:e6:dd:a1:5b:9d:02:05:1f:c1:0c:c1:56:
                    b5:a6:68:a3:1e:c9:f6:96:56:a5:d7:58:fd:3d:de:
                    2d:22:28:92:ef:22:7d:dd:05:56:1c:ca:53:e7:eb:
                    1a:9f:f9:06:be:b3:06:df:85:ea:de:8b:cb:5f:31:
                    14:1d:69:ac:fe:ee:99:cc:6c:be:3b:98:71:7a:a7:
                    30:a7:69:54:9c:bd:82:ea:c8:0a:f6:e5:ff:6a:11:
                    10:d8:e0:10:3c:f2:1c:a8:2d:8e:80:59:17:65:14:
                    8d:fa:d3:dc:42:a8:d9:84:07:5c:a8:f8:91:ae:85:
                    b9:40:d3:47:66:99:c4:c0:79:c5:8b:9c:c6:ce:53:
                    6e:99:80:3f:6e:3b:89:1c:fd:18:4d:7d:b6:45:c8:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:30:6D:65:6D:6C:B3:9A:51:F0:D3:0E:85:9C:38:0C:A7:AF:02:66
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218944.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:78:3b:b1:50:88:f6:a6:64:aa:92:53:85:7c:50:0d:76:ee:
         d4:8c:74:67:9d:60:ed:18:d2:d6:95:6b:cf:4d:b9:8a:d3:5a:
         54:a8:9c:0b:8c:2d:e2:e3:a0:6a:ab:6d:e9:50:37:88:bd:63:
         56:57:a3:f2:73:4c:76:8d:02:ce:63:e3:59:ac:94:21:65:b3:
         51:9b:a4:b6:57:bb:cc:a8:a4:f5:af:0e:8f:34:5a:19:a8:05:
         26:38:b3:a5:a5:e1:69:8a:31:a1:6a:00:c5:4a:d3:2f:80:59:
         23:b6:97:96:b1:e8:73:ce:d3:af:1f:11:23:9e:c7:03:22:8c:
         57:a9:57:3f:af:5a:f9:19:b0:63:4d:b4:9c:76:b3:02:c4:24:
         f4:fd:17:82:0f:1c:14:ca:48:88:cf:80:35:c9:d1:be:f8:98:
         4d:48:6c:c4:d5:22:15:99:a6:5a:86:0a:1e:67:7f:14:43:92:
         05:c9:4f:e2:08:a5:f6:59:79:f5:12:30:e2:e7:77:e0:73:c9:
         e1:62:98:5e:86:18:cc:5d:17:2b:9d:b7:eb:58:10:4c:55:cf:
         df:ac:1d:4e:ef:a8:ac:1c:c5:4a:74:5a:bf:b9:66:a4:54:ba:
         d8:a0:78:44:a4:4b:80:66:38:50:7c:5d:f3:86:52:d4:2f:41:
         5f:17:b2:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:46:36 2026 by rpki-client