Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          t7pibfHWV7YjUH9Z/JH/F+BHNREFtcYOnhfU4SsS6eM=
Subject key identifier:   EF:F1:EE:5C:72:BA:D7:60:6C:08:2B:24:AA:17:52:30:BC:09:19:A3
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       2359885BD297A031CB06E3DA7297789EEA6F405D
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219427.roa
Signing time:             Mon 05 Oct 2026 06:13:18 +0000
ROA not before:           Mon 05 Oct 2026 06:08:18 +0000
ROA not after:            Mon 04 Oct 2027 06:13:18 +0000
asID:                     219427
IP address blocks:        79.180.10.0/24 maxlen: 24
                          79.180.77.0/24 maxlen: 24
                          79.180.101.0/24 maxlen: 24
                          109.64.210.0/24 maxlen: 24
                          109.66.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:59:88:5b:d2:97:a0:31:cb:06:e3:da:72:97:78:9e:ea:6f:40:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:08:18 2026 GMT
            Not After : Oct  4 06:13:18 2027 GMT
        Subject: CN=EFF1EE5C72BAD7606C082B24AA175230BC0919A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:59:1a:a0:01:39:0e:a2:be:9c:b9:8a:48:
                    18:4d:07:1c:52:6e:0e:5b:de:07:3e:8b:de:d9:91:
                    50:58:b7:c8:3f:70:0b:af:05:67:d0:ad:2c:6e:96:
                    54:30:ff:a2:97:4a:cc:94:7d:29:92:10:46:2f:9b:
                    f0:aa:7a:96:eb:a2:33:53:fc:2e:c5:8f:42:2a:e7:
                    e2:6a:5a:69:88:b2:33:b1:d3:e0:57:b4:c4:78:25:
                    f0:ad:61:9d:98:02:9b:75:59:32:da:c3:14:ad:29:
                    fa:e5:cd:5d:aa:6e:ad:8f:4e:52:55:20:db:4d:f5:
                    09:6f:b8:40:3c:a4:32:58:66:d1:54:a6:98:8d:83:
                    f8:a5:ec:fa:df:aa:9c:77:38:45:c4:e1:6b:db:70:
                    5a:6d:32:f8:de:4d:4b:6c:5c:73:43:e4:1f:e0:a1:
                    16:18:75:a1:e0:02:43:df:56:bc:28:d4:cd:c4:83:
                    74:ad:96:dd:23:d3:e0:3a:fe:40:41:d6:69:54:a3:
                    0b:81:c3:a4:3c:93:72:d4:6a:ba:c2:61:9b:1f:7d:
                    f5:0f:8b:60:c7:2e:e5:00:0f:22:8f:0f:37:2c:b4:
                    c5:44:ad:8a:d5:ce:4c:d7:26:9e:f8:33:84:09:52:
                    6b:9d:16:de:75:af:ad:3c:df:6c:a3:e4:cb:c5:b4:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:EE:5C:72:BA:D7:60:6C:08:2B:24:AA:17:52:30:BC:09:19:A3
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.10.0/24
                  79.180.77.0/24
                  79.180.101.0/24
                  109.64.210.0/24
                  109.66.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c4:1c:f9:8b:1b:ac:d1:2f:f8:e9:13:3b:82:86:29:26:5c:
         93:13:bf:23:09:0d:dc:47:4b:f5:61:e4:a6:28:7d:2f:82:4b:
         22:a5:87:a6:a0:eb:6b:21:4c:9b:7b:86:5f:7b:fe:68:18:e3:
         b7:c3:61:5f:a1:ff:1e:cf:7e:cd:db:8a:3b:87:52:d6:41:24:
         63:bf:38:8a:d7:2e:aa:7f:99:c9:02:0c:1e:e8:e2:cd:a3:bf:
         65:ab:f4:55:cc:4a:62:39:32:71:52:48:f3:63:ac:2c:28:cd:
         50:ba:cb:43:73:7f:28:f9:d8:7a:7f:05:a1:24:6a:cb:4c:11:
         39:63:9d:05:f8:58:81:09:14:e0:a1:6c:2f:07:f7:c4:05:56:
         24:5b:24:f3:13:75:ce:5d:96:7c:9a:73:ee:bc:5c:55:47:f7:
         03:95:76:fe:5a:d0:7e:f3:1a:7a:4f:02:8c:d1:fa:98:00:32:
         e0:d0:6a:56:e7:0c:34:53:14:10:71:3d:7c:2a:1f:9d:3a:76:
         bb:a2:3d:48:69:e2:4a:62:6f:ba:bf:57:c3:56:b3:77:e2:32:
         44:53:a5:b1:f5:4e:2d:3b:8a:19:1d:31:b0:54:94:0d:11:75:
         6e:06:e9:ca:3c:a4:1f:d7:66:bd:ae:59:40:b9:59:13:e1:c9:
         df:5e:01:22
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUI1mIW9KXoDHLBuPacpd4nupvQF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MThaFw0yNzEwMDQwNjEzMThaMDMxMTAvBgNV
BAMTKEVGRjFFRTVDNzJCQUQ3NjA2QzA4MkIyNEFBMTc1MjMwQkMwOTE5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGlkaoAE5DqK+nLmKSBhNBxxS
bg5b3gc+i97ZkVBYt8g/cAuvBWfQrSxullQw/6KXSsyUfSmSEEYvm/CqepbrojNT
/C7Fj0Iq5+JqWmmIsjOx0+BXtMR4JfCtYZ2YApt1WTLawxStKfrlzV2qbq2PTlJV
INtN9QlvuEA8pDJYZtFUppiNg/il7Prfqpx3OEXE4WvbcFptMvjeTUtsXHND5B/g
oRYYdaHgAkPfVrwo1M3Eg3Stlt0j0+A6/kBB1mlUowuBw6Q8k3LUarrCYZsfffUP
i2DHLuUADyKPDzcstMVErYrVzkzXJp74M4QJUmudFt51r60832yj5MvFtCi7AgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU7/HuXHK612BsCCskqhdSMLwJGaMwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTk0Mjcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE
AgABMB4DBABPtAoDBABPtE0DBABPtGUDBABtQNIDBABtQhAwDQYJKoZIhvcNAQEL
BQADggEBAIDEHPmLG6zRL/jpEzuChikmXJMTvyMJDdxHS/Vh5KYofS+CSyKlh6ag
62shTJt7hl97/mgY47fDYV+h/x7Pfs3bijuHUtZBJGO/OIrXLqp/mckCDB7o4s2j
v2Wr9FXMSmI5MnFSSPNjrCwozVC6y0Nzfyj52Hp/BaEkastMETljnQX4WIEJFOCh
bC8H98QFViRbJPMTdc5dlnyac+68XFVH9wOVdv5a0H7zGnpPAozR+pgAMuDQalbn
DDRTFBBxPXwqH506druiPUhp4kpib7q/V8NWs3fiMkRTpbH1Ti07ihkdMbBUlA0R
dW4G6co8pB/XZr2uWUC5WRPhyd9eASI=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:33 2026 by rpki-client