Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30042.roa
File:                     AS30042.roa (raw, json)
Hash identifier:          KVmfywjSmvsRoUewhLwHIu0ZtMjKE0tVsGkMcS5lGDk=
Subject key identifier:   88:F3:75:C1:D1:74:E3:6A:68:1C:3B:71:55:6A:DD:49:8C:7C:9B:25
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       10BF7A236F813F7B9F70088F0910B17E58B08989
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30042.roa
Signing time:             Mon 05 Oct 2026 06:12:58 +0000
ROA not before:           Mon 05 Oct 2026 06:07:58 +0000
ROA not after:            Mon 04 Oct 2027 06:12:58 +0000
asID:                     30042
IP address blocks:        79.180.32.0/23 maxlen: 24
                          79.182.2.0/24 maxlen: 24
                          79.182.54.0/24 maxlen: 24
                          79.182.125.0/24 maxlen: 24
                          79.183.8.0/24 maxlen: 24
                          79.183.46.0/24 maxlen: 24
                          79.183.255.0/24 maxlen: 24
                          109.64.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 16:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bf:7a:23:6f:81:3f:7b:9f:70:08:8f:09:10:b1:7e:58:b0:89:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:58 2026 GMT
            Not After : Oct  4 06:12:58 2027 GMT
        Subject: CN=88F375C1D174E36A681C3B71556ADD498C7C9B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:20:16:45:12:97:ba:62:ec:88:5b:c4:88:
                    16:c5:6a:3b:84:92:09:4b:5a:25:c1:93:82:ce:dc:
                    a6:94:fc:bf:8e:65:57:d7:e2:85:45:59:8f:69:7c:
                    c8:59:2d:db:d8:09:4a:6e:01:72:c4:b5:0b:6b:49:
                    0b:e5:9d:e7:6e:7c:36:63:73:6b:38:a0:dc:08:80:
                    b2:88:6a:da:e3:f8:56:f8:87:f2:1b:cd:a9:1d:6b:
                    b7:86:34:f1:3a:24:97:ed:3e:8c:68:65:10:ce:c6:
                    9c:91:51:50:8b:dc:35:f9:59:3d:87:f2:7c:64:35:
                    71:ff:52:c9:36:8c:47:8d:e6:e2:68:dc:9a:12:c4:
                    ff:7c:5d:ac:e8:a9:e6:22:08:9e:c6:79:3d:43:f9:
                    17:9e:d1:67:12:32:b1:1a:b2:42:9d:73:89:be:7f:
                    a1:be:72:62:5a:c6:d8:94:41:26:3f:42:02:a7:54:
                    5f:21:09:0b:c0:96:ce:37:71:5d:fd:cc:0d:56:36:
                    4a:ca:08:56:33:a7:3d:2d:9a:19:38:68:5c:0b:c8:
                    7b:b8:79:0c:73:fa:d2:f4:39:b1:89:3b:df:58:2e:
                    ad:a9:a8:d5:23:95:0a:33:02:5e:3a:69:29:cd:77:
                    94:e1:65:e3:c3:2f:f7:59:cc:32:20:d4:19:19:d4:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:75:C1:D1:74:E3:6A:68:1C:3B:71:55:6A:DD:49:8C:7C:9B:25
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS30042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.32.0/23
                  79.182.2.0/24
                  79.182.54.0/24
                  79.182.125.0/24
                  79.183.8.0/24
                  79.183.46.0/24
                  79.183.255.0/24
                  109.64.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:f9:8d:fb:34:9e:ed:ba:c9:e7:b1:74:01:5a:7c:be:2f:
         50:6a:5b:82:90:f2:b0:fe:6e:1d:a1:c1:ab:5e:c4:04:7b:ea:
         81:92:aa:1a:d9:4c:56:05:5a:f4:25:2b:e7:5d:7b:1d:73:5a:
         a7:b8:20:e4:74:5e:c4:8c:82:47:b3:f7:fa:e6:6a:5b:35:48:
         47:c8:24:7b:4e:d0:74:06:70:b5:84:2b:06:f5:fb:85:66:7b:
         59:23:07:4f:2e:67:40:21:bc:96:e2:95:e0:75:da:20:a1:57:
         9c:e5:99:f5:c2:d5:9f:4a:80:cb:21:42:b6:d7:a4:5e:75:01:
         9d:e6:e4:8f:3f:de:d3:34:34:4e:83:37:d0:fd:e9:80:e1:77:
         52:36:93:73:76:37:76:f7:f9:f5:58:dd:b1:8b:d2:e5:7c:9c:
         2e:d9:d5:88:47:2d:4c:bb:e8:0b:62:7d:5a:4b:e7:f6:10:c5:
         8f:b0:2e:b3:21:4b:a1:b9:c8:93:47:67:67:8b:55:a2:d9:dd:
         89:10:a4:0a:25:9c:1e:4d:55:42:a8:0e:d4:69:b4:b9:f6:88:
         47:1f:5c:1a:48:30:8c:dc:81:9b:6b:04:52:83:6b:5b:a1:ca:
         36:88:65:7c:8b:78:90:5f:16:d8:51:f3:30:12:a1:90:35:9a:
         c8:de:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:43 2026 by rpki-client