Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34224.roa
File:                     AS34224.roa (raw, json)
Hash identifier:          tRa8dJR+YAOFHtQuOXWrGsCKey3V4MqViocQmfk3/SM=
Subject key identifier:   30:80:85:E9:73:A0:00:08:1D:8E:2A:A9:E4:06:29:AD:5E:F7:2E:AA
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       4EFCAD40440697DF344CE2C03F9FB3D7EB4FDAA1
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34224.roa
Signing time:             Mon 05 Oct 2026 06:12:18 +0000
ROA not before:           Mon 05 Oct 2026 06:07:18 +0000
ROA not after:            Mon 04 Oct 2027 06:12:18 +0000
asID:                     34224
IP address blocks:        79.182.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fc:ad:40:44:06:97:df:34:4c:e2:c0:3f:9f:b3:d7:eb:4f:da:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:18 2026 GMT
            Not After : Oct  4 06:12:18 2027 GMT
        Subject: CN=308085E973A000081D8E2AA9E40629AD5EF72EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:39:c9:c2:fd:77:4d:ee:51:14:68:74:6e:
                    ad:6a:99:9b:a3:69:3c:64:3b:56:06:db:c9:3e:07:
                    5f:06:f4:fc:38:0e:8e:2b:9f:0e:e5:97:56:34:95:
                    33:85:89:78:99:8a:fb:a5:10:f4:c7:92:bf:dc:87:
                    dc:b7:ed:8b:ac:8b:5c:d2:58:e5:78:81:c4:6c:36:
                    83:33:c8:44:c1:a5:d6:ef:40:e6:e7:6c:0c:9d:6c:
                    45:51:65:1e:64:e9:80:04:9b:ba:9d:d5:4b:68:35:
                    0e:f6:17:85:d9:e1:eb:fd:09:ed:39:97:0d:ec:e8:
                    2c:bc:9f:41:d2:b5:8d:9f:5c:3a:ad:d5:03:3e:3e:
                    27:13:dd:1b:5f:08:9c:a5:5e:f9:53:13:4a:69:be:
                    94:cd:05:8d:a6:75:0f:46:7f:9d:45:65:ae:b1:87:
                    b0:72:bc:04:d5:98:53:21:2e:1c:2c:62:b5:b3:e0:
                    37:ce:0e:23:27:ec:2a:2d:17:2c:04:21:68:01:0b:
                    68:fc:70:a6:99:2f:28:3e:97:b1:7c:2f:6b:f5:7a:
                    0b:a2:42:82:7d:b5:21:f1:69:78:62:dc:b9:0e:a2:
                    d7:12:84:da:a6:d6:c4:bc:20:78:22:85:ff:2b:91:
                    ee:03:e3:c6:7a:a7:3f:8a:ac:f8:ee:a6:87:c3:d5:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:85:E9:73:A0:00:08:1D:8E:2A:A9:E4:06:29:AD:5E:F7:2E:AA
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:f7:8e:7f:04:da:65:f6:e8:1c:00:87:c9:b1:5f:12:14:b4:
         d7:44:e5:f4:1e:44:6b:db:ad:92:7d:73:f5:5e:15:64:3a:51:
         98:39:37:dc:a2:37:87:91:fa:f2:15:d7:22:6a:bf:e6:cf:07:
         82:ff:cd:39:da:1b:44:43:54:f7:cc:50:d1:d1:07:4c:d3:4c:
         03:6f:ae:1f:00:76:8e:88:3a:fd:b7:d3:be:2d:00:d5:47:2f:
         0e:5a:56:1c:2e:3e:7c:ce:97:cc:36:af:b9:01:4e:8c:f0:66:
         ae:f4:62:56:ec:96:71:28:0b:e5:20:2c:de:86:9a:7d:09:4b:
         dc:d4:5d:93:24:03:4d:a4:4b:68:0b:ce:f3:5a:64:92:30:f5:
         90:98:a5:f5:5e:24:37:65:ff:71:88:f3:ed:39:9f:3a:4e:63:
         9f:f7:77:f4:86:b6:99:0b:42:ea:3a:c9:88:2b:2f:4e:9e:07:
         18:c9:e3:34:c3:14:5b:6b:ae:93:a7:ad:e1:44:72:e6:cc:2b:
         3f:23:b7:30:f6:17:b8:55:84:08:83:c8:c0:0f:a6:46:18:dc:
         b5:44:72:85:1b:ef:a6:28:33:6f:94:ab:7b:01:03:56:3d:a1:
         d3:68:bf:52:f3:59:31:83:33:17:03:cb:9c:7b:1c:5b:74:de:
         ba:bd:03:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:30 2026 by rpki-client