Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS44213.roa
File:                     AS44213.roa (raw, json)
Hash identifier:          lxdcDvBhvpy6iikOJ/wK+P/tA37WE8/VNW+zv8epzwU=
Subject key identifier:   84:87:16:8E:7D:84:9B:B4:E1:62:75:55:0F:95:91:09:C8:0D:F2:4C
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       40628F0201C16561D20E1AA64EADE2AEB1D81ACF
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS44213.roa
Signing time:             Mon 05 Oct 2026 06:11:10 +0000
ROA not before:           Mon 05 Oct 2026 06:06:10 +0000
ROA not after:            Mon 04 Oct 2027 06:11:10 +0000
asID:                     44213
IP address blocks:        79.176.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:62:8f:02:01:c1:65:61:d2:0e:1a:a6:4e:ad:e2:ae:b1:d8:1a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:06:10 2026 GMT
            Not After : Oct  4 06:11:10 2027 GMT
        Subject: CN=8487168E7D849BB4E16275550F959109C80DF24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:2c:e5:a2:64:40:bc:3d:90:d9:97:45:81:
                    37:68:d7:ad:e7:09:0a:98:1a:53:c1:63:2c:91:1c:
                    55:56:8a:bb:fe:db:af:27:46:af:79:8d:39:00:c2:
                    ad:81:3d:a4:5d:d2:7f:65:fc:a3:2c:7f:e2:e2:cc:
                    91:06:7f:10:cd:4b:dd:e2:48:ef:da:49:4d:04:d6:
                    eb:75:ce:84:9b:c3:74:b1:be:02:dd:4f:36:e0:be:
                    9a:b4:83:2e:53:90:93:e9:2d:cb:8b:51:49:75:c0:
                    04:83:29:62:8f:a0:3d:e2:3d:6e:2c:a3:80:00:b7:
                    84:c0:db:ff:0f:54:11:99:db:b1:73:2d:3f:80:74:
                    40:66:b6:03:7e:0c:88:5d:bf:40:81:a3:66:bc:37:
                    13:83:bc:6b:40:94:bc:a4:47:88:83:28:38:fa:cb:
                    72:a5:13:1c:ba:53:fb:d9:c7:a0:e0:e6:3c:39:61:
                    f9:e0:96:03:94:73:81:e1:1a:08:71:e4:33:3c:02:
                    30:35:8b:8f:9c:18:74:1d:e3:77:53:63:81:f6:cc:
                    25:83:33:9a:67:1b:41:ff:35:04:b3:b7:c9:e8:88:
                    c9:3f:58:f4:3d:97:34:66:ff:6a:45:d6:38:15:9e:
                    dc:a6:76:99:3e:2d:3d:29:43:72:b2:32:c5:fd:7a:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:16:8E:7D:84:9B:B4:E1:62:75:55:0F:95:91:09:C8:0D:F2:4C
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS44213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:59:54:5a:29:d8:9c:e4:9d:b2:58:60:e0:a9:4f:ab:8c:
         83:70:5c:5a:00:31:5b:b2:95:90:89:77:b1:33:c9:6b:59:b0:
         e3:e4:10:65:ee:be:4a:13:35:06:80:8e:b7:e5:9b:82:dc:a2:
         6b:18:50:17:1c:2d:0f:b1:13:27:96:b5:04:f7:12:24:f1:ab:
         3e:9b:3a:d6:70:19:cf:8f:a8:c4:20:8c:6f:73:84:77:7f:d2:
         aa:9f:27:35:ed:7e:9b:aa:b7:94:fb:f5:3e:3a:c8:ed:6a:22:
         e7:15:13:56:b2:da:75:76:92:21:10:1f:f7:93:5b:0c:b6:3f:
         80:fe:fb:7d:ff:c1:15:33:43:c6:78:df:22:a3:4d:02:1f:8a:
         db:ea:06:6c:b6:bc:ed:8a:de:45:2d:7a:3e:80:99:d7:f0:3b:
         5c:c3:13:71:dd:8e:e4:d6:45:34:d5:ec:a9:14:72:0a:eb:0a:
         79:63:4e:b9:4c:2d:06:13:0c:29:2a:c0:8b:ca:f3:1c:69:28:
         e4:28:aa:98:f1:10:ce:6c:bb:3f:b1:bf:72:0c:dc:14:13:e7:
         29:e4:05:d7:f0:91:eb:48:58:1d:62:d7:7e:38:46:bf:e6:03:
         06:64:59:06:ed:79:d6:fc:4f:e3:b4:0e:52:0c:07:4c:58:da:
         4b:60:f3:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:29 2026 by rpki-client