Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS48266.roa
File:                     AS48266.roa (raw, json)
Hash identifier:          khgQGhroE+1dbO24/gfX12wydtJlKkdYDswliSlSegg=
Subject key identifier:   B7:82:65:75:00:07:E9:B2:5B:37:11:1F:0C:3B:5A:01:80:69:A6:46
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       455AE48B50133FCBD48309619D0C9FD6795C0A1D
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS48266.roa
Signing time:             Mon 05 Oct 2026 06:12:00 +0000
ROA not before:           Mon 05 Oct 2026 06:07:00 +0000
ROA not after:            Mon 04 Oct 2027 06:12:00 +0000
asID:                     48266
IP address blocks:        79.182.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5a:e4:8b:50:13:3f:cb:d4:83:09:61:9d:0c:9f:d6:79:5c:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:00 2026 GMT
            Not After : Oct  4 06:12:00 2027 GMT
        Subject: CN=B78265750007E9B25B37111F0C3B5A018069A646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:ec:d1:da:13:8b:c2:82:03:31:5a:e4:9e:
                    bc:81:42:ca:91:c8:47:dc:55:39:7f:e0:5f:d5:29:
                    68:70:a4:dd:fe:7a:ed:2c:79:0c:46:76:91:30:aa:
                    d1:0b:36:ae:48:2b:5d:64:51:c0:e2:99:97:ab:a8:
                    2d:30:5c:de:4f:10:6e:52:6a:cd:58:f9:78:18:3f:
                    89:1e:e1:bb:c2:9f:73:15:e5:d6:b0:a8:3e:7b:03:
                    d8:a3:fe:54:7a:2f:75:44:0a:28:ad:71:6e:c2:cf:
                    37:40:03:b1:a3:fd:71:4c:68:92:1b:6f:51:6e:91:
                    07:bc:c6:e4:95:2b:d1:44:b8:6c:83:45:da:16:e3:
                    7e:94:6c:2c:89:37:02:d2:d2:44:69:5b:12:54:18:
                    5d:88:a3:67:e5:67:d5:9a:77:66:cf:91:45:51:6f:
                    31:7f:8e:df:14:5f:8d:75:36:fa:60:20:eb:c0:7b:
                    5b:73:41:2d:c4:78:6a:30:26:f1:b0:16:86:b6:b4:
                    e6:fc:34:66:91:aa:00:df:fd:6c:4e:48:af:06:3d:
                    8d:e5:0f:cc:b8:a7:47:fc:5e:c3:a3:5b:5e:fa:e4:
                    bb:39:de:42:03:52:8e:10:58:ee:f1:bd:6d:b8:1e:
                    8f:aa:38:d6:3c:da:ef:1f:7a:4c:67:0d:9c:bd:17:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:65:75:00:07:E9:B2:5B:37:11:1F:0C:3B:5A:01:80:69:A6:46
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS48266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:93:88:c9:98:24:94:9e:77:cb:14:62:ff:16:fd:52:d5:00:
         65:5f:ef:e9:86:be:91:6d:a2:39:c1:aa:c7:75:55:80:15:e2:
         9e:78:07:f5:6f:0a:a5:ce:6c:0b:95:0a:de:5f:2c:c1:03:bf:
         f1:0a:13:f2:01:83:fc:95:5c:b7:1c:91:e7:6e:98:cf:10:30:
         d8:90:31:04:de:ac:82:46:11:dd:23:7f:e8:0b:1f:f7:a3:b6:
         64:d4:0c:19:91:ec:15:cd:90:6f:21:c1:03:60:54:a2:e2:bd:
         08:8a:65:3b:7c:24:74:5f:2a:4d:c9:49:93:0c:d4:84:ab:5b:
         19:ae:31:34:4c:05:af:38:35:74:3e:ca:c0:01:61:74:3b:a1:
         70:e6:eb:e1:f3:cb:24:48:97:37:7a:1f:9c:52:af:01:fc:33:
         08:79:c6:57:f7:0a:44:d6:5b:54:95:8b:b8:aa:62:5b:63:f6:
         91:96:62:42:f3:0a:79:1e:24:a0:f0:15:62:bf:d6:92:b4:60:
         23:9c:25:59:ae:f8:9a:55:36:9b:e1:89:3d:88:27:c7:fc:77:
         bd:ab:d4:48:c9:32:a2:85:bc:68:4c:d6:09:31:20:a8:4b:3b:
         ce:c1:35:00:54:37:22:2b:dd:02:df:f8:f6:a0:7f:94:bd:8d:
         c9:2a:f0:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:56:02 2026 by rpki-client