Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6461.roa
File:                     AS6461.roa (raw, json)
Hash identifier:          PckPPIlnrz0xFbQqTfAGtYRfxGXkzXa/p85R6+FJgCI=
Subject key identifier:   F5:8A:3B:C8:B6:5A:FB:C5:7C:C1:31:4B:E9:36:5A:88:F4:65:67:E6
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       599B31E7FACD709FAE0D5434990100408E8B643E
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6461.roa
Signing time:             Mon 05 Oct 2026 06:12:43 +0000
ROA not before:           Mon 05 Oct 2026 06:07:43 +0000
ROA not after:            Mon 04 Oct 2027 06:12:43 +0000
asID:                     6461
IP address blocks:        79.183.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:31:e7:fa:cd:70:9f:ae:0d:54:34:99:01:00:40:8e:8b:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:07:43 2026 GMT
            Not After : Oct  4 06:12:43 2027 GMT
        Subject: CN=F58A3BC8B65AFBC57CC1314BE9365A88F46567E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:94:2f:99:28:7f:28:57:0b:42:b4:2f:a1:
                    50:cc:a2:3c:3e:fa:d6:fb:fe:eb:55:c4:6d:4e:82:
                    bd:3e:a8:64:ca:03:5f:40:73:88:f4:18:e5:b5:f3:
                    d7:1c:57:7d:5b:9f:f3:54:59:d6:49:cc:90:a2:0b:
                    04:a3:e5:e8:fc:eb:00:e6:f1:72:27:70:d0:38:96:
                    28:7a:31:b4:ae:3a:19:91:3d:9a:21:41:73:3d:c3:
                    df:11:9c:ad:2e:aa:16:8c:b4:4d:5f:22:a6:7a:0a:
                    b6:63:12:e8:ac:59:84:eb:99:4e:1c:23:8f:66:db:
                    e5:a1:af:98:cd:dc:2a:54:da:ec:6c:1b:94:5b:48:
                    67:1d:c3:f1:04:29:5c:1e:59:23:a0:a9:5c:fb:e4:
                    31:fa:22:8a:39:c4:42:c5:0c:92:06:00:8c:2c:0d:
                    b9:11:e1:62:c9:b3:fa:37:1f:91:de:fa:93:6d:82:
                    48:ae:b8:d2:f4:ec:9f:de:06:1a:99:4d:f1:89:08:
                    c5:41:f8:9f:be:d9:a6:80:cb:96:2e:22:12:4b:e6:
                    19:3c:e6:06:f7:e6:f3:5c:b0:71:8b:a8:7a:f4:51:
                    55:26:43:ee:40:c2:da:1c:c3:37:7b:4b:29:51:df:
                    dc:9b:8d:ef:dd:7d:46:5b:89:32:55:98:ab:6c:98:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8A:3B:C8:B6:5A:FB:C5:7C:C1:31:4B:E9:36:5A:88:F4:65:67:E6
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6461.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:28:82:5d:cb:97:e5:6e:0e:75:bd:0c:42:05:00:7c:3a:
         5a:4d:47:28:1d:b1:25:1a:6f:03:5e:0b:e6:81:ae:83:61:dd:
         2d:3b:72:67:da:da:8c:a3:9a:95:37:8d:14:9b:08:38:dc:e3:
         d1:62:25:ba:00:c4:91:df:c8:11:88:78:23:98:5b:fa:98:c8:
         f8:05:f7:e6:97:5a:8f:f4:89:72:be:e6:15:c1:e8:c0:b7:99:
         54:25:b0:ed:0d:9b:1b:24:eb:ac:c9:74:18:80:c7:21:9a:46:
         48:15:3d:56:b2:38:f7:5c:1a:1e:e4:05:72:c1:00:a0:93:26:
         4a:dd:a2:e1:d2:cb:27:02:af:57:7e:8c:21:9d:9a:d8:32:08:
         fc:54:af:5a:be:37:1c:77:31:9e:4b:6a:dd:73:5e:c0:7d:8b:
         d9:a8:6e:95:97:d7:03:20:12:f3:08:1b:9e:39:d2:09:f0:bc:
         c4:58:e7:68:9e:78:77:51:60:f1:f0:8d:34:0d:4e:de:74:1e:
         fc:44:59:a9:c2:ca:ad:cc:0f:18:9d:5a:2c:1c:0d:92:0f:f3:
         52:fb:34:bc:20:1a:8f:17:0c:73:83:63:7b:29:56:2b:57:41:
         19:cd:35:9c:0b:1d:b6:f3:89:93:69:62:f8:77:f1:27:13:ea:
         44:92:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:49 2026 by rpki-client