Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6830.roa
File:                     AS6830.roa (raw, json)
Hash identifier:          vP0tltRUY+oSD5LTUmYwv5tXHJ30ZtcHHeCBDJ5R9e4=
Subject key identifier:   41:26:4A:8F:38:28:05:29:6B:55:AD:1D:4B:AF:01:1D:B2:59:60:0E
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       407D177857B486B08A785BE79FEE80F8D530831B
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6830.roa
Signing time:             Mon 05 Oct 2026 06:13:15 +0000
ROA not before:           Mon 05 Oct 2026 06:08:15 +0000
ROA not after:            Mon 04 Oct 2027 06:13:15 +0000
asID:                     6830
IP address blocks:        109.66.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7d:17:78:57:b4:86:b0:8a:78:5b:e7:9f:ee:80:f8:d5:30:83:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:08:15 2026 GMT
            Not After : Oct  4 06:13:15 2027 GMT
        Subject: CN=41264A8F382805296B55AD1D4BAF011DB259600E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:03:e2:f1:26:13:14:08:99:5a:96:06:a6:
                    8d:bc:88:95:ac:d5:c2:da:bb:7b:82:58:61:73:01:
                    7b:0f:c5:b7:ff:0a:e8:53:b8:a6:f6:a8:31:7d:7a:
                    01:39:86:9f:4f:ce:60:c1:61:46:45:93:a8:df:4c:
                    ec:a9:7f:f9:7a:15:a9:6d:9c:74:43:8f:a9:ab:c0:
                    12:f4:f5:4b:8f:52:ea:07:75:4d:e9:31:0c:cd:ae:
                    38:40:04:81:f0:e9:43:e1:bf:5c:76:92:a8:b2:7e:
                    f4:5d:f5:6f:dd:71:86:ec:f6:8e:f8:8e:54:c0:0f:
                    fe:67:c0:ae:21:83:32:b8:0c:bd:6e:78:3d:47:35:
                    41:af:e0:b8:cd:42:c2:ff:a7:a4:ac:67:08:d0:7d:
                    d2:15:8f:2d:6f:bf:41:18:fb:86:74:00:93:f7:6e:
                    23:28:63:9d:4e:f7:4d:89:c2:0b:85:f6:7e:66:30:
                    1a:aa:38:d1:77:fc:65:24:fb:cf:1a:2b:d2:f4:50:
                    de:7f:1b:c8:e0:71:9c:67:82:72:0d:f1:f5:a3:04:
                    d5:6f:bd:4d:5d:ba:74:41:1e:d7:35:f8:5b:57:bf:
                    b8:cb:32:df:dc:1b:53:c0:1c:7b:fc:f0:2f:03:06:
                    77:9b:fe:bc:61:f2:da:47:c0:25:25:53:52:32:4e:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:4A:8F:38:28:05:29:6B:55:AD:1D:4B:AF:01:1D:B2:59:60:0E
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.66.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f5:04:87:ac:9e:fc:fd:b1:e9:11:0e:86:6d:95:d2:e3:7a:
         5f:a1:f0:5d:05:a0:db:c9:81:fd:24:6c:a9:76:d4:e4:76:fe:
         85:9b:cc:22:43:77:0c:65:31:7e:f4:6a:c1:5f:2c:39:32:ce:
         49:d6:c2:4d:54:55:3a:06:c9:f1:3a:9f:11:f0:b3:e3:f2:03:
         dd:7b:3d:c9:fc:3a:bc:cc:3a:15:e8:ed:71:57:a4:3d:56:24:
         a6:00:4d:27:b6:22:ad:f3:fc:3b:2e:d6:ba:6b:d5:8c:1a:fd:
         8f:dd:54:f3:6d:00:e2:09:b7:df:96:c2:a0:10:c0:fa:d8:e6:
         67:01:0b:bb:cd:9c:7a:61:8e:55:c6:4c:7a:d9:10:ab:01:eb:
         61:48:dc:9e:60:5e:6e:97:26:aa:7c:1c:34:fc:0a:d2:60:5d:
         86:32:0c:a1:15:7b:da:36:b8:57:ba:02:67:2f:4b:55:7d:38:
         14:96:40:c9:fd:a1:eb:99:f7:00:b5:73:7c:12:fa:c1:5f:a3:
         6d:95:ab:1d:73:b6:c6:90:d8:47:82:66:c4:e7:1d:bd:61:74:
         c7:7c:44:9f:d2:1a:ba:1e:37:83:bd:88:58:80:0f:45:73:fa:
         53:bd:f7:7c:2f:13:c1:5b:fe:46:7f:fc:1a:1f:f5:29:46:7a:
         6c:ec:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:40 2026 by rpki-client