Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
File:                     AS202736.roa (raw, json)
Hash identifier:          D6+WqmjBvRB0iSsm2hDHg1OOVNIbjkIN12IC4JreXrw=
Subject key identifier:   5F:29:4A:6F:8D:D9:6E:E1:62:CC:70:0E:D5:3A:C2:B6:90:98:EF:76
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       1EDCD390C1E1F70D3DE475B8838147A06ACF41B5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa
Signing time:             Fri 06 Feb 2026 05:54:36 +0000
ROA not before:           Fri 06 Feb 2026 05:49:36 +0000
ROA not after:            Fri 05 Feb 2027 05:54:36 +0000
asID:                     202736
IP address blocks:        82.26.194.0/24 maxlen: 24
                          82.39.196.0/22 maxlen: 24
                          82.39.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:dc:d3:90:c1:e1:f7:0d:3d:e4:75:b8:83:81:47:a0:6a:cf:41:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Feb  6 05:49:36 2026 GMT
            Not After : Feb  5 05:54:36 2027 GMT
        Subject: CN=5F294A6F8DD96EE162CC700ED53AC2B69098EF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:da:53:38:87:dd:a2:51:9e:9e:02:63:bf:
                    f8:20:47:c4:30:a4:bc:a1:9a:8e:5f:d6:9e:ab:2d:
                    4c:a3:b1:44:9e:33:58:0d:0f:ea:95:d0:19:c0:58:
                    cd:ae:16:01:7f:18:02:9a:f0:a5:15:7d:ef:5b:bf:
                    3a:7b:b8:f6:0f:5c:18:bf:ad:27:34:59:93:da:68:
                    a3:87:7c:17:0f:8c:f3:61:36:97:b3:bc:7c:d7:66:
                    a5:cd:0e:37:62:3a:7c:e1:0b:04:0c:6a:14:21:81:
                    bb:47:b8:0b:e2:b7:0d:44:3c:78:bd:ae:ed:39:b1:
                    41:de:ac:a3:72:e0:03:08:36:48:2b:b0:6a:91:d7:
                    da:0c:94:c0:d4:30:06:e5:54:bb:e9:72:c4:40:ac:
                    8f:15:9a:c2:61:f4:3a:87:bf:0d:8d:d9:a2:99:15:
                    ae:02:c6:24:56:6f:99:0d:43:73:28:7b:6d:21:40:
                    53:58:27:ce:99:97:62:bc:4a:b4:75:ad:95:93:55:
                    ea:5d:88:33:f6:aa:ea:b8:bb:75:38:0a:d7:1f:4f:
                    59:14:3e:ad:37:2f:c0:28:1a:84:e4:a2:6e:c6:dc:
                    7b:8d:f4:5f:af:44:1e:31:ca:03:64:ab:52:1f:0e:
                    e6:c2:4d:8d:48:49:38:e3:ac:56:c1:78:d2:85:d1:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:4A:6F:8D:D9:6E:E1:62:CC:70:0E:D5:3A:C2:B6:90:98:EF:76
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.194.0/24
                  82.39.196.0/22
                  82.39.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:9d:50:4a:80:f7:21:df:93:d1:ed:22:cd:da:76:bc:1e:
         76:90:38:67:75:38:6b:63:ba:41:b4:a9:86:41:39:5e:fb:5c:
         45:a6:05:9e:ac:aa:40:e2:7d:6a:28:a4:d9:c3:c0:38:60:7d:
         cf:1a:ef:58:66:a8:90:5f:a2:f7:ea:6c:7d:4d:12:8c:ec:f1:
         69:49:75:53:8c:7b:d3:a8:98:77:b1:e7:86:33:7f:ff:67:c6:
         31:97:47:0d:c2:10:73:40:71:2f:94:c4:ff:e0:59:f7:5b:c1:
         82:be:2c:e3:70:cb:1c:bf:8e:e7:7d:66:80:ab:3a:ad:49:77:
         b7:03:3d:e8:e8:a9:28:8f:3a:18:df:86:a1:7f:c3:d2:0c:f5:
         77:69:06:f7:91:f8:56:b8:0e:e2:cf:16:fe:43:6e:dc:6f:8c:
         b0:89:3b:b4:db:53:f4:39:ea:41:0e:f6:88:3d:82:71:66:5b:
         66:12:32:80:0d:b3:e3:49:54:ba:69:43:70:ff:f5:27:5d:ff:
         d4:6e:15:d6:17:a5:b7:44:c6:22:24:fa:f5:f8:a2:d2:2b:ec:
         c1:2d:4e:6e:65:21:4c:5b:2e:40:0c:e3:82:39:ef:40:43:1b:
         7b:d3:7e:85:56:d2:e1:d0:48:db:df:bc:d6:e1:b5:2b:ad:74:
         93:f7:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:35:54 2026 by rpki-client