Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205502.roa
File:                     AS205502.roa (raw, json)
Hash identifier:          Vj8SqIAGKJyZkw/aw7V6CL3CDuj5ig1hIvJ9XUu4kcs=
Subject key identifier:   61:A0:D3:4C:99:2D:96:83:F8:4F:7C:73:D2:F1:36:7C:52:DF:36:8C
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       489A7FA21E61F65EB94125A9B199C0A2EC9F407D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205502.roa
Signing time:             Wed 17 Jun 2026 09:36:23 +0000
ROA not before:           Wed 17 Jun 2026 09:31:23 +0000
ROA not after:            Wed 16 Jun 2027 09:36:23 +0000
asID:                     205502
IP address blocks:        82.26.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 16:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9a:7f:a2:1e:61:f6:5e:b9:41:25:a9:b1:99:c0:a2:ec:9f:40:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jun 17 09:31:23 2026 GMT
            Not After : Jun 16 09:36:23 2027 GMT
        Subject: CN=61A0D34C992D9683F84F7C73D2F1367C52DF368C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:7e:80:2b:96:d2:80:b8:3d:4d:12:bc:dc:
                    8f:8d:c7:00:ad:4c:d2:dc:16:73:20:81:d7:49:e9:
                    6c:a1:4a:2f:ab:4a:f5:09:f6:ab:63:f7:08:80:2a:
                    3c:14:8f:64:4b:4e:a6:e7:03:32:17:31:0c:10:f3:
                    0b:68:d8:0e:5f:b2:1a:10:6c:66:69:27:e9:61:44:
                    0f:35:11:78:6f:20:74:7e:9d:ce:0a:ad:f6:c9:85:
                    6f:be:1c:ee:fa:5d:1e:ce:90:d0:c9:28:45:cf:b2:
                    d3:84:c6:b7:d9:ba:38:b0:cd:9a:2f:68:c3:b8:57:
                    2a:fb:3c:df:e2:eb:e9:5c:0f:b1:e7:26:62:a5:4f:
                    b3:95:2e:65:eb:98:ea:0b:c5:ed:71:88:37:5b:47:
                    bb:f7:86:3a:a2:04:35:67:8f:6c:7e:c5:87:1f:be:
                    bb:ee:9a:ee:d0:f7:c6:71:87:16:75:f5:88:37:71:
                    ab:62:14:8a:75:d0:e8:6a:6e:c2:f2:7e:c0:ec:5c:
                    68:75:a0:c2:03:d7:c2:cc:7e:a3:50:ec:d6:73:61:
                    37:71:72:cd:1f:de:c1:b9:04:ac:1e:1a:68:34:bd:
                    4a:b0:c6:cb:e2:ee:15:45:9a:5a:b9:90:23:41:75:
                    6d:20:36:9f:b7:b1:1e:67:81:d4:01:91:7d:a6:de:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:D3:4C:99:2D:96:83:F8:4F:7C:73:D2:F1:36:7C:52:DF:36:8C
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205502.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:7d:27:6d:b0:3b:1f:fe:3a:e5:04:32:fa:e9:77:1c:c2:
         3f:5b:57:9b:98:5d:06:be:b7:7d:43:f3:33:ef:05:9f:ae:c8:
         79:91:7c:7f:2f:6c:1c:93:cd:12:5e:6d:89:ff:8f:f9:11:7e:
         a5:d8:fc:c2:dc:80:92:28:27:c8:c4:95:45:02:f6:89:ae:f2:
         c4:1c:35:98:f8:d1:63:af:7d:c4:da:e3:ba:36:25:97:8d:be:
         7f:65:de:82:42:09:00:38:ac:db:6e:6c:69:be:75:a2:9b:a9:
         4c:57:a0:07:26:f5:c0:3d:0d:f0:f3:87:23:8e:e1:27:22:ff:
         b9:9b:9e:ee:35:86:26:ba:d9:b9:8b:7c:c5:9d:71:1b:1c:7f:
         9a:0f:ad:eb:91:df:21:44:77:b9:a5:9a:99:5d:48:da:7e:36:
         9a:b7:f3:e9:06:d0:ec:6c:fe:d9:28:d2:1a:4c:f9:95:e8:1a:
         c7:77:af:2a:8b:cb:fe:0e:8d:06:2a:91:5e:6c:c4:08:8f:8c:
         15:12:fe:e8:4f:98:a1:7b:18:fb:82:6e:d8:27:6c:f8:5f:62:
         8e:8e:44:86:78:fb:6b:99:87:4e:e9:06:39:23:21:00:86:45:
         ce:48:63:f0:84:31:1d:03:33:7c:3d:1d:76:f1:a2:2c:c7:ec:
         b2:7c:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:06 2026 by rpki-client