Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63793.roa
File:                     AS63793.roa (raw, json)
Hash identifier:          Df0Eyn2oJBlMO0L20uLqTv6N7CJOeXYEUOFFEap8L/8=
Subject key identifier:   0D:A9:E0:EE:75:A2:E5:4B:24:BD:71:4D:9A:2F:5F:33:DB:1A:1B:D3
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       77F268687AA1B9044F9595C5F8C13F3A0C0CF344
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63793.roa
Signing time:             Tue 07 Jul 2026 08:47:08 +0000
ROA not before:           Tue 07 Jul 2026 08:42:08 +0000
ROA not after:            Tue 06 Jul 2027 08:47:08 +0000
asID:                     63793
IP address blocks:        82.39.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 16:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f2:68:68:7a:a1:b9:04:4f:95:95:c5:f8:c1:3f:3a:0c:0c:f3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jul  7 08:42:08 2026 GMT
            Not After : Jul  6 08:47:08 2027 GMT
        Subject: CN=0DA9E0EE75A2E54B24BD714D9A2F5F33DB1A1BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:e0:6f:4c:c0:5e:9a:dc:3f:5b:09:ea:35:
                    14:e0:27:15:65:da:74:fd:8d:a4:68:8d:63:ea:d1:
                    a2:b1:a0:a6:01:60:2f:45:9c:58:de:7e:e9:56:be:
                    e0:d5:bb:bb:13:89:ee:37:8e:2b:00:1e:81:83:bb:
                    b6:26:d0:e0:9d:3f:cb:1d:ef:eb:1e:3a:08:fd:f3:
                    c8:3d:ac:d6:f8:92:1c:ac:62:41:1b:c9:a8:ed:d9:
                    ba:6f:5f:12:55:63:32:29:04:47:09:9f:ec:08:70:
                    e7:69:d3:35:8c:0c:39:4e:6a:34:15:7f:41:da:2e:
                    bc:4a:ec:5b:03:f8:62:dd:16:83:bf:64:e1:ca:cf:
                    eb:e8:78:48:16:5e:6c:30:f8:c1:17:bd:04:4c:4c:
                    78:c1:53:de:b7:56:16:af:83:09:92:da:19:a2:6d:
                    d0:3b:b3:6e:24:4f:ff:3a:c2:92:f9:88:67:0b:2d:
                    99:6d:c7:eb:db:97:37:6f:a8:15:dd:10:28:27:23:
                    04:99:e7:75:91:cd:8c:af:7d:8e:62:e5:45:af:94:
                    24:98:df:07:02:34:d9:27:f5:ee:bf:db:18:c1:6d:
                    99:4d:77:15:f8:04:74:6b:c3:22:11:73:10:e4:59:
                    14:3e:03:f8:44:37:10:18:b9:28:1c:90:11:0d:14:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:E0:EE:75:A2:E5:4B:24:BD:71:4D:9A:2F:5F:33:DB:1A:1B:D3
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.39.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:16:37:e2:39:14:6d:38:05:09:64:ec:35:7d:ef:b1:5a:
         64:b1:6e:45:8e:35:01:1d:04:2a:eb:27:9e:02:0b:f0:ec:52:
         57:c1:e4:ff:84:52:bb:cc:b1:66:1d:cb:ef:3c:66:27:2e:a9:
         96:0f:94:81:0d:eb:30:ac:45:43:2d:56:37:6e:0f:9e:ac:62:
         12:21:5f:84:bd:91:5c:34:c8:dd:9a:fb:93:19:50:8c:b7:dc:
         ca:62:54:cc:93:02:ea:ba:d9:0c:bf:e1:d3:a7:9b:0b:61:dc:
         6a:02:58:23:8f:92:72:9b:14:2c:13:76:ae:3d:64:12:17:a9:
         81:33:e2:94:f4:9b:59:ac:f4:c5:b8:0f:36:31:d0:1d:a5:9b:
         25:c7:d7:22:1a:1b:d7:f2:6a:3e:c5:2b:22:af:40:3c:a9:4a:
         26:5a:af:df:2e:7d:6b:c9:00:ef:f5:f6:2d:fd:4c:39:24:90:
         95:65:7f:f6:d8:4f:c2:c4:44:f3:9f:b5:a4:0d:b9:40:a8:d1:
         b7:a1:36:c2:4a:fa:fa:51:be:72:35:85:7a:2e:3a:c6:98:ad:
         19:d7:f1:26:7f:aa:95:c1:51:02:3b:ce:b7:e2:dd:dd:8a:aa:
         5f:ed:e6:17:0c:d8:6a:e2:b6:be:89:64:f4:08:72:0b:2e:2a:
         83:a9:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:04 2026 by rpki-client