Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS273048.roa
File:                     AS273048.roa (raw, json)
Hash identifier:          4gp9uVTvQG8BO5Doi+a2PKs81qcq3CSv4wTNHByYJpM=
Subject key identifier:   B2:C1:B1:3F:51:5C:BC:B0:66:77:1A:2F:20:F0:FC:69:65:BC:5A:B3
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       2B106689902CF828247DBEB7B6C36B32735BA362
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS273048.roa
Signing time:             Wed 12 Aug 2026 11:19:03 +0000
ROA not before:           Wed 12 Aug 2026 11:14:03 +0000
ROA not after:            Wed 11 Aug 2027 11:19:03 +0000
asID:                     273048
IP address blocks:        188.220.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:10:66:89:90:2c:f8:28:24:7d:be:b7:b6:c3:6b:32:73:5b:a3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Aug 12 11:14:03 2026 GMT
            Not After : Aug 11 11:19:03 2027 GMT
        Subject: CN=B2C1B13F515CBCB066771A2F20F0FC6965BC5AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:f1:d7:cf:fd:e4:fa:2e:83:77:f4:ce:7e:
                    26:f6:a9:f6:ec:87:b3:28:5c:1f:e7:09:62:5e:0f:
                    08:2c:be:cf:b5:27:d8:6d:24:50:44:02:9a:d6:d0:
                    a5:d7:50:7a:74:6e:bd:46:01:dd:4b:33:93:b5:23:
                    ff:a0:93:35:30:70:06:23:a6:e2:b7:d6:52:2f:6d:
                    c4:00:7b:51:eb:f9:bf:35:12:30:d7:73:14:06:df:
                    a2:e7:06:58:46:ed:c7:d9:8d:94:5c:d2:ed:84:1a:
                    c9:cd:39:51:56:99:40:db:3e:e9:c9:e8:30:5b:00:
                    c5:13:fc:62:4c:1c:f4:0e:9f:8a:5f:6a:5e:06:c1:
                    fa:0f:56:7b:15:ec:59:dc:f9:f1:90:fc:3f:ce:5b:
                    47:b6:50:17:ad:40:1b:a5:ac:e6:0e:1a:93:ab:f3:
                    af:53:e7:f8:10:1c:5f:02:24:fc:fd:15:1a:15:40:
                    f7:c1:2b:00:69:fd:e3:59:5b:44:77:d4:7d:49:5e:
                    29:b4:fc:00:22:f6:a4:6e:a4:81:7c:74:6f:42:29:
                    9f:ca:cd:87:5c:72:a6:e8:47:b3:89:09:d8:4d:14:
                    1f:ca:1e:da:eb:c5:ba:07:c9:05:82:d5:53:57:bb:
                    75:11:5b:dd:37:16:f3:1f:67:51:9c:40:0f:c5:f3:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:B1:3F:51:5C:BC:B0:66:77:1A:2F:20:F0:FC:69:65:BC:5A:B3
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS273048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.220.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:c8:35:15:36:a5:1b:1f:80:8c:95:4c:a1:2d:f0:4f:c6:
         54:a5:4b:8b:84:a8:ad:c4:29:a7:d6:f5:35:9e:4b:1b:01:d0:
         0b:d9:20:4c:16:5e:b0:b2:a8:ea:f6:5c:31:d7:b3:b0:d8:9d:
         19:46:f6:ff:cc:c6:66:2a:ab:17:35:11:63:c7:56:07:ab:90:
         5c:ff:a4:3d:6f:c4:96:88:75:86:ba:89:37:f8:bc:43:77:59:
         90:c7:91:cd:13:b5:bd:2c:65:dc:2a:9e:dc:dd:03:17:ef:14:
         95:e1:67:61:8d:21:7e:4e:af:e2:b9:24:1a:78:aa:bc:4c:5d:
         e8:e8:3f:f0:4f:72:e3:62:91:ab:f6:fe:ba:99:e1:68:a1:eb:
         79:23:27:04:1f:8f:8b:db:de:69:5e:44:b2:f4:29:cb:67:3d:
         61:39:75:c7:f4:de:48:57:bd:5f:4b:f0:b9:1f:86:88:fe:f6:
         56:91:d8:d4:cd:1b:6a:2a:92:a3:42:56:ce:8f:da:9f:ba:0f:
         9c:23:ab:b2:3c:ca:89:00:47:b6:2f:da:8f:2a:6c:05:49:05:
         9f:c2:94:81:a8:53:e5:27:df:10:0f:bc:d4:ce:f8:30:72:8a:
         48:a5:28:6a:62:5f:46:94:d5:d4:48:3c:ff:5b:8f:92:54:ac:
         87:8c:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:48:43 2026 by rpki-client