Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274880.roa
File:                     AS274880.roa (raw, json)
Hash identifier:          ZOZe5/Q2VxryuqZhVNNjmBG9SseKFbFSQlqCgUo6xMs=
Subject key identifier:   07:7E:E8:16:C5:6D:9A:2B:10:3A:F8:5D:40:BC:90:76:C0:B6:BF:4B
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       6DBC6E6B0C1A96045D67EC5380D0847868D6A658
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274880.roa
Signing time:             Fri 10 Jul 2026 16:24:17 +0000
ROA not before:           Fri 10 Jul 2026 16:19:17 +0000
ROA not after:            Fri 09 Jul 2027 16:24:17 +0000
asID:                     274880
IP address blocks:        51.194.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 09:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bc:6e:6b:0c:1a:96:04:5d:67:ec:53:80:d0:84:78:68:d6:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jul 10 16:19:17 2026 GMT
            Not After : Jul  9 16:24:17 2027 GMT
        Subject: CN=077EE816C56D9A2B103AF85D40BC9076C0B6BF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:dd:ca:6b:48:3b:59:4b:97:28:92:aa:f4:
                    a9:0b:72:58:a3:27:97:fc:4e:e5:1d:56:7c:cf:20:
                    4c:79:d3:5a:a2:93:b5:6e:99:e0:37:4f:cb:0e:3e:
                    df:2e:c5:d1:72:20:47:cf:d7:15:1b:be:58:ba:25:
                    28:01:4f:cf:f6:13:e7:31:f4:f7:b5:d6:56:b5:b9:
                    91:ed:ba:a2:68:d5:6d:4b:7f:4a:60:30:e2:44:e2:
                    3c:0e:73:cb:f3:9a:07:04:5c:c2:92:0d:be:72:dc:
                    ae:9f:dc:e4:6b:d4:11:7f:05:19:c9:80:32:c7:e5:
                    a4:5a:2a:f5:8f:bc:ae:c4:f4:45:0b:be:d0:39:39:
                    84:b1:b5:ad:0a:70:87:f8:de:47:80:87:46:cc:0a:
                    76:28:ad:29:57:dc:fd:cd:03:e5:f0:c8:e8:e5:43:
                    cf:a1:fd:18:f8:6e:43:4e:47:d3:1d:59:e0:7f:69:
                    6f:01:0d:9b:e2:49:0b:62:72:e1:fe:ec:0e:19:4b:
                    17:fc:66:f3:f2:b5:a6:ee:27:10:cf:13:df:4d:0e:
                    fd:1d:93:d1:0a:92:ad:6f:05:40:07:8d:f5:e0:89:
                    58:a6:e2:57:16:2d:79:e5:6f:a5:b3:ca:80:8f:04:
                    13:34:8e:33:e2:4f:e0:1d:0c:f1:d0:03:53:be:1f:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:E8:16:C5:6D:9A:2B:10:3A:F8:5D:40:BC:90:76:C0:B6:BF:4B
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274880.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:33:cc:2b:c4:96:82:08:72:3d:45:7a:07:3c:7d:8c:8a:
         15:fc:6b:1e:26:dc:0a:ea:06:b4:7e:0d:61:cf:bc:85:6b:f4:
         fe:e1:2a:e3:51:77:be:dd:85:b1:81:c2:84:9b:d2:0b:97:af:
         47:14:de:8e:31:cc:fa:d4:0e:98:09:e7:84:82:16:f8:2b:8b:
         2f:72:19:f4:f2:71:7d:78:a7:e5:56:98:30:d6:26:eb:33:94:
         4b:0d:a8:5f:c1:a7:2c:ab:99:96:0b:b1:c5:53:d3:3a:d4:2e:
         73:94:eb:96:a6:12:09:79:fc:96:43:71:73:eb:04:a4:60:7d:
         78:42:bb:cb:57:32:f0:cb:a1:86:1f:bb:4d:4a:21:1b:97:53:
         8a:bf:64:e4:d4:2b:e0:30:18:9f:b6:79:8c:0f:7c:44:3c:94:
         d5:81:68:6a:7a:ac:5f:f4:d5:d7:cd:75:e5:e8:a3:68:f9:83:
         bf:6a:e3:86:bd:74:0f:82:a2:52:8a:29:b5:0e:ba:ca:6c:b5:
         90:7c:17:5a:7b:9e:4d:25:3a:fc:c3:8b:e9:2a:3c:ec:d7:ac:
         42:c3:a1:34:7b:cf:ae:0c:ac:17:95:41:c0:cc:b3:4e:6f:b1:
         44:cd:62:56:ff:6d:97:3d:21:d3:61:a5:91:fe:c7:e7:ea:9c:
         1d:34:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:56 2026 by rpki-client