Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa
File:                     AS6762.roa (raw, json)
Hash identifier:          Pr27/k6x4v47a3yen+6x9zvRy7V/ILXd40xt+P0OZIg=
Subject key identifier:   79:9B:36:29:27:DB:F9:C5:A0:D9:10:E6:1C:95:E8:D9:A6:58:87:E2
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       1E6B07E8D7895D4592A04FFD6FAA5994252AE604
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa
Signing time:             Wed 26 Aug 2026 14:55:51 +0000
ROA not before:           Wed 26 Aug 2026 14:50:51 +0000
ROA not after:            Wed 25 Aug 2027 14:55:51 +0000
asID:                     6762
IP address blocks:        51.146.191.0/24 maxlen: 24
                          51.146.211.0/24 maxlen: 24
                          188.220.40.0/24 maxlen: 24
                          188.220.96.0/24 maxlen: 24
                          188.220.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 07:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6b:07:e8:d7:89:5d:45:92:a0:4f:fd:6f:aa:59:94:25:2a:e6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Aug 26 14:50:51 2026 GMT
            Not After : Aug 25 14:55:51 2027 GMT
        Subject: CN=799B362927DBF9C5A0D910E61C95E8D9A65887E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:45:e1:6f:c4:84:7a:63:bd:4e:94:96:47:
                    47:70:7b:e6:2a:9a:07:e6:82:79:5f:c4:c6:ab:08:
                    d4:9f:ad:0f:f0:1f:e4:67:41:0f:9a:10:36:c0:b2:
                    60:59:7d:6f:9d:cc:a8:c0:b5:75:87:3a:1f:a4:08:
                    ef:5d:d6:66:ed:f6:99:ed:9f:c3:cc:da:f3:75:2e:
                    19:7e:2d:26:e9:44:0d:08:d9:d4:8f:46:31:da:f1:
                    49:e9:c9:56:51:91:88:b3:bf:7c:84:4e:79:13:ec:
                    d9:47:a0:ba:d5:2d:b5:f3:57:78:01:3f:6c:7a:57:
                    5c:d0:23:96:b4:9b:9f:23:79:8d:35:57:02:11:a6:
                    6a:af:10:71:c0:29:d0:1d:2a:8e:95:ea:f0:f1:f3:
                    fd:f2:a2:7a:90:31:4b:37:33:ad:d2:3f:b0:2e:43:
                    03:11:a1:96:6c:ca:d3:29:61:80:f9:a8:f8:7e:13:
                    12:18:48:c7:60:53:02:99:8d:ea:5a:fd:a2:00:90:
                    15:ad:9a:80:97:f2:ad:ce:e2:81:9f:c2:b4:85:ad:
                    29:18:8b:81:30:40:5f:55:f5:6d:41:e5:79:6a:db:
                    63:f4:e4:6b:a4:ff:ce:cf:e8:2d:59:77:80:d0:01:
                    d1:43:68:a0:ee:d6:a2:dd:a4:3e:b7:88:87:48:67:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9B:36:29:27:DB:F9:C5:A0:D9:10:E6:1C:95:E8:D9:A6:58:87:E2
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.191.0/24
                  51.146.211.0/24
                  188.220.40.0/24
                  188.220.96.0/24
                  188.220.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:2e:fd:7e:ec:cc:65:5f:ee:a5:12:0c:f3:82:5f:8c:18:
         88:29:57:d0:5f:41:c7:11:5a:af:08:51:25:8e:c1:db:84:6c:
         2a:af:58:0a:0e:7a:00:93:05:b0:84:0c:82:a4:62:00:4a:0f:
         56:69:bd:5c:4f:58:8e:44:d7:07:93:bf:f1:94:5e:22:65:5b:
         e9:fd:fd:ab:b1:33:ba:3c:4b:18:7e:49:c7:89:17:a9:9c:f1:
         ac:ef:65:2f:be:b5:b1:ca:9d:d2:98:cb:50:f0:a2:1f:c1:4a:
         d6:62:de:cb:89:58:47:2b:65:37:8c:b8:4f:13:97:d2:fc:77:
         aa:93:8f:86:b1:b1:83:64:3b:33:a9:6b:c5:62:b8:8f:d4:cb:
         96:96:bb:d0:4c:ee:94:6a:d6:c1:e8:c6:b2:9b:2c:82:0e:5f:
         60:74:7b:6e:c6:1b:ed:42:20:4c:90:09:d0:4f:60:de:9f:ef:
         fa:4c:35:17:25:91:1a:f7:f6:1a:d6:2f:4c:a0:b1:40:90:4e:
         aa:11:dc:b0:e6:02:64:86:37:02:2b:14:15:fb:d8:ff:b0:54:
         e7:2b:ac:28:e1:c7:ab:75:68:ba:26:c0:d3:aa:03:ab:78:eb:
         01:89:fd:c6:f6:83:ed:a7:5d:39:19:10:df:1c:b8:6b:91:4a:
         51:dc:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:16 2026 by rpki-client