Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
File:                     AS154383.roa (raw, json)
Hash identifier:          fkjTHu6MM9y58FIYolH4Dr6lbKJZhGdq9iqZXrHpaAw=
Subject key identifier:   CC:02:7C:22:AD:0D:DD:5E:06:E4:31:35:85:0F:6B:30:B2:8D:CA:E8
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       08AD86040C17BB08ADC9E460DBAE818BFCA85ACA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa
Signing time:             Sat 08 Aug 2026 03:39:50 +0000
ROA not before:           Sat 08 Aug 2026 03:34:50 +0000
ROA not after:            Sat 07 Aug 2027 03:39:50 +0000
asID:                     154383
IP address blocks:        91.124.12.0/24 maxlen: 24
                          178.92.13.0/24 maxlen: 24
                          178.94.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 22:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ad:86:04:0c:17:bb:08:ad:c9:e4:60:db:ae:81:8b:fc:a8:5a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug  8 03:34:50 2026 GMT
            Not After : Aug  7 03:39:50 2027 GMT
        Subject: CN=CC027C22AD0DDD5E06E43135850F6B30B28DCAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:e5:c5:dc:2f:44:b4:2d:f8:ee:b8:7a:a8:
                    42:10:d1:8e:f9:fd:e7:6a:d6:8d:ec:22:ab:93:03:
                    67:89:72:f0:fb:74:7b:b9:91:dc:f5:4a:7d:05:cf:
                    72:77:6e:f8:c8:4e:ef:1f:b6:5f:c0:d0:47:85:bf:
                    7c:c7:9d:5c:d4:2a:f4:2f:4c:c4:ff:fa:84:e2:fc:
                    0d:ca:db:34:05:d2:11:b1:f2:5a:7d:96:06:b0:38:
                    7c:6a:6b:a7:d1:66:dc:3e:a4:0e:fe:cb:95:f2:c3:
                    52:9f:96:e9:f7:03:6a:a1:cb:11:88:89:6d:df:f3:
                    58:c5:62:d7:52:0f:25:ad:29:3b:57:78:e5:37:56:
                    dd:c3:1a:ad:39:12:f2:05:75:1a:bb:4e:f1:3a:0c:
                    5f:d0:10:78:53:6e:e4:19:67:5a:28:bd:23:b9:6d:
                    45:09:f1:18:31:e7:39:3e:50:7b:a3:2f:87:1e:ed:
                    2f:51:e1:8b:e0:df:d9:9b:87:26:3c:61:a4:cb:8e:
                    9f:91:b7:76:5b:3c:d4:1a:7f:e8:86:c6:d9:db:d2:
                    4d:4b:5f:1f:d2:8a:7b:8c:9e:67:ed:3c:ae:6b:54:
                    ab:a6:29:40:a5:60:99:88:cc:ba:4c:88:19:07:78:
                    ce:3e:25:ad:78:a8:2e:37:e8:15:5c:ce:e7:38:88:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:02:7C:22:AD:0D:DD:5E:06:E4:31:35:85:0F:6B:30:B2:8D:CA:E8
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154383.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.12.0/24
                  178.92.13.0/24
                  178.94.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:e4:6c:73:52:37:da:b9:7c:3b:63:f1:90:4d:c9:4b:5b:
         e5:2c:93:97:f3:01:06:48:01:f0:a4:46:7d:38:73:01:70:fa:
         0c:43:58:e0:d9:a7:93:05:65:15:25:15:ba:c0:f5:a0:38:c7:
         d3:e5:42:66:4d:cb:57:11:4c:6f:16:cd:10:0a:3a:8a:62:2e:
         d0:b3:fb:ad:9a:3b:94:d2:4f:4d:3b:5e:e4:f1:a1:fa:f4:99:
         88:87:2a:7d:03:37:01:1c:c4:f9:ad:7a:53:59:e0:e8:56:3a:
         c6:2e:d0:18:8a:68:89:ce:df:59:6e:1d:50:de:bf:ac:c3:6e:
         f3:db:3c:f7:a1:83:1b:45:2a:ad:b5:8b:f1:bf:7b:88:ea:5d:
         0b:ed:0d:65:fa:f4:5c:10:90:b7:08:e6:5b:cb:5e:24:13:9d:
         b0:29:b8:7f:33:98:bd:3a:59:65:58:04:6b:66:49:e1:69:55:
         42:01:b3:0c:2b:19:3e:96:c4:f5:8d:a4:95:b6:55:a7:d4:ee:
         c2:76:86:02:34:00:75:6e:0b:b4:18:bb:e2:69:6b:89:99:c2:
         b6:73:8b:4b:f0:14:1f:e2:c5:db:cb:9f:32:fc:2d:ae:c7:8e:
         39:71:2a:73:29:c1:05:b4:f9:b7:89:62:a3:13:26:7f:dc:3b:
         a7:87:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 08:17:34 2026 by rpki-client