Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS15830.roa
File:                     AS15830.roa (raw, json)
Hash identifier:          NSYhiZXH3nXDiWWR2HQqKjwPSAfVFab69d1kP9MzLr0=
Subject key identifier:   F7:36:E0:4F:B8:85:78:BF:05:CC:A0:04:A4:4D:14:50:6A:15:6F:84
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       12E69E346553BD56827A97C859EFF7A791473F8F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS15830.roa
Signing time:             Thu 03 Sep 2026 08:03:49 +0000
ROA not before:           Thu 03 Sep 2026 07:58:49 +0000
ROA not after:            Thu 02 Sep 2027 08:03:49 +0000
asID:                     15830
IP address blocks:        178.95.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 20:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e6:9e:34:65:53:bd:56:82:7a:97:c8:59:ef:f7:a7:91:47:3f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep  3 07:58:49 2026 GMT
            Not After : Sep  2 08:03:49 2027 GMT
        Subject: CN=F736E04FB88578BF05CCA004A44D14506A156F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:ca:a5:23:12:60:20:23:61:a7:6b:bb:01:
                    85:ad:7c:ef:a1:17:35:5e:45:7a:74:92:59:18:23:
                    c1:14:dd:a4:ba:c5:4d:97:f5:30:f1:15:ad:8c:39:
                    27:0c:df:f1:1d:ed:98:ba:81:83:b3:ae:e1:e6:6a:
                    88:51:22:92:66:d1:cb:f7:c7:0c:f5:35:73:0c:57:
                    3a:13:f4:65:c8:1e:b3:00:cc:d8:6d:97:19:7d:79:
                    1d:f6:66:7e:0d:75:50:f3:c5:ef:a4:c5:04:fd:0c:
                    ee:9f:0d:24:4e:ec:38:55:3d:b2:fc:29:1d:8c:b0:
                    5a:75:6b:28:80:fb:b2:44:9e:df:0d:47:cd:23:10:
                    0c:61:27:77:b8:27:a9:90:8e:1d:38:98:89:81:1b:
                    87:5b:91:31:77:6f:d3:4b:77:47:64:4f:ea:12:31:
                    85:a9:7b:5d:23:24:fb:de:b9:c0:7c:b3:d0:5f:1b:
                    da:50:fd:cc:35:a3:dd:56:c2:d3:48:e7:95:08:f8:
                    87:c8:1c:56:cc:dc:b4:56:af:f0:f1:e7:3a:6b:e1:
                    0f:cd:55:0d:5b:5c:fc:98:dc:41:8b:ff:39:89:02:
                    80:c7:cc:6b:87:db:e2:a5:53:d4:ef:19:df:cc:0c:
                    93:f5:b9:e1:a9:a0:e8:09:dc:20:f3:00:03:39:b8:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:E0:4F:B8:85:78:BF:05:CC:A0:04:A4:4D:14:50:6A:15:6F:84
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS15830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.95.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:07:05:70:44:b1:71:e2:5c:7a:dd:3a:46:ce:c3:8c:59:d5:
         dd:e3:8c:87:33:85:8b:0a:c0:bf:f7:c9:ed:81:92:34:58:fd:
         4b:61:da:c7:a9:a9:67:4d:e9:d1:38:96:57:a8:58:22:e6:27:
         27:c9:04:66:3a:7a:47:87:90:78:85:7d:c8:b5:95:3b:ae:66:
         53:bd:55:af:20:8f:93:9d:76:53:48:7e:36:de:78:95:0a:f9:
         a7:cc:d8:94:d0:43:d7:61:70:04:7c:50:13:35:67:14:63:7c:
         55:7c:03:6c:81:8e:53:91:22:03:15:5b:42:33:61:74:95:c4:
         54:4c:ab:d1:6c:8c:d8:29:49:a9:55:12:a7:63:28:af:74:48:
         2c:6f:dd:91:b5:2f:bb:f5:6b:72:c9:db:fa:af:4d:80:21:76:
         e7:91:1f:4c:c4:da:de:21:c9:14:69:0b:fe:f5:3f:9a:39:44:
         3e:1c:8b:02:38:0c:00:e8:d5:ab:63:93:37:1b:51:5a:4c:57:
         0f:65:22:41:5c:cf:ec:63:6b:42:60:0f:13:93:48:ae:a7:6b:
         ca:f3:ee:66:bf:34:ef:9e:e7:fc:ad:51:a8:69:20:1f:09:ce:
         26:ac:5f:fb:e1:fd:34:9a:53:8c:07:dd:49:67:9c:5a:23:aa:
         56:5f:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:14 2026 by rpki-client