Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216190.roa
File:                     AS216190.roa (raw, json)
Hash identifier:          6MrsduS1/+f1JMhQe/5ImOi78NaQEJFYtu+d9DNUjFc=
Subject key identifier:   33:1B:C4:44:E0:BE:BF:92:47:6B:5C:D5:BB:85:92:7A:0E:F7:F1:06
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4E559FF054E114B2565E463FDF79534E4314A0F9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216190.roa
Signing time:             Sat 16 May 2026 08:31:27 +0000
ROA not before:           Sat 16 May 2026 08:26:27 +0000
ROA not after:            Sat 15 May 2027 08:31:27 +0000
asID:                     216190
IP address blocks:        178.92.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:55:9f:f0:54:e1:14:b2:56:5e:46:3f:df:79:53:4e:43:14:a0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 16 08:26:27 2026 GMT
            Not After : May 15 08:31:27 2027 GMT
        Subject: CN=331BC444E0BEBF92476B5CD5BB85927A0EF7F106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:5d:18:9c:0b:ec:61:88:62:fc:1d:e2:a7:
                    8b:e6:c7:69:6e:7e:1e:86:be:c6:44:e7:ae:ff:bf:
                    e4:be:2b:3b:b3:75:2d:52:ee:b8:02:39:34:b6:6d:
                    4a:c9:98:74:c9:9e:2e:dd:f2:e4:5d:37:09:14:59:
                    d4:e9:ca:b2:54:b0:42:e8:74:a8:00:c5:1d:c8:a3:
                    f0:34:6f:28:c2:21:e5:79:3c:0c:9c:52:66:04:2a:
                    4e:71:2b:ea:a3:f1:19:9b:c9:ed:b7:af:5f:8a:89:
                    ad:cc:93:a4:9f:79:74:eb:08:3c:6c:c2:1c:94:e6:
                    f2:6a:1b:18:35:c6:21:2e:0c:f2:6b:84:4d:45:28:
                    7b:05:14:74:5e:71:a9:ed:d0:da:06:8c:99:0d:5f:
                    a3:6f:6e:84:32:e2:ce:68:4d:28:91:ac:55:b0:c8:
                    51:eb:74:a6:70:de:5f:ad:d7:ac:7d:49:b7:94:40:
                    03:aa:ce:c5:dc:a0:28:28:a9:c3:b7:65:da:3b:62:
                    ac:db:50:bd:84:31:a4:5f:f3:c8:13:b2:a2:ec:08:
                    e2:ed:12:55:49:ec:ed:5b:a0:c9:0c:8b:04:82:03:
                    ce:b2:b3:fd:b7:74:48:49:18:9b:86:07:58:2a:bd:
                    d1:d3:70:b6:7c:ef:d0:06:30:cb:6f:5c:be:13:f2:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:C4:44:E0:BE:BF:92:47:6B:5C:D5:BB:85:92:7A:0E:F7:F1:06
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216190.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:3d:85:c6:05:c8:52:1b:8b:e8:3e:0f:2a:cb:c5:d1:a9:
         21:51:6d:56:89:76:51:9e:4f:a5:4f:09:72:35:b0:98:da:e7:
         16:5c:80:b6:eb:5d:de:e1:3a:d5:c8:45:4d:c0:af:71:7e:a2:
         62:2b:35:70:1d:d9:04:00:61:67:66:54:29:c2:a8:ef:14:ca:
         39:c0:c6:41:59:14:42:73:f7:9f:f9:cd:33:20:0b:6d:9a:47:
         4a:aa:36:c3:ed:95:34:e3:8d:02:f8:64:aa:b8:23:10:25:0d:
         ef:19:12:fd:a0:97:25:dd:ed:e3:bb:67:44:17:c1:59:b7:c8:
         1c:0d:1b:dc:a7:24:af:19:66:17:ad:32:eb:80:5c:a9:60:69:
         33:66:5b:50:9a:44:be:fc:84:24:d3:c1:df:d5:56:46:ad:b9:
         83:3e:ce:c0:97:ad:ea:13:17:fb:40:7c:4f:5a:21:6c:30:8f:
         dc:2c:b7:33:28:1d:27:8e:ac:c1:00:15:da:0d:f6:77:49:c1:
         6f:ec:d0:42:59:88:e4:39:e9:f2:ea:d7:72:4f:4b:a5:5a:42:
         ad:d5:95:9d:17:f6:a7:5e:c0:68:9f:3e:00:64:ca:3c:2b:77:
         7f:ac:91:36:d1:fb:db:d7:ca:da:94:38:e5:48:73:bc:6d:76:
         24:27:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 12:10:55 2026 by rpki-client