Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35793.roa
File:                     AS35793.roa (raw, json)
Hash identifier:          8uKZCHNDrs3P+dzAv2hUSEqaVVhOk7yZQ+52fOgD9jk=
Subject key identifier:   FE:83:8E:FC:D9:6A:02:CE:18:E2:45:74:DC:ED:85:97:47:90:6C:45
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5C227A0EB54163E07C589A24FC87B07878563C93
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35793.roa
Signing time:             Tue 11 Aug 2026 10:50:43 +0000
ROA not before:           Tue 11 Aug 2026 10:45:43 +0000
ROA not after:            Tue 10 Aug 2027 10:50:43 +0000
asID:                     35793
IP address blocks:        178.92.44.0/24 maxlen: 24
                          178.93.123.0/24 maxlen: 24
                          178.94.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 17:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:22:7a:0e:b5:41:63:e0:7c:58:9a:24:fc:87:b0:78:78:56:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug 11 10:45:43 2026 GMT
            Not After : Aug 10 10:50:43 2027 GMT
        Subject: CN=FE838EFCD96A02CE18E24574DCED859747906C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:e6:b3:b4:5f:af:17:99:7a:4a:e8:ab:3c:
                    23:d1:ef:17:d9:88:51:56:8b:c6:09:ab:01:47:e2:
                    1a:d2:16:70:8a:fe:b0:e3:8c:02:f1:22:7e:72:be:
                    fb:d7:90:15:c2:7b:0f:4a:1c:7b:ca:bb:00:56:0e:
                    58:eb:b5:33:92:48:6c:f2:56:f9:b7:e4:e9:55:a6:
                    d7:36:0b:7b:30:43:9b:e5:36:42:03:58:c5:67:23:
                    73:78:5d:3c:6a:28:a8:d7:73:98:72:10:a5:86:0d:
                    f0:7a:24:db:d8:10:95:cf:c4:33:c4:66:d7:1b:c5:
                    f5:54:f3:14:55:a8:66:e4:56:ec:49:e8:8c:f4:47:
                    be:df:17:dc:0d:de:7f:00:0b:13:e8:ec:a4:d5:87:
                    fc:0c:73:ef:77:f0:d6:d2:80:e0:27:04:38:b5:87:
                    d6:26:e4:33:df:e1:1a:a5:87:be:b9:5f:5b:03:c7:
                    49:f5:47:87:72:8a:1f:49:22:6f:9d:ca:f8:7b:a2:
                    9d:ce:36:1e:65:b8:4d:af:9b:c3:71:5e:cf:93:59:
                    05:e0:8b:87:a5:b5:e3:9a:f7:14:2f:a0:0c:a9:38:
                    c6:14:d6:6f:24:d6:86:80:75:10:5c:9f:10:d8:79:
                    21:b8:57:85:29:78:97:b9:ad:a0:65:39:7b:c8:2b:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:8E:FC:D9:6A:02:CE:18:E2:45:74:DC:ED:85:97:47:90:6C:45
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.44.0/24
                  178.93.123.0/24
                  178.94.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:e3:b0:e7:cc:74:68:05:32:4e:68:b5:4f:2b:63:d5:0b:
         5c:ce:00:c9:bb:c9:d8:a1:8c:c7:f9:2f:7f:ba:f2:27:4f:35:
         71:9b:8e:71:f4:6f:d5:d9:9a:8e:89:82:4b:a9:dc:f2:a9:dd:
         8c:00:e3:83:5e:f9:75:87:1a:c8:4f:33:15:14:22:a7:2a:01:
         54:b0:b0:a2:36:84:b7:cd:72:70:1f:5c:af:d9:20:99:de:50:
         0f:09:9f:06:da:37:d4:05:29:b5:1b:54:fd:57:00:a8:10:45:
         0b:73:b3:24:d3:45:a9:08:8d:b9:f5:bb:b1:d5:fa:4f:c4:d2:
         d7:06:cb:86:ec:9b:0e:6f:89:de:cf:a1:ef:ea:26:98:83:f5:
         79:45:1e:e7:f5:10:0b:fa:70:5e:81:06:58:7b:5e:ab:84:b6:
         43:aa:6e:51:3e:29:d9:78:1f:1e:f9:70:7f:ce:8a:28:30:97:
         44:bb:77:41:9b:36:21:0c:9b:a9:e2:16:11:9c:9c:b8:f2:66:
         a5:8a:ef:40:90:5d:ab:34:f8:4b:e6:84:6e:24:75:f5:62:d5:
         2c:97:3f:48:88:a2:8b:79:d3:e8:0e:c9:42:e5:90:ce:13:33:
         46:28:31:a6:ef:24:00:29:2b:2a:a5:79:b4:77:9c:3d:4d:17:
         2d:3c:34:ae
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUXCJ6DrVBY+B8WJok/IeweHhWPJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MTExMDQ1NDNaFw0yNzA4MTAxMDUwNDNaMDMxMTAvBgNV
BAMTKEZFODM4RUZDRDk2QTAyQ0UxOEUyNDU3NERDRUQ4NTk3NDc5MDZDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClROaztF+vF5l6SuirPCPR7xfZ
iFFWi8YJqwFH4hrSFnCK/rDjjALxIn5yvvvXkBXCew9KHHvKuwBWDljrtTOSSGzy
Vvm35OlVptc2C3swQ5vlNkIDWMVnI3N4XTxqKKjXc5hyEKWGDfB6JNvYEJXPxDPE
ZtcbxfVU8xRVqGbkVuxJ6Iz0R77fF9wN3n8ACxPo7KTVh/wMc+938NbSgOAnBDi1
h9Ym5DPf4Rqlh765X1sDx0n1R4dyih9JIm+dyvh7op3ONh5luE2vm8NxXs+TWQXg
i4elteOa9xQvoAypOMYU1m8k1oaAdRBcnxDYeSG4V4UpeJe5raBlOXvIK+8pAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQU/oOO/NlqAs4Y4kV03O2Fl0eQbEUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzU3OTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACyXCwD
BACyXXsDBACyXsIwDQYJKoZIhvcNAQELBQADggEBAGGa47DnzHRoBTJOaLVPK2PV
C1zOAMm7ydihjMf5L3+68idPNXGbjnH0b9XZmo6Jgkup3PKp3YwA44Ne+XWHGshP
MxUUIqcqAVSwsKI2hLfNcnAfXK/ZIJneUA8JnwbaN9QFKbUbVP1XAKgQRQtzsyTT
RakIjbn1u7HV+k/E0tcGy4bsmw5vid7Poe/qJpiD9XlFHuf1EAv6cF6BBlh7XquE
tkOqblE+Kdl4Hx75cH/Oiigwl0S7d0GbNiEMm6niFhGcnLjyZqWK70CQXas0+Evm
hG4kdfVi1SyXP0iIoot50+gOyULlkM4TM0YoMabvJAApKyqlebR3nD1NFy08NK4=
-----END CERTIFICATE-----
Generated at Wed Aug 12 01:34:37 2026 by rpki-client