Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44259.roa
File:                     AS44259.roa (raw, json)
Hash identifier:          fEsGYTgt3AN4JTF1ZEBYQ8gu1ejHX9imCa/J3N57GPI=
Subject key identifier:   7D:6B:73:86:CD:BF:38:D7:59:FE:48:BD:43:63:B9:7A:D2:48:53:47
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4F652152627099B8F94F80C61A22FCDAC496FA41
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44259.roa
Signing time:             Fri 15 May 2026 14:03:28 +0000
ROA not before:           Fri 15 May 2026 13:58:28 +0000
ROA not after:            Fri 14 May 2027 14:03:28 +0000
asID:                     44259
IP address blocks:        95.135.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 15:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:65:21:52:62:70:99:b8:f9:4f:80:c6:1a:22:fc:da:c4:96:fa:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 15 13:58:28 2026 GMT
            Not After : May 14 14:03:28 2027 GMT
        Subject: CN=7D6B7386CDBF38D759FE48BD4363B97AD2485347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:35:8f:ab:18:11:1f:6f:fe:94:e1:8a:1d:
                    bc:fa:54:9e:4b:c3:5e:b6:94:7d:36:b5:9d:02:6c:
                    3d:15:66:19:5d:57:e2:74:bb:f9:23:22:4e:e1:f6:
                    dd:db:ea:6b:9a:c3:a1:a1:c0:f7:37:83:93:4d:c6:
                    2a:a7:11:f0:a6:25:57:78:49:ff:86:88:fc:87:f9:
                    0a:2a:24:a5:97:bc:d8:81:27:a6:64:06:77:ac:83:
                    39:78:95:8f:3c:de:4d:67:47:8d:ae:4f:cd:ad:a9:
                    d2:72:99:ca:76:32:df:7e:26:94:91:a0:b3:ff:e6:
                    75:fb:b8:df:7d:1c:96:bf:58:9b:70:de:a9:62:38:
                    cd:f8:2c:13:4d:3e:0c:76:73:44:ed:f3:cf:bf:a1:
                    3d:45:28:cf:bc:24:74:b9:ec:67:79:0e:6c:bd:0b:
                    23:0d:34:b2:34:77:f3:f3:98:f4:15:98:fb:77:15:
                    b7:3d:88:c1:bd:e9:8f:33:d5:93:95:aa:2c:87:af:
                    cb:8d:56:f5:9a:70:67:2c:ef:77:15:31:c0:50:c2:
                    e0:9b:1b:b8:34:ac:99:2b:ba:9b:8a:ed:3a:22:32:
                    a6:02:3c:33:73:34:fe:76:31:12:8f:c5:33:d4:8e:
                    88:3d:5c:7d:21:30:87:d8:69:ea:31:d6:d6:7b:dd:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:73:86:CD:BF:38:D7:59:FE:48:BD:43:63:B9:7A:D2:48:53:47
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44259.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.135.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:9f:1b:9f:ac:da:42:55:86:8c:84:ab:1b:4a:a4:27:20:
         fb:d5:2b:38:b1:2c:67:89:6e:c7:1c:37:c8:8e:f0:a4:28:55:
         9e:6b:04:2b:d7:c7:00:bf:20:04:37:3f:af:c7:63:f9:19:3b:
         a9:f4:eb:34:16:b2:30:22:9c:c7:74:e8:f2:e0:1c:df:f5:00:
         91:0b:f5:a8:8e:e2:2c:c9:de:ff:14:10:4f:2a:20:41:08:49:
         6c:1b:f3:95:0c:f0:80:61:00:34:3d:8b:a9:de:da:71:c3:3e:
         fe:86:23:e2:1e:2a:81:0a:4d:25:8e:b1:ac:a2:79:c4:55:00:
         ab:81:c6:b4:5a:97:20:5e:c1:ed:82:72:a9:07:bf:39:04:99:
         b2:4b:74:fb:df:f4:c3:66:d6:5c:c5:18:3a:a8:d4:d0:25:cd:
         0d:57:1f:38:d3:55:5c:f4:72:b3:33:0c:1a:fd:85:01:61:a5:
         7b:1a:79:8c:67:86:9c:69:97:12:14:4f:bc:ad:b6:fb:e8:01:
         6a:b9:93:77:01:7e:40:da:2f:ff:b1:e3:ae:dd:2d:6c:44:2a:
         3f:02:0a:a4:22:4c:bc:9b:a3:d5:d1:63:44:e2:db:70:bd:45:
         99:45:81:c2:8f:ed:4f:89:b4:e1:1a:f4:e9:8a:9d:28:03:62:
         4a:bc:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 22:13:13 2026 by rpki-client