Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          L2iJOdzQDJuFSDVcb8kihQmXyB5KJWfvsCU65QSKhUM=
Subject key identifier:   A5:E8:2E:48:12:24:B3:66:D5:EC:9B:F2:92:F0:10:4C:84:1E:69:87
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       56A2F2B1D9E12969A3E9E9B6D4822E329CEDD722
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51082.roa
Signing time:             Mon 08 Jun 2026 11:40:09 +0000
ROA not before:           Mon 08 Jun 2026 11:35:09 +0000
ROA not after:            Mon 07 Jun 2027 11:40:09 +0000
asID:                     51082
IP address blocks:        92.112.38.0/24 maxlen: 24
                          95.135.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 17:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a2:f2:b1:d9:e1:29:69:a3:e9:e9:b6:d4:82:2e:32:9c:ed:d7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun  8 11:35:09 2026 GMT
            Not After : Jun  7 11:40:09 2027 GMT
        Subject: CN=A5E82E481224B366D5EC9BF292F0104C841E6987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:4d:76:7a:5b:d6:94:be:94:bd:bb:d0:f7:
                    3a:36:26:85:0f:b2:8f:67:77:a6:c2:2f:2a:cd:c2:
                    39:ce:f9:e9:9e:26:ea:db:be:80:9f:f9:b7:92:1a:
                    d3:6b:5f:d7:39:85:35:f0:87:a0:e8:21:2b:33:6a:
                    92:e5:cd:57:27:91:4b:bb:5a:e7:59:0b:be:73:e9:
                    db:02:b6:1a:c7:ad:da:c3:72:71:dd:2d:63:0f:77:
                    e0:35:04:81:9d:ed:60:f0:98:69:3e:92:f8:44:7c:
                    24:b6:5a:68:3b:5c:5a:cc:71:a0:b9:42:fe:0a:fc:
                    e9:b4:20:8f:16:a7:24:5f:fb:19:0e:66:23:37:a1:
                    86:24:45:cb:25:43:2a:f3:07:7d:dd:de:a4:87:c6:
                    3b:5f:2b:99:68:d7:0f:f8:7e:c1:ac:94:b5:71:81:
                    9b:df:07:1a:ce:7b:df:85:fd:81:18:8d:4a:1a:95:
                    6d:b0:3f:33:b4:20:fb:a8:75:05:74:15:f2:5a:8a:
                    4b:06:76:ac:59:b0:6b:a7:72:0f:d8:a9:55:7c:d8:
                    e4:74:df:4a:2e:6a:33:19:79:da:33:b9:86:b5:39:
                    47:38:53:79:58:bb:6c:4f:61:c8:23:e6:6e:58:6a:
                    ab:5c:34:53:ad:0b:76:3a:de:c6:ba:a7:a5:2a:68:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:2E:48:12:24:B3:66:D5:EC:9B:F2:92:F0:10:4C:84:1E:69:87
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.38.0/24
                  95.135.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:27:ad:f5:d8:5c:ec:73:cf:fc:14:96:3a:6e:46:a6:be:
         7a:94:28:5a:a9:9b:37:fc:c3:d2:5a:34:d0:6a:47:0f:6f:3c:
         e5:bd:df:b2:c6:03:d1:5a:41:03:e3:cd:50:31:f6:16:3e:f3:
         07:95:1c:34:58:c0:ab:69:2d:59:28:9d:ca:94:2b:1d:78:79:
         d6:8a:7e:7f:60:24:03:2d:1b:5d:76:73:d4:8f:6b:34:b7:66:
         bd:93:60:81:e7:ef:16:de:0d:4e:96:f2:4b:75:4c:df:c4:f8:
         3a:1f:6b:a2:9e:86:b5:e3:8e:5a:4d:65:de:ed:4c:c6:ad:81:
         7c:38:e8:7f:4a:6d:08:c7:3f:ab:4d:35:f7:82:65:80:4b:2e:
         0e:85:86:ab:2e:67:10:75:2d:4c:27:1f:52:71:34:bb:3d:11:
         96:df:9d:c5:9e:dd:55:17:54:39:7f:c4:1f:80:b8:bd:90:bf:
         af:a9:ef:b4:68:eb:a3:10:16:cb:d5:6f:b2:74:9a:5f:7f:3b:
         13:4c:3e:67:ba:b3:f6:71:f5:7d:04:ab:85:7c:bd:74:55:2f:
         c1:c4:33:70:59:c4:f3:25:51:32:6b:e0:07:ef:97:27:d6:9f:
         79:7f:48:78:6d:db:37:bb:ed:d2:e0:0d:22:66:1e:0d:94:f8:
         24:d0:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:34:47 2026 by rpki-client