Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53808.roa
File:                     AS53808.roa (raw, json)
Hash identifier:          8QcPEwOO3Npl4dIQGN6LldxcXYjphquHdaJXRJfK7qA=
Subject key identifier:   B9:2E:11:69:3F:90:35:84:A1:14:C8:41:CF:7F:98:04:3A:32:FB:6E
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       7714370CF23C92955AF96FA563C484AAA7E44181
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53808.roa
Signing time:             Fri 08 May 2026 04:36:13 +0000
ROA not before:           Fri 08 May 2026 04:31:13 +0000
ROA not after:            Fri 07 May 2027 04:36:13 +0000
asID:                     53808
IP address blocks:        46.202.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:14:37:0c:f2:3c:92:95:5a:f9:6f:a5:63:c4:84:aa:a7:e4:41:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May  8 04:31:13 2026 GMT
            Not After : May  7 04:36:13 2027 GMT
        Subject: CN=B92E11693F903584A114C841CF7F98043A32FB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:9e:5a:b5:ae:18:5a:a3:a5:45:28:ee:68:
                    3b:e4:c6:8c:b3:e3:63:13:60:88:95:57:3b:d2:2d:
                    c0:f4:4c:7e:e1:ed:16:e8:36:ae:de:b9:7b:a2:55:
                    09:fe:0d:e3:ba:5c:22:de:0d:9f:99:7b:dc:3d:f1:
                    b7:70:3c:24:43:43:fb:e3:f9:f8:6d:4c:8d:3f:3d:
                    9b:da:5a:01:cc:23:a3:d0:03:30:5d:ca:28:80:cd:
                    38:2f:d6:dd:e0:4b:f5:36:20:a6:b7:cb:93:4b:3d:
                    c0:1f:d2:5c:11:1e:fb:27:b8:e9:ed:3f:1f:19:22:
                    17:df:8c:5e:79:32:80:e2:fc:6e:cc:e2:58:9b:76:
                    08:2d:d0:05:69:c2:88:3d:61:05:a6:dc:95:c9:69:
                    03:ab:2a:5f:b9:24:fa:c5:ed:ea:56:d6:d6:65:da:
                    67:6b:9f:b9:1d:2c:06:75:fe:19:a5:d3:14:1f:dd:
                    ca:8d:32:0b:7c:67:a9:ca:1d:42:94:0e:c0:eb:3e:
                    af:28:bd:7b:4b:dd:6d:47:81:1d:43:7c:27:1f:c5:
                    80:c8:3f:e2:7f:16:34:f5:45:14:49:f3:06:39:94:
                    f4:fc:95:3c:a7:1f:66:61:3c:9c:25:3b:05:08:7b:
                    f5:db:de:c1:e7:fb:94:67:73:0f:d6:76:ad:cc:9e:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2E:11:69:3F:90:35:84:A1:14:C8:41:CF:7F:98:04:3A:32:FB:6E
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:cc:d3:b5:5f:ff:05:38:30:37:91:b7:b3:73:bb:95:3a:
         57:02:5d:22:4a:ee:21:96:83:36:83:70:2a:14:92:b3:1e:44:
         13:01:36:be:d5:65:db:28:8b:b4:c8:84:42:0b:b9:f0:2f:ca:
         ed:c2:85:f7:13:d4:69:f1:12:24:27:49:f7:6e:e5:92:e0:04:
         02:19:81:3a:5b:9a:f7:27:21:00:60:e1:5c:2f:37:4b:17:69:
         44:d2:e9:8c:aa:b6:4c:d7:4a:78:09:80:74:db:cf:09:0e:ab:
         28:e9:4c:bb:ad:2b:49:af:5e:db:3e:86:6a:2e:de:29:67:26:
         cb:39:a2:d6:13:d4:90:5b:f8:c3:df:dd:7e:a5:50:fb:9d:87:
         37:a9:08:8c:23:d3:bb:30:d0:1f:39:42:d5:ce:5d:72:82:a2:
         eb:6f:9c:ce:e1:5d:72:ab:da:5c:1f:b9:c1:ed:61:ba:a1:d0:
         ce:e5:69:da:c0:3f:fc:1a:ca:3f:3f:49:cc:9c:3b:76:ab:88:
         13:61:91:ce:b2:4e:e3:0a:55:f3:d7:e7:45:72:1f:7f:ca:d1:
         a0:d8:e9:99:a9:a0:60:74:04:f1:d4:48:45:05:4c:02:f7:7e:
         81:53:10:6c:91:ea:28:ec:5a:e4:76:61:32:b0:ea:e1:40:3a:
         5e:62:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 13:56:40 2026 by rpki-client