Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62513.roa
File:                     AS62513.roa (raw, json)
Hash identifier:          pjOiHjbmLVtu8nVO8HwoyTm7ZcNDOiIp9ZRoYkNqK4w=
Subject key identifier:   91:DC:0D:F6:B8:BD:C2:95:A5:3B:E9:C3:08:A3:65:32:16:A8:C8:A0
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4FD5D094AA298B54D03DA11DE54F84D8CE5A750B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62513.roa
Signing time:             Fri 22 May 2026 18:26:46 +0000
ROA not before:           Fri 22 May 2026 18:21:46 +0000
ROA not after:            Fri 21 May 2027 18:26:46 +0000
asID:                     62513
IP address blocks:        46.202.116.0/22 maxlen: 22
                          92.112.44.0/22 maxlen: 22
                          95.135.55.0/24 maxlen: 24
                          178.95.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d5:d0:94:aa:29:8b:54:d0:3d:a1:1d:e5:4f:84:d8:ce:5a:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 22 18:21:46 2026 GMT
            Not After : May 21 18:26:46 2027 GMT
        Subject: CN=91DC0DF6B8BDC295A53BE9C308A3653216A8C8A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:16:ce:8d:1a:f5:37:7e:97:30:35:c1:97:
                    25:e7:9e:89:3a:0e:66:e1:62:43:d6:c6:e4:05:db:
                    23:7a:20:c6:30:dc:4b:43:36:b3:67:f4:18:9f:f7:
                    bc:b0:a9:9a:3f:32:c1:33:43:ed:4d:cb:9b:d0:23:
                    e2:54:f5:87:68:ca:9f:07:63:82:57:45:0c:30:ab:
                    57:75:ac:ff:d1:33:22:30:d9:40:37:b9:e3:2a:45:
                    26:74:28:00:cc:8d:c7:98:23:12:ef:87:e0:11:ca:
                    0c:8c:fe:4c:06:e2:51:1a:73:27:48:b8:f8:56:d2:
                    08:20:35:34:af:f4:9b:d2:27:1d:5b:44:85:3b:92:
                    28:bf:31:5d:39:6c:b6:d5:4b:20:96:1c:ad:56:25:
                    ee:4b:89:9a:db:5c:59:dc:1d:9d:ce:15:1d:46:7a:
                    eb:db:46:1f:d4:8c:c5:fe:a4:a5:3f:c6:5b:31:69:
                    b0:3b:7b:0c:b4:f5:93:4c:4f:81:37:28:b3:09:ca:
                    2e:4e:93:df:ab:71:ce:d4:f0:c5:56:d3:f7:86:39:
                    76:5d:db:6f:f6:6d:84:3d:af:3c:5a:cc:2d:92:37:
                    ad:88:fc:57:86:f1:86:14:63:74:80:76:8f:e6:69:
                    03:b0:7b:16:7b:f5:aa:1f:13:88:8c:41:11:ea:89:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DC:0D:F6:B8:BD:C2:95:A5:3B:E9:C3:08:A3:65:32:16:A8:C8:A0
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.116.0/22
                  92.112.44.0/22
                  95.135.55.0/24
                  178.95.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:ab:aa:4d:1d:3a:95:1e:38:56:64:e4:be:d7:71:ed:1f:
         4c:ef:a4:ec:2c:85:fd:67:ae:87:10:ef:bf:2c:21:65:e2:86:
         5b:32:95:f6:6e:84:1b:51:84:57:c3:0e:d6:f8:70:2d:ee:9e:
         e8:cc:1d:f6:79:44:10:e9:22:2a:01:a6:21:ac:6b:9a:02:2b:
         05:d1:11:dc:bc:f9:03:c1:e3:fb:8b:52:ed:b5:79:1f:c0:4b:
         04:48:5b:f5:69:cc:f8:01:cd:59:6c:fa:af:98:d0:65:52:61:
         45:65:34:9e:a8:d1:15:6b:13:9e:d3:b7:24:54:14:e1:10:09:
         8b:7a:1e:c8:a8:f8:75:78:06:2a:ac:aa:86:50:b9:0b:8c:ad:
         de:e4:af:39:38:3f:35:d9:e9:53:8e:ad:46:72:eb:09:48:1e:
         2d:b0:04:47:35:95:08:f9:f3:c5:8f:7a:0b:f6:85:e7:dd:6e:
         73:b5:38:8f:7d:65:46:24:63:8a:7c:2a:e6:1e:88:12:f7:aa:
         78:9d:57:e8:c1:fa:8b:56:90:24:76:e7:e4:92:8b:6d:c8:41:
         5f:4f:9f:ca:59:3f:4f:68:1b:d7:b5:90:53:a0:4f:30:f1:01:
         4d:ac:60:26:3b:78:19:3e:26:79:43:ae:3f:af:45:57:3f:7b:
         f4:ae:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:41:05 2026 by rpki-client