Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7346.roa
File:                     AS7346.roa (raw, json)
Hash identifier:          8ZYNn8R1TfJubQodOZKFE5QlWEs3JYahnGO/7y+2LfU=
Subject key identifier:   AD:2C:91:2E:B6:EB:BE:93:F5:15:DA:C5:D6:62:41:03:89:64:E1:B7
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4C4EF5B6C493E6E382DBD6CB4C00097A3F96057D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7346.roa
Signing time:             Wed 05 Aug 2026 08:27:49 +0000
ROA not before:           Wed 05 Aug 2026 08:22:49 +0000
ROA not after:            Wed 04 Aug 2027 08:27:49 +0000
asID:                     7346
IP address blocks:        178.94.23.0/24 maxlen: 24
                          178.94.24.0/24 maxlen: 24
                          178.94.28.0/24 maxlen: 24
                          178.94.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 13:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:f5:b6:c4:93:e6:e3:82:db:d6:cb:4c:00:09:7a:3f:96:05:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug  5 08:22:49 2026 GMT
            Not After : Aug  4 08:27:49 2027 GMT
        Subject: CN=AD2C912EB6EBBE93F515DAC5D66241038964E1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:73:68:4b:1b:9c:85:4e:fd:43:9e:e5:8b:
                    e0:69:64:c6:3c:3f:76:c6:b1:fc:af:39:76:f4:ff:
                    38:6d:81:db:1c:0c:2a:3b:c5:e6:b0:ed:04:86:8e:
                    3d:62:f8:8c:b8:e6:5c:12:25:f0:5d:5d:7f:e8:44:
                    9e:7c:3b:51:82:0c:80:45:2f:eb:9a:40:57:2c:58:
                    fe:45:49:cc:b6:aa:af:ad:4a:3a:44:fc:31:9c:5c:
                    08:d4:8f:ba:41:e4:60:57:6d:49:c6:5c:8b:c9:0f:
                    19:91:32:9b:8a:dd:76:af:69:2a:7f:b5:5f:1a:78:
                    42:83:93:76:3c:88:86:03:7a:a2:48:33:b9:23:83:
                    1c:84:cd:30:f6:7a:7a:6d:bd:81:e5:44:44:74:ca:
                    ea:9e:02:a9:58:2b:24:c2:99:5a:89:5e:54:3e:6a:
                    04:90:76:0d:e0:41:14:b6:fd:3c:79:9f:56:2c:ee:
                    64:90:56:17:6c:39:2b:b1:67:82:39:4e:05:ca:16:
                    45:e6:9e:fe:c8:ee:7f:4c:e5:59:91:b5:2c:97:ab:
                    58:27:11:ea:61:ba:4c:23:4e:95:1e:00:53:c5:5c:
                    31:6c:0e:3d:39:01:49:f4:ef:c8:ca:92:07:48:58:
                    b7:b3:38:c1:f7:49:d5:d5:e7:bf:36:d4:d4:4d:fd:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2C:91:2E:B6:EB:BE:93:F5:15:DA:C5:D6:62:41:03:89:64:E1:B7
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7346.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.94.23.0-178.94.24.255
                  178.94.28.0/24
                  178.94.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:1f:81:09:eb:67:d2:bf:be:43:56:58:3f:a0:e7:04:bb:d3:
         a6:96:28:26:ff:99:5e:c6:af:b8:17:bd:28:70:bd:a2:e9:46:
         65:ce:69:43:ad:b8:17:21:25:fe:26:49:b0:42:e4:68:63:4d:
         4b:b3:2c:18:df:3b:c3:59:23:22:93:6c:d0:a7:43:fd:81:ce:
         c4:8b:67:0f:6f:9e:9d:a5:f0:c8:a5:01:1a:df:df:be:9a:f7:
         f7:ea:63:5f:2a:62:60:cb:63:ca:19:95:c8:43:61:04:a8:a5:
         b7:3b:0a:a6:09:f3:08:67:97:ec:ff:48:19:e2:32:8b:db:64:
         73:20:30:9f:44:cc:2a:ad:71:df:f4:f7:29:ca:90:40:d6:13:
         d3:dd:89:b3:cf:6f:b3:86:96:24:cb:10:9e:f8:77:57:00:7d:
         5a:a5:98:a0:66:61:e5:37:8d:73:cc:e7:c7:24:fb:17:af:9d:
         5b:e7:df:cd:6c:a7:51:36:09:d3:c4:10:33:e5:06:df:53:54:
         26:0a:af:92:34:bd:3b:bf:aa:e1:b2:84:d9:08:07:fc:88:e1:
         d2:fc:2e:4e:b3:03:12:ed:25:9c:de:7e:67:10:57:f8:f2:ec:
         cf:12:9d:1f:76:1f:1a:d8:5b:77:31:f9:09:f9:59:f5:00:17:
         e6:ac:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:30:49 2026 by rpki-client