Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219075.roa
File:                     AS219075.roa (raw, json)
Hash identifier:          SEH6ZZMSQrORyAc68/gHpB4jQOs2aITnbB2HEaGJSPg=
Subject key identifier:   BD:92:AC:85:9A:FB:D3:BD:77:A8:9C:11:D4:BB:D4:34:AC:0F:7C:06
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       4129AEF0CA62F2D4CE32EFB347444AFC2C17DE21
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219075.roa
Signing time:             Fri 23 Oct 2026 09:25:32 +0000
ROA not before:           Fri 23 Oct 2026 09:20:32 +0000
ROA not after:            Fri 22 Oct 2027 09:25:32 +0000
asID:                     219075
IP address blocks:        177.177.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:ae:f0:ca:62:f2:d4:ce:32:ef:b3:47:44:4a:fc:2c:17:de:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Oct 23 09:20:32 2026 GMT
            Not After : Oct 22 09:25:32 2027 GMT
        Subject: CN=BD92AC859AFBD3BD77A89C11D4BBD434AC0F7C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:a4:37:0c:89:a1:18:60:3a:cb:12:d0:2a:
                    c4:54:9b:59:5d:6b:e6:f6:e1:e6:69:42:0e:93:fc:
                    97:42:db:99:80:18:84:fa:3a:0d:36:10:70:e4:ab:
                    09:1f:b2:8d:72:d1:b3:bb:be:21:a5:1e:81:43:92:
                    39:6f:61:76:3e:65:c8:4a:ac:79:94:07:0d:2d:18:
                    66:a2:06:c4:05:c3:7f:45:49:56:44:c0:b1:e2:06:
                    aa:ba:f9:86:bf:45:ef:0e:14:9b:17:95:67:f5:56:
                    f4:a0:ba:bb:71:0d:f8:51:f5:d1:ff:19:4d:ed:6d:
                    f6:31:bf:e7:1c:2f:b5:16:76:13:b4:e0:4e:e6:a6:
                    bd:eb:e7:7e:95:e7:c3:e8:92:29:40:cd:25:8e:57:
                    72:e0:88:61:b7:9b:93:6a:e0:24:82:24:ca:a4:63:
                    b8:e6:f3:8d:0c:a8:a6:97:fa:9e:a7:b3:4a:df:4e:
                    0b:e5:65:ff:d4:90:a5:62:b1:60:6a:ea:e3:41:53:
                    0b:c2:3d:c2:46:39:48:db:a7:d6:31:d4:a5:67:3f:
                    30:b4:87:27:ad:01:e7:c1:22:cb:ce:3e:f5:a2:91:
                    bc:1c:fd:6b:ba:d4:67:13:3a:d7:c8:c9:ea:e2:2c:
                    bd:d8:33:16:77:f7:d8:d7:e8:58:74:6c:35:43:54:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:AC:85:9A:FB:D3:BD:77:A8:9C:11:D4:BB:D4:34:AC:0F:7C:06
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.177.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:54:c5:6d:a5:99:00:c1:1b:86:54:da:20:cf:4b:99:43:
         74:86:1e:07:00:a8:0f:1e:4e:25:4e:bf:e0:ae:6c:4a:01:2f:
         c3:4e:ea:4c:33:07:2f:fd:a3:e4:9e:f7:c7:8d:41:70:e7:c5:
         40:49:71:d9:f9:ba:f9:2a:70:60:e4:f7:ce:84:95:ed:f0:46:
         7e:b9:e0:c6:bd:c9:4e:bf:69:c4:d4:48:bd:95:42:e2:47:2a:
         f0:66:aa:fd:05:70:19:79:b8:60:27:1e:47:45:c9:38:d6:03:
         ef:40:7b:af:88:28:89:c0:e9:93:e5:50:c6:7c:1f:18:da:af:
         6a:0e:42:08:e1:1a:cb:e2:67:b9:65:a8:9a:d4:3f:7b:40:e7:
         55:ee:93:08:be:0d:39:29:a0:93:39:a6:06:08:82:2f:9f:5c:
         0c:3c:63:8e:9c:5a:cf:02:26:0c:b9:30:21:cd:02:7c:ea:5e:
         51:bb:82:64:92:5b:e2:37:b0:d6:2c:47:cc:3b:4e:58:f1:88:
         5d:8b:0d:34:8b:4d:53:18:fa:d8:c2:ea:f1:3a:87:2c:f4:8f:
         22:c5:80:60:ea:04:26:cf:bf:e2:03:d4:22:15:6b:b4:1e:fb:
         f5:f1:78:60:a8:e3:e0:4b:a5:5e:a7:15:0f:d0:78:4d:b0:fe:
         ed:ff:df:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 04:18:04 2026 by rpki-client