Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS401362.roa
File:                     AS401362.roa (raw, json)
Hash identifier:          U0nd2h4WtangNfRA7V4353i0HD7ZYHPlYA9/u8i3eh0=
Subject key identifier:   8D:C6:84:F8:FB:F9:30:D7:9A:3C:59:02:A2:F4:52:B0:61:9C:C8:5B
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       4479E27A5FC6653D4528FF195F1D4690808427C2
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS401362.roa
Signing time:             Mon 14 Sep 2026 07:46:16 +0000
ROA not before:           Mon 14 Sep 2026 07:41:16 +0000
ROA not after:            Mon 13 Sep 2027 07:46:16 +0000
asID:                     401362
IP address blocks:        177.177.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 00:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:79:e2:7a:5f:c6:65:3d:45:28:ff:19:5f:1d:46:90:80:84:27:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Sep 14 07:41:16 2026 GMT
            Not After : Sep 13 07:46:16 2027 GMT
        Subject: CN=8DC684F8FBF930D79A3C5902A2F452B0619CC85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:22:df:c3:fa:d9:2b:60:26:38:4f:8b:0c:
                    23:32:eb:9c:f7:f5:ae:ca:e1:a0:5e:b3:51:5b:f1:
                    4c:2a:2d:80:91:cd:82:03:15:63:24:f1:24:b2:6e:
                    43:46:97:b9:39:57:87:70:d0:d5:c3:0d:14:51:75:
                    62:50:f8:83:a4:42:4d:7e:4d:67:2f:49:77:f4:1f:
                    d2:59:84:af:f2:07:78:25:29:a7:17:7d:a3:04:85:
                    8e:ac:76:20:cc:91:35:99:40:c4:21:4a:d1:50:c2:
                    11:fa:ed:29:53:fa:a7:0a:61:db:d7:7d:2e:27:ca:
                    c0:83:f0:fd:93:77:67:3d:8f:44:9b:05:6d:e6:16:
                    fb:04:e9:81:8b:02:16:d1:44:bc:02:65:75:9b:da:
                    42:af:ea:17:cd:b2:f9:bf:d9:d7:e7:0a:fe:87:d8:
                    1a:60:d0:7f:f4:4d:1b:5c:2a:ab:aa:14:a8:75:35:
                    53:fc:c6:4b:19:80:bf:c1:e3:98:1e:48:e4:29:3f:
                    8e:61:bb:39:9d:66:16:77:13:ba:7f:db:09:bb:2f:
                    ff:e6:58:c2:9b:2f:c2:6d:05:d0:b5:56:c0:10:9b:
                    e0:11:dc:40:9d:30:dd:7d:d0:86:b4:75:b3:15:b7:
                    d6:9d:7c:7d:9d:b8:bd:7f:7b:16:91:af:60:72:92:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:84:F8:FB:F9:30:D7:9A:3C:59:02:A2:F4:52:B0:61:9C:C8:5B
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS401362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.177.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:1e:72:fb:63:58:81:7a:0b:4b:a4:5c:4d:19:d7:5f:85:52:
         79:37:5f:d6:12:bf:13:70:2e:40:f1:0c:4e:ce:49:e7:8a:ac:
         06:33:3e:3b:4d:4b:76:bf:f3:6f:11:ba:fd:2c:5c:0a:ff:ff:
         58:cf:86:f2:7c:6d:cc:22:2f:bd:7d:44:21:6d:ed:03:b2:e1:
         ff:16:7f:b6:2b:59:96:a4:f8:27:a8:e6:92:32:50:b2:07:83:
         d0:70:5e:af:37:05:48:1b:92:aa:5a:d3:af:45:1e:ec:84:df:
         27:04:63:e3:ed:91:19:97:70:cd:02:3e:0f:e0:9a:4d:0f:e4:
         ca:87:fe:76:ef:7b:e4:22:1a:af:3b:0b:8a:f3:42:5d:5c:73:
         99:f0:a1:68:0b:17:8f:79:0a:3c:2f:59:8f:95:26:d4:f8:d8:
         3e:d1:c3:27:f0:7e:73:9c:a1:f5:0a:18:19:b2:d4:7a:b0:30:
         9a:c6:f6:f0:8b:f4:57:14:5b:cc:58:97:38:ca:75:ac:81:a8:
         4b:94:cc:29:e5:62:b8:73:e1:e5:ad:b5:71:7d:8b:fa:a8:ef:
         f4:28:a8:31:ae:df:8a:94:04:0f:60:6e:12:cf:8a:b5:58:ce:
         85:50:83:ba:6a:d7:b1:49:f7:ea:45:eb:9a:0e:cc:05:50:cd:
         8b:31:54:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:52 2026 by rpki-client