Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26739.roa
File:                     AS26739.roa (raw, json)
Hash identifier:          /RUnblTXtfiFj365pdnxplX9RKVEPH3dkttJug3I2d8=
Subject key identifier:   ED:0A:35:21:89:AF:39:01:1A:40:E4:A1:93:3F:23:3A:46:1E:2E:A9
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       7B73911FC16BEA9F5A85A2C05496AEB9F9E90CC8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26739.roa
Signing time:             Fri 12 Jun 2026 13:26:37 +0000
ROA not before:           Fri 12 Jun 2026 13:21:37 +0000
ROA not after:            Fri 11 Jun 2027 13:26:37 +0000
asID:                     26739
IP address blocks:        162.141.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:73:91:1f:c1:6b:ea:9f:5a:85:a2:c0:54:96:ae:b9:f9:e9:0c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jun 12 13:21:37 2026 GMT
            Not After : Jun 11 13:26:37 2027 GMT
        Subject: CN=ED0A352189AF39011A40E4A1933F233A461E2EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:f8:67:2b:02:f0:02:f3:c5:d2:ed:bb:dd:
                    1f:53:7b:32:f4:b5:e6:28:33:b2:7b:80:b5:0e:99:
                    cc:84:a6:43:ab:5d:ec:3e:69:79:7f:03:bd:72:36:
                    ba:09:7c:ca:4d:ca:11:bb:ff:60:d3:96:aa:e1:39:
                    da:44:76:dd:d3:61:9e:b8:1a:63:fc:43:6f:d3:dd:
                    ac:0b:08:a5:cd:2f:b2:a6:c3:47:ef:5d:bf:13:bd:
                    ec:73:64:e5:7e:73:3e:1b:2b:41:4d:61:8e:57:8d:
                    d3:d6:22:f8:b6:b9:be:a4:ca:47:53:12:4c:d1:c3:
                    ed:8e:f6:7c:d1:9e:76:8b:f3:59:d3:53:89:ae:ae:
                    89:57:fc:be:3b:b8:03:b9:12:93:b7:a7:8c:e8:f7:
                    cb:65:73:70:32:18:ae:0e:74:81:1d:2e:42:92:1f:
                    25:61:61:53:b1:e5:96:58:4e:4f:8b:cd:47:0b:7d:
                    4d:07:7c:3c:91:71:34:24:3a:9d:1f:bc:2b:5d:b6:
                    2a:74:a7:25:69:86:08:d5:45:56:33:32:a4:ea:e5:
                    cf:e9:50:3b:4c:78:a3:19:01:45:a3:bd:24:0d:31:
                    de:b4:92:0d:78:58:42:b6:ca:b8:74:f2:08:f7:50:
                    f9:53:58:fc:94:92:5b:6e:cc:94:23:ed:f3:f5:25:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:35:21:89:AF:39:01:1A:40:E4:A1:93:3F:23:3A:46:1E:2E:A9
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:30:8f:25:22:fc:d3:5e:64:24:ee:1a:46:a3:59:5b:70:58:
         32:de:fa:64:84:51:c1:62:d6:cf:52:8c:4a:a4:ef:0d:36:46:
         28:83:e2:9e:78:2b:3d:54:f2:75:b4:d1:36:11:d7:5e:33:80:
         07:9c:54:34:51:1e:01:64:4b:c0:c5:f1:53:2d:2a:e9:71:15:
         e5:c8:88:51:6b:74:d3:c8:06:57:4e:a5:ca:07:a2:78:2c:62:
         3f:0b:18:4d:ab:10:59:3f:0b:50:46:44:ec:9b:5d:89:26:50:
         b9:e2:6a:77:75:41:2d:a5:c0:1e:f8:d1:1d:2a:4a:0d:fc:1f:
         0a:3b:39:05:00:04:02:2a:9e:d5:10:ea:0f:19:9d:1a:25:b6:
         c9:2e:11:2b:bd:73:90:a6:8c:b7:86:b7:90:ca:e8:0a:e5:b6:
         78:d2:4f:1e:03:a0:08:5e:8c:9b:1c:76:13:79:76:8b:3f:68:
         f3:a9:9b:de:df:8e:a7:48:d0:55:b9:e4:f0:db:28:a6:95:0c:
         63:a2:2a:0a:c7:a6:c0:54:51:f4:8d:cf:d1:2c:7c:76:72:06:
         35:81:9e:bb:e7:49:04:36:e4:21:4a:5d:25:33:d6:1e:6f:30:
         48:9e:98:73:fc:72:0b:08:e3:a3:98:4b:6a:8a:09:b5:c8:76:
         4d:59:fc:c7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUe3ORH8Fr6p9ahaLAVJauufnpDMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MTIxMzIxMzdaFw0yNzA2MTExMzI2MzdaMDMxMTAvBgNV
BAMTKEVEMEEzNTIxODlBRjM5MDExQTQwRTRBMTkzM0YyMzNBNDYxRTJFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWIvhnKwLwAvPF0u273R9TezL0
teYoM7J7gLUOmcyEpkOrXew+aXl/A71yNroJfMpNyhG7/2DTlqrhOdpEdt3TYZ64
GmP8Q2/T3awLCKXNL7Kmw0fvXb8TvexzZOV+cz4bK0FNYY5XjdPWIvi2ub6kykdT
EkzRw+2O9nzRnnaL81nTU4murolX/L47uAO5EpO3p4zo98tlc3AyGK4OdIEdLkKS
HyVhYVOx5ZZYTk+LzUcLfU0HfDyRcTQkOp0fvCtdtip0pyVphgjVRVYzMqTq5c/p
UDtMeKMZAUWjvSQNMd60kg14WEK2yrh08gj3UPlTWPyUkltuzJQj7fP1JesPAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU7Qo1IYmvOQEaQOShkz8jOkYeLqkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjY3Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACijTcw
DQYJKoZIhvcNAQELBQADggEBALkwjyUi/NNeZCTuGkajWVtwWDLe+mSEUcFi1s9S
jEqk7w02RiiD4p54Kz1U8nW00TYR114zgAecVDRRHgFkS8DF8VMtKulxFeXIiFFr
dNPIBldOpcoHongsYj8LGE2rEFk/C1BGROybXYkmULniand1QS2lwB740R0qSg38
Hwo7OQUABAIqntUQ6g8ZnRoltskuESu9c5CmjLeGt5DK6ArltnjSTx4DoAhejJsc
dhN5dos/aPOpm97fjqdI0FW55PDbKKaVDGOiKgrHpsBUUfSNz9EsfHZyBjWBnrvn
SQQ25CFKXSUz1h5vMEiemHP8cgsI46OYS2qKCbXIdk1Z/Mc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:54 2026 by rpki-client