Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
File:                     AS63150.roa (raw, json)
Hash identifier:          p7glrKJWTipeWgia1FujccLYcSd+Az2zI3DfV063K6Y=
Subject key identifier:   50:F2:4B:AD:6A:3F:09:01:4F:A6:C4:01:E1:21:2B:0E:C0:59:99:91
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       2283B0D9BFE69066C9422B5ADFCC946CFA9DE52A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
Signing time:             Sun 13 Sep 2026 00:04:12 +0000
ROA not before:           Sat 12 Sep 2026 23:59:12 +0000
ROA not after:            Sun 12 Sep 2027 00:04:12 +0000
asID:                     63150
IP address blocks:        155.117.18.0/24 maxlen: 24
                          155.117.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:83:b0:d9:bf:e6:90:66:c9:42:2b:5a:df:cc:94:6c:fa:9d:e5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Sep 12 23:59:12 2026 GMT
            Not After : Sep 12 00:04:12 2027 GMT
        Subject: CN=50F24BAD6A3F09014FA6C401E1212B0EC0599991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:86:98:59:f4:2d:3c:f3:5c:25:4d:13:00:
                    7d:16:ae:9c:f1:fa:75:ca:38:0a:70:83:ef:4e:7d:
                    d4:e2:39:32:f5:87:a5:67:ae:c0:57:fb:95:ee:ad:
                    9d:ac:48:94:c5:e0:cc:a4:19:29:af:0a:d8:0d:90:
                    b7:29:b2:22:89:71:8a:fe:5e:d7:0b:1f:d5:83:ab:
                    02:7c:b1:e1:c5:76:ce:a4:b7:72:2f:0e:59:40:01:
                    c9:23:74:fd:80:39:5c:1e:05:08:96:29:e8:d4:fe:
                    70:e4:e2:fb:fd:2a:b4:2f:3b:b8:dc:04:2c:fc:5a:
                    ea:40:45:40:c4:c7:7e:8d:18:e6:3b:dc:2e:6d:19:
                    bb:e9:cd:69:49:a9:b9:0c:e2:16:5d:72:18:29:10:
                    12:d1:5d:1f:4e:b9:70:ce:ce:42:3f:02:43:72:6e:
                    e0:67:84:fa:ea:61:70:60:56:c5:37:31:36:ad:16:
                    b1:fe:ae:3b:68:8b:69:6b:77:b5:90:67:70:f7:c2:
                    dc:b2:46:62:d6:b2:a2:eb:25:97:a9:83:12:62:33:
                    59:1e:97:1e:88:58:2f:8f:67:f9:15:ba:1f:4b:1b:
                    d4:2a:93:4f:79:68:77:76:bc:f7:f7:ac:69:04:a9:
                    32:4b:54:03:9a:01:bc:54:36:24:2d:11:d1:d5:7a:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F2:4B:AD:6A:3F:09:01:4F:A6:C4:01:E1:21:2B:0E:C0:59:99:91
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.117.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:17:fc:7b:43:d1:bb:27:b9:62:11:0d:e1:b7:ae:55:e0:
         35:46:76:6e:f0:60:1c:c7:1d:4d:df:d3:ad:50:bf:fe:bc:8c:
         0d:d1:5a:cb:17:30:f8:57:93:63:a0:ea:8e:b1:dc:7d:ae:70:
         eb:71:a0:90:5c:fc:e1:bd:22:3c:20:17:57:36:24:90:97:4d:
         91:fd:d1:a5:65:1a:32:cc:da:78:5e:1d:a7:dc:81:61:f4:14:
         3a:a1:d3:d6:4e:ad:21:95:57:91:38:9a:d0:8a:31:67:37:f5:
         e5:c7:62:a5:83:f0:94:92:14:13:aa:e8:a5:72:1a:30:1d:ca:
         d2:ce:70:48:09:ed:83:cf:ac:ae:ed:65:fe:fc:a9:1e:93:c5:
         ec:ea:aa:6f:72:b2:24:db:25:c5:3d:5d:e5:82:0a:00:87:14:
         32:d8:9e:69:59:83:89:05:4a:68:61:64:7a:8f:ff:fd:54:98:
         11:22:78:61:28:60:6b:86:a4:84:5b:ee:eb:44:40:de:a5:7d:
         ee:06:d8:81:b2:56:53:b9:41:44:a3:96:b8:e9:25:ad:13:ac:
         d1:44:e4:12:8a:54:0d:83:2a:03:6d:85:3e:24:4f:bb:b1:82:
         1c:0a:38:44:83:9e:e7:9c:8d:e4:bf:08:3d:fe:9a:61:ec:d9:
         87:a7:03:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----