Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137410.roa
File:                     AS137410.roa (raw, json)
Hash identifier:          JzRQHmcYA6SPF6xRjAhpjdKL7AIUA2UD0g8DoDtikoA=
Subject key identifier:   BB:6A:A3:F0:25:65:B0:4F:A6:68:79:D3:31:DD:F4:CE:58:09:0D:97
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       6B08D6FF13286FE503E731D8CFB103899A8B2AE7
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137410.roa
Signing time:             Wed 04 Nov 2026 09:15:14 +0000
ROA not before:           Wed 04 Nov 2026 09:10:14 +0000
ROA not after:            Wed 03 Nov 2027 09:15:14 +0000
asID:                     137410
IP address blocks:        79.180.4.0/24 maxlen: 24
                          79.180.59.0/24 maxlen: 24
                          79.182.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:08:d6:ff:13:28:6f:e5:03:e7:31:d8:cf:b1:03:89:9a:8b:2a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov  4 09:10:14 2026 GMT
            Not After : Nov  3 09:15:14 2027 GMT
        Subject: CN=BB6AA3F02565B04FA66879D331DDF4CE58090D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:13:fa:59:ff:e1:9c:17:62:04:3b:9a:f3:
                    03:21:ca:ac:d7:25:2e:ec:9b:f4:4b:2a:2a:bd:88:
                    86:85:3a:d9:da:bc:db:ea:ff:5c:6b:b9:44:84:ed:
                    c3:06:87:1b:bc:2c:e9:87:7c:c2:03:de:b1:ff:b3:
                    25:04:2f:d1:a0:cb:70:60:d5:0b:41:72:b7:9e:60:
                    cb:9d:48:94:3a:57:a1:6d:1d:fc:60:72:0d:2c:a8:
                    03:b8:e4:8e:44:17:ba:5e:52:48:9e:af:13:b2:f4:
                    21:9a:b5:62:02:0d:ff:8e:2e:25:dd:3c:5e:8d:7e:
                    35:a5:52:c7:24:08:5d:3f:5d:b8:53:21:20:67:61:
                    0e:a8:09:3a:60:2b:f8:77:ef:19:be:d0:82:9b:1b:
                    30:b8:90:23:05:e0:be:62:10:6e:84:a6:9c:a6:d9:
                    71:7e:5b:d1:91:11:c5:5b:2c:1e:44:17:2f:39:64:
                    80:f5:84:57:e9:3f:20:44:4a:cc:4d:41:37:3d:52:
                    a3:ef:3e:d6:2b:72:2e:39:d6:48:d8:ae:9f:eb:81:
                    ed:f4:ae:a9:b3:d0:24:39:53:bd:60:0e:4a:18:d3:
                    fc:19:b2:b2:b5:a5:99:dc:f5:cc:ac:a1:4a:fc:5a:
                    09:8a:43:81:82:66:69:3f:7d:20:37:eb:61:90:83:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6A:A3:F0:25:65:B0:4F:A6:68:79:D3:31:DD:F4:CE:58:09:0D:97
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137410.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.4.0/24
                  79.180.59.0/24
                  79.182.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:53:ff:fd:df:00:dc:8b:dc:1b:20:34:68:cc:17:03:a2:75:
         bf:41:b4:57:aa:3e:66:9d:39:ca:41:2b:39:24:4e:05:a5:89:
         13:5f:15:ae:4b:98:3e:57:39:e0:50:f6:76:e0:d1:c2:71:05:
         95:00:77:92:2d:5b:14:50:82:78:6f:0a:27:f2:2d:fa:92:42:
         a7:63:b4:62:4d:51:72:d0:44:fc:c7:bc:df:0d:72:4c:05:45:
         e1:43:37:41:a5:69:01:73:da:b5:ba:9e:f9:8a:7f:b4:e9:32:
         64:3d:42:0a:0c:ad:de:35:8a:9f:1d:67:dc:67:41:3f:2f:0e:
         95:8d:8d:74:6a:f3:e7:c7:6f:55:2d:a9:42:51:26:83:e3:b2:
         da:9b:e4:39:66:53:87:80:48:70:ed:19:da:4e:8e:e0:58:81:
         1c:f9:c9:f9:b1:02:b7:37:90:7d:45:f5:cb:1d:f4:94:c9:4f:
         98:fb:01:18:a2:8b:6b:da:1c:b5:0d:96:83:3d:d4:9a:ac:05:
         92:3b:0a:44:07:c5:30:66:01:1c:67:5d:05:8f:84:a5:cd:a4:
         75:7d:c5:95:72:35:7b:9d:78:e5:8b:fe:11:c9:82:07:3a:bb:
         8b:1e:c7:f5:53:ac:0d:16:5a:1e:67:ed:8c:e0:97:6e:da:37:
         65:7e:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:54:25 2026 by rpki-client