Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198805.roa
File:                     AS198805.roa (raw, json)
Hash identifier:          nhfrHoversCyK8ziWr8qLRp8Z4cfLP4V6H+SPPip3U0=
Subject key identifier:   6F:39:A7:CC:04:02:BC:00:7D:7F:E8:0C:75:D9:94:05:8F:75:7F:32
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       5343DD38597BBC4C7C262FD106ABFAE132CF347B
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198805.roa
Signing time:             Wed 28 Oct 2026 13:14:31 +0000
ROA not before:           Wed 28 Oct 2026 13:09:31 +0000
ROA not after:            Wed 27 Oct 2027 13:14:31 +0000
asID:                     198805
IP address blocks:        79.183.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 02:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:43:dd:38:59:7b:bc:4c:7c:26:2f:d1:06:ab:fa:e1:32:cf:34:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 28 13:09:31 2026 GMT
            Not After : Oct 27 13:14:31 2027 GMT
        Subject: CN=6F39A7CC0402BC007D7FE80C75D994058F757F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:6d:a2:f1:e7:f0:18:98:af:e8:13:5d:df:
                    92:32:61:8a:64:da:b5:d8:e3:35:5a:0d:55:29:2f:
                    da:a7:2e:f8:7f:47:02:ba:d9:59:f7:71:67:08:50:
                    a3:17:17:1e:2b:f3:32:f5:ed:86:d5:13:d5:94:ad:
                    f2:a8:f2:f4:1e:d8:7b:e4:c2:41:19:7b:6a:77:3e:
                    08:ed:02:47:66:1f:c4:fe:7b:38:1d:7b:f7:89:55:
                    6a:ec:54:38:9f:02:6a:61:f7:56:a4:bb:19:0b:2d:
                    e2:40:bf:fc:fb:ac:1b:9b:eb:3c:3a:94:e7:da:81:
                    e3:70:d7:f1:fd:13:60:db:75:33:51:b1:b4:6b:e0:
                    8d:48:a7:21:3a:66:93:cf:ce:eb:1b:1a:cd:b5:60:
                    17:d5:6f:a1:ff:e8:bd:96:54:21:12:8a:cf:7b:67:
                    d5:fb:08:9e:0c:61:9e:e6:07:2c:48:23:0a:01:8e:
                    b6:3e:42:09:b1:11:ba:c2:a7:59:0f:6d:06:ca:f5:
                    f2:22:e7:3d:2f:9d:95:4a:09:d0:a2:08:bc:de:b8:
                    16:a9:a2:93:b7:3c:03:38:6a:94:3a:29:c8:f3:66:
                    af:ba:be:82:c2:89:44:51:bd:0c:5f:cd:15:83:e5:
                    0b:19:46:15:e4:99:aa:f5:f1:6f:4c:df:c4:00:7a:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:A7:CC:04:02:BC:00:7D:7F:E8:0C:75:D9:94:05:8F:75:7F:32
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198805.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:06:26:86:dc:03:85:8b:57:0c:70:d9:1e:90:c4:04:bb:
         c8:7e:3d:dd:1e:87:6f:8d:a9:c0:34:f0:14:48:a1:6f:c6:3a:
         dc:88:85:c9:c8:76:dd:26:6a:76:8f:a9:bf:24:44:81:64:a1:
         e4:14:7d:17:4a:68:be:2a:77:ad:1d:97:12:50:ad:94:77:03:
         bb:6a:bc:dd:7f:06:00:07:0b:eb:27:b4:6e:06:cf:00:be:df:
         d2:52:17:9b:69:b7:9e:eb:9d:64:1f:0d:f8:db:bb:45:d4:6a:
         c7:ee:2f:fa:58:83:47:09:b6:c5:7e:c7:7a:82:75:a9:11:a2:
         ec:96:15:ff:fb:60:1b:97:01:8d:56:dd:b7:32:42:88:c9:3f:
         d0:08:fe:0a:1d:dc:ce:5c:1d:3d:e9:27:5a:38:b0:d4:f5:54:
         d2:5e:77:d4:20:d7:61:df:48:9b:fb:55:54:dc:95:62:d5:08:
         c4:0d:3e:28:4b:cc:61:d9:7e:a0:54:87:a2:a3:b9:3f:a1:f5:
         e9:a9:9d:c7:b9:58:8a:dd:43:36:df:7f:c7:11:dc:0a:92:08:
         3e:f5:47:b4:dc:ac:a8:75:17:e9:2d:06:2d:5e:05:8a:29:35:
         35:e0:22:d9:8f:e0:a4:63:3d:7f:4b:ee:d6:b8:15:c2:9b:de:
         4a:1e:16:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 30 15:53:45 2026 by rpki-client