Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199592.roa
File:                     AS199592.roa (raw, json)
Hash identifier:          64C0at46C887CbLjQBPVvwi40je2oUbWViCng7Wc6oo=
Subject key identifier:   EE:62:BA:CC:F9:6C:32:F2:CF:D1:4D:DC:E4:15:1A:AB:B7:B7:8F:94
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       5CED0874921BC1ED93865C3FF6BCC381BEB8F8A2
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199592.roa
Signing time:             Thu 08 Oct 2026 11:51:31 +0000
ROA not before:           Thu 08 Oct 2026 11:46:31 +0000
ROA not after:            Thu 07 Oct 2027 11:51:31 +0000
asID:                     199592
IP address blocks:        79.182.50.0/24 maxlen: 24
                          109.65.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ed:08:74:92:1b:c1:ed:93:86:5c:3f:f6:bc:c3:81:be:b8:f8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  8 11:46:31 2026 GMT
            Not After : Oct  7 11:51:31 2027 GMT
        Subject: CN=EE62BACCF96C32F2CFD14DDCE4151AABB7B78F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:49:75:56:a9:e9:b1:23:94:53:41:16:1f:
                    3c:e0:c9:fa:51:22:14:6f:df:1e:4c:2f:ff:71:74:
                    a8:43:4e:79:f2:73:77:98:df:55:4a:33:27:dd:35:
                    99:b9:25:02:ae:a6:bc:41:66:0e:e3:3a:bd:b5:8a:
                    74:77:50:57:f0:2e:51:21:88:ff:c8:06:d6:70:b5:
                    fd:ac:ec:b4:9e:1d:1f:13:ec:b0:f5:3a:48:9e:a8:
                    03:96:dd:6e:e0:98:ab:67:fa:95:14:f0:fe:78:ce:
                    1a:fa:5a:28:e0:70:fb:45:23:ae:2f:1d:a6:0c:7e:
                    91:31:6d:b7:c1:8d:e4:cd:3d:67:7c:d8:d1:ca:49:
                    2c:31:73:06:03:04:46:8a:80:ee:1e:63:19:91:12:
                    1b:1c:3a:ca:ce:ff:63:c2:23:d0:94:bb:85:43:09:
                    e3:04:c2:f0:2f:33:34:2f:4a:a2:48:1a:ca:8a:9e:
                    a2:0c:70:67:11:74:b6:13:83:34:84:a2:c4:d1:cd:
                    48:af:21:72:b0:4e:4f:83:de:5c:b4:26:64:1b:af:
                    d3:2e:4d:a6:10:4b:c6:20:21:6a:f3:ba:25:86:47:
                    92:46:39:13:3d:aa:ed:3b:2e:ca:90:55:18:a6:97:
                    08:cc:2b:3a:c2:2a:3b:57:3d:00:b1:83:39:9e:46:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:62:BA:CC:F9:6C:32:F2:CF:D1:4D:DC:E4:15:1A:AB:B7:B7:8F:94
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.50.0/24
                  109.65.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:7b:3a:36:37:6c:c8:6d:32:27:52:3b:e7:5e:41:17:76:f3:
         9b:c7:30:63:bc:28:d6:8f:40:70:ee:40:1c:d4:73:df:44:2f:
         d8:df:86:31:44:24:4f:6b:1a:6d:fb:ae:22:e2:cf:d3:0b:c5:
         5b:78:b2:96:fc:e3:11:66:47:a9:2a:20:78:83:b6:5b:85:74:
         22:27:2b:67:71:76:c9:68:8f:7f:5f:c7:09:f1:6d:51:e8:a7:
         78:8e:47:2c:c9:12:32:6d:d6:34:04:c6:28:8a:df:fb:94:72:
         a0:79:69:8a:a1:1f:94:5f:91:53:10:0b:c5:54:cd:72:79:a6:
         62:7c:1c:66:5a:07:c1:94:ea:b8:30:12:91:9b:27:46:47:34:
         cc:31:3b:1e:b1:43:c3:dc:73:b9:97:f2:d5:31:98:f6:14:53:
         ba:6c:75:a6:fe:05:27:0f:c7:2c:c9:6b:51:3c:0e:1f:1c:69:
         67:56:24:7a:93:80:36:1a:b7:3a:2d:ad:3c:16:51:df:9e:63:
         4a:cf:6b:21:fb:e6:46:d8:d0:c8:57:99:b4:54:31:b8:c6:68:
         ec:1e:67:98:ea:1a:35:ad:ad:48:4e:21:a1:58:be:07:0a:0d:
         e0:46:7e:a2:c8:70:af:0f:b8:8c:78:f5:7c:a2:1e:38:da:cd:
         8f:a3:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:45:54 2026 by rpki-client