Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214379.roa
File:                     AS214379.roa (raw, json)
Hash identifier:          5bVhYfCP3y+N0grdCAIYIeVeGqvyXJKfiEHDL0PTRrQ=
Subject key identifier:   C2:F0:79:1E:9D:8E:4D:1C:B4:49:78:E5:FA:8E:20:27:A2:6E:8B:7C
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       0A2ED4BF25BC92F35FFA7AFCBB522251C5AACE0B
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214379.roa
Signing time:             Fri 09 Oct 2026 20:53:04 +0000
ROA not before:           Fri 09 Oct 2026 20:48:04 +0000
ROA not after:            Fri 08 Oct 2027 20:53:04 +0000
asID:                     214379
IP address blocks:        109.65.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2e:d4:bf:25:bc:92:f3:5f:fa:7a:fc:bb:52:22:51:c5:aa:ce:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  9 20:48:04 2026 GMT
            Not After : Oct  8 20:53:04 2027 GMT
        Subject: CN=C2F0791E9D8E4D1CB44978E5FA8E2027A26E8B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:a1:e5:3a:3d:9d:7a:4f:5a:b7:a5:ca:19:
                    4e:4e:ce:d7:91:92:26:eb:f5:86:82:6b:a2:62:ad:
                    cb:19:5b:12:0c:92:d9:a7:3a:0d:cc:ae:29:b8:35:
                    70:1f:92:2d:88:87:71:e4:c8:2a:54:86:aa:97:f1:
                    14:71:68:a5:5d:f2:10:70:bb:3f:62:f1:fa:cb:df:
                    bd:94:b6:cc:7f:03:cf:5e:eb:ba:c1:12:64:18:91:
                    ac:4e:33:96:06:c4:a9:76:5f:52:c8:91:82:dc:68:
                    a2:ea:c0:16:0b:2a:3b:4e:ab:a8:bc:67:0c:10:c8:
                    4c:1c:f7:6d:f2:99:6d:ec:22:e6:1b:b5:a2:cd:3e:
                    c4:97:dd:9f:3e:78:6d:9a:bd:03:bd:09:d4:a5:02:
                    4b:3f:99:ef:11:3a:43:e8:00:77:17:77:4e:2c:d4:
                    0d:38:b0:a1:2f:4b:9e:57:8d:10:15:80:98:70:3b:
                    df:9b:c4:eb:06:78:1f:46:ea:6f:86:bd:28:3d:1d:
                    a2:54:7e:91:52:43:57:f3:45:b7:2f:03:21:f9:7a:
                    ca:f2:2d:09:47:51:61:e4:2a:ae:3f:48:7f:fe:3f:
                    b1:fc:43:32:f2:55:a7:20:9f:db:6f:3a:be:8e:ed:
                    9a:05:49:f2:74:a0:33:8d:c3:f2:b1:22:11:2e:76:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:79:1E:9D:8E:4D:1C:B4:49:78:E5:FA:8E:20:27:A2:6E:8B:7C
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214379.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.65.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:74:92:7b:22:2d:51:c5:8e:52:c3:96:41:c5:5a:5f:ae:b9:
         81:95:0e:18:36:70:73:b1:f7:92:2f:29:c8:b6:74:57:68:69:
         10:c5:0a:ed:34:5e:cb:07:a7:7d:6f:cf:e4:70:fd:c0:67:b7:
         c4:69:b0:ed:70:0f:64:78:20:33:a1:2b:2f:d3:6a:02:03:95:
         d3:69:18:e2:90:7a:81:af:d0:36:6d:50:1b:5e:cc:2c:3e:37:
         86:cb:d6:73:48:2e:48:d2:c8:2c:5f:1f:89:8f:36:9c:83:a8:
         61:e8:2c:9e:f8:3e:50:3d:28:38:28:55:42:49:32:a9:15:4a:
         91:07:67:79:74:52:ac:47:f2:64:77:1e:1e:f5:54:b6:3f:7b:
         0f:23:19:c1:ae:cb:b7:cf:5c:f3:cd:5d:12:c6:21:00:ae:78:
         d3:07:2e:30:0d:29:71:07:12:85:ac:26:48:25:15:45:ca:f2:
         d2:cb:75:80:64:32:56:db:18:ba:ed:e5:b5:d7:e3:e4:43:14:
         db:76:44:17:ee:9d:86:08:d8:07:99:c0:ef:50:3a:d8:b0:d1:
         bc:14:09:24:ea:74:e9:63:28:3a:34:a3:04:f2:6f:5b:f6:28:
         57:a2:16:ee:fb:f9:2f:4d:9d:37:5e:24:f5:6d:3b:c1:ba:c9:
         5e:1e:7c:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:44:50 2026 by rpki-client