Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218515.roa
File:                     AS218515.roa (raw, json)
Hash identifier:          lcRtsrSF/3xqfLrFIHMCPRz8mK1y4yJH4o6MISKvC6Q=
Subject key identifier:   5A:5E:50:7F:86:4B:9C:3C:73:0C:01:EF:EE:7D:B6:F6:65:D3:BE:36
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       6FA0B30E2D3C5A364ED3BDD6D0FB894B747B39BD
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218515.roa
Signing time:             Wed 14 Oct 2026 16:09:42 +0000
ROA not before:           Wed 14 Oct 2026 16:04:42 +0000
ROA not after:            Wed 13 Oct 2027 16:09:42 +0000
asID:                     218515
IP address blocks:        79.182.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:b3:0e:2d:3c:5a:36:4e:d3:bd:d6:d0:fb:89:4b:74:7b:39:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 14 16:04:42 2026 GMT
            Not After : Oct 13 16:09:42 2027 GMT
        Subject: CN=5A5E507F864B9C3C730C01EFEE7DB6F665D3BE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:a3:8f:ad:be:80:f2:bc:44:e2:70:3e:ca:
                    46:32:d7:c0:50:51:67:18:55:50:25:8a:bf:cd:12:
                    63:3a:7a:0a:23:8f:55:b4:5a:82:ff:a5:c6:d8:40:
                    6a:cc:67:d2:bb:6b:8a:c8:65:70:34:dc:c7:32:99:
                    42:8c:ca:24:e9:60:d4:3a:7a:37:c5:55:38:b7:a4:
                    63:64:d4:c0:c2:e1:41:f8:1f:13:07:63:04:71:1c:
                    b7:4e:b9:f4:82:3e:77:91:9c:bd:01:c2:32:6f:0e:
                    2d:4b:aa:e2:0c:99:9c:87:b2:55:0e:ba:19:0e:3c:
                    a6:eb:44:66:45:a5:d0:07:d8:3a:62:53:40:f2:ea:
                    f0:c5:32:73:32:01:41:2d:37:d6:cb:a5:d1:ea:9f:
                    b9:96:4e:db:34:3d:b5:9e:80:90:5b:2a:fc:6b:6a:
                    f6:f2:61:0a:8a:03:32:dc:04:e6:c2:8e:a8:94:00:
                    59:8a:b4:c7:05:c3:4b:d9:59:0f:40:fc:d7:8b:c4:
                    7c:4c:ab:db:e6:05:b6:da:51:36:e4:11:cd:8c:55:
                    b8:35:61:63:4c:63:b7:38:0e:58:d4:96:9b:6c:55:
                    e0:c9:1d:39:31:45:1e:8b:a7:40:91:9d:f4:6b:68:
                    d7:6c:17:3e:56:6e:2b:e6:45:8a:ce:a0:a9:7c:56:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:50:7F:86:4B:9C:3C:73:0C:01:EF:EE:7D:B6:F6:65:D3:BE:36
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:88:c4:1e:32:54:b5:ac:9f:5e:7d:1e:a6:36:90:00:18:
         ee:8b:d0:fd:23:d1:ea:41:36:28:1c:e7:ac:f1:8a:98:a5:07:
         00:31:cc:b9:cf:98:41:a5:83:cb:2a:81:e0:60:47:8f:3c:24:
         57:5f:52:e6:7d:50:67:fe:d4:7d:5b:f3:c3:95:d1:29:11:ed:
         8c:f7:d0:e7:b1:f7:df:03:fa:2f:67:ec:62:d2:a6:0b:c7:45:
         26:1f:48:c9:72:2d:52:fb:e3:6b:84:b9:62:bc:e9:62:1b:34:
         17:7b:72:dd:fb:38:25:39:e2:db:08:a3:eb:5b:73:33:f6:96:
         f6:cc:06:f8:91:9c:18:60:9b:2c:37:54:f7:2b:32:05:b8:8e:
         9f:0a:0c:4c:73:78:e2:f9:14:90:47:c1:17:68:2d:ad:ac:ee:
         bf:66:4d:29:d3:a8:f8:2d:54:5e:73:f0:39:7e:2e:2b:60:95:
         25:7b:28:6e:f4:28:5e:70:07:c3:62:39:7c:f9:4d:6d:2b:85:
         25:ba:96:60:8a:ab:d2:79:82:7b:38:7e:07:17:a4:78:db:4f:
         2e:ac:93:77:82:67:1e:1a:91:8d:c4:c1:20:63:b0:7e:8c:4c:
         21:91:4a:41:73:16:d5:d0:1a:11:d2:68:1c:c4:b5:7f:e9:8e:
         5f:87:9b:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:23:08 2026 by rpki-client