Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218736.roa
File:                     AS218736.roa (raw, json)
Hash identifier:          hQ7j/vT8iZ8xGzSHN0mwAz6l1VWrwyHZHIdNTJSeeg0=
Subject key identifier:   93:40:F0:C9:FC:D4:0A:BE:BC:09:9C:46:02:CE:9F:1B:E1:29:44:21
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       07AAC2B0B49EAFA8AA1BF27449B4E4AA7B457E31
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218736.roa
Signing time:             Sat 24 Oct 2026 22:17:48 +0000
ROA not before:           Sat 24 Oct 2026 22:12:48 +0000
ROA not after:            Sat 23 Oct 2027 22:17:48 +0000
asID:                     218736
IP address blocks:        79.182.39.0/24 maxlen: 24
                          79.182.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:aa:c2:b0:b4:9e:af:a8:aa:1b:f2:74:49:b4:e4:aa:7b:45:7e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 24 22:12:48 2026 GMT
            Not After : Oct 23 22:17:48 2027 GMT
        Subject: CN=9340F0C9FCD40ABEBC099C4602CE9F1BE1294421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:fc:08:f8:a7:bf:17:5e:f6:9e:ff:c2:32:
                    2f:31:e3:fa:67:7c:e2:79:11:1a:96:af:4e:c2:2f:
                    16:54:4b:3a:8d:9b:c6:0a:0a:8a:54:95:03:18:ca:
                    62:9b:06:e0:cf:2c:80:77:0d:c0:46:e7:5b:66:b3:
                    46:d1:74:93:a0:e6:c9:6a:c1:3f:c7:57:36:15:15:
                    8e:44:14:9d:4b:bb:47:10:39:07:72:72:36:f5:46:
                    d8:f4:46:9a:fc:73:77:29:b6:ba:5d:76:32:df:f6:
                    a6:60:2e:e5:57:60:d3:61:6a:34:ff:09:e0:d6:dc:
                    df:a9:b5:77:08:64:c0:d8:29:4b:48:51:0b:68:8c:
                    8b:0f:50:1a:17:ff:84:bd:ff:5d:23:65:49:f3:4d:
                    a0:88:56:b1:5f:1f:5c:d7:8f:23:87:61:81:24:7b:
                    8b:26:04:b7:c0:7c:7a:7c:b4:63:59:a1:b9:0c:e3:
                    f5:5c:d9:1c:dc:16:92:12:e8:c0:88:b1:05:79:af:
                    f0:78:d1:99:c4:66:d8:23:0e:3c:4a:67:e4:dd:52:
                    0c:f4:ce:6f:0b:f4:5e:f8:94:77:88:62:67:a6:2b:
                    8b:1b:66:54:28:b7:01:e4:42:bc:0e:4e:1f:94:3e:
                    78:35:cc:d2:93:bf:f7:98:f8:91:a2:87:3a:0e:4d:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:40:F0:C9:FC:D4:0A:BE:BC:09:9C:46:02:CE:9F:1B:E1:29:44:21
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.39.0/24
                  79.182.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:72:23:95:75:59:ba:97:a3:e1:31:5f:23:a1:b0:ca:ad:
         a0:0c:1a:a0:02:d1:ba:0a:d7:23:1a:db:f9:2d:01:48:71:d3:
         ca:63:67:c9:2e:9f:e4:fc:8f:6d:42:d0:fd:20:43:f3:e0:ba:
         a8:cb:54:02:d4:ae:69:4e:cf:71:e2:0d:ec:88:10:b7:d5:f4:
         8d:67:f6:87:04:a5:9a:33:cc:9c:a8:da:7f:ae:7c:16:2d:97:
         44:69:36:ac:a8:02:91:cd:f9:ff:9c:7e:f7:95:ad:a7:99:ce:
         31:b6:9a:54:25:21:bc:cf:19:ac:31:34:36:9b:8e:1a:b5:c6:
         3a:d8:4c:5a:be:3e:e0:a6:af:89:1f:a3:cf:97:6d:e4:db:ee:
         9a:1e:d3:2e:ad:73:e9:f2:be:3e:b4:5d:92:1b:d3:67:8c:c5:
         8f:cd:c5:45:cf:ed:a4:a9:b5:aa:ff:03:bf:f5:af:94:8e:13:
         89:68:36:b6:7e:21:f1:d0:8b:ca:c4:03:69:7d:df:fa:09:c9:
         9e:54:8b:41:14:47:9a:78:95:c1:3f:04:db:81:99:1f:31:2c:
         0b:10:e4:3d:9d:00:8d:d3:29:e8:16:76:67:fd:0f:cb:99:7f:
         82:4e:5e:af:54:88:ce:f3:9a:e1:9b:0f:59:29:b7:21:c9:28:
         00:bf:dd:f0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUB6rCsLSer6iqG/J0SbTkqntFfjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMjQyMjEyNDhaFw0yNzEwMjMyMjE3NDhaMDMxMTAvBgNV
BAMTKDkzNDBGMEM5RkNENDBBQkVCQzA5OUM0NjAyQ0U5RjFCRTEyOTQ0MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpvwI+Ke/F172nv/CMi8x4/pn
fOJ5ERqWr07CLxZUSzqNm8YKCopUlQMYymKbBuDPLIB3DcBG51tms0bRdJOg5slq
wT/HVzYVFY5EFJ1Lu0cQOQdycjb1Rtj0Rpr8c3cptrpddjLf9qZgLuVXYNNhajT/
CeDW3N+ptXcIZMDYKUtIUQtojIsPUBoX/4S9/10jZUnzTaCIVrFfH1zXjyOHYYEk
e4smBLfAfHp8tGNZobkM4/Vc2RzcFpIS6MCIsQV5r/B40ZnEZtgjDjxKZ+TdUgz0
zm8L9F74lHeIYmemK4sbZlQotwHkQrwOTh+UPng1zNKTv/eY+JGihzoOTSdBAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUk0DwyfzUCr68CZxGAs6fG+EpRCEwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg3MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBABPticDBABPtkYwDQYJKoZIhvcNAQELBQADggEBAFJMciOVdVm6l6Ph
MV8jobDKraAMGqAC0boK1yMa2/ktAUhx08pjZ8kun+T8j21C0P0gQ/PguqjLVALU
rmlOz3HiDeyIELfV9I1n9ocEpZozzJyo2n+ufBYtl0RpNqyoApHN+f+cfveVraeZ
zjG2mlQlIbzPGawxNDabjhq1xjrYTFq+PuCmr4kfo8+XbeTb7poe0y6tc+nyvj60
XZIb02eMxY/NxUXP7aSptar/A7/1r5SOE4loNrZ+IfHQi8rEA2l93/oJyZ5Ui0EU
R5p4lcE/BNuBmR8xLAsQ5D2dAI3TKegWdmf9D8uZf4JOXq9UiM7zmuGbD1kptyHJ
KAC/3fA=
-----END CERTIFICATE-----
Generated at Sun Nov 8 05:29:28 2026 by rpki-client