Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218780.roa
File:                     AS218780.roa (raw, json)
Hash identifier:          tpHsIkXCQ1gwCf8x+F8HAbjRfEdwUn6HoFny8EYZfCU=
Subject key identifier:   39:56:08:D0:80:21:EF:5D:61:06:12:69:63:44:B8:CF:2E:84:AC:22
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       64DC0053D19C2A62D478EFEE8D8BE071FEE86BC8
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218780.roa
Signing time:             Thu 05 Nov 2026 08:29:40 +0000
ROA not before:           Thu 05 Nov 2026 08:24:40 +0000
ROA not after:            Thu 04 Nov 2027 08:29:40 +0000
asID:                     218780
IP address blocks:        79.176.106.0/24 maxlen: 24
                          109.64.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dc:00:53:d1:9c:2a:62:d4:78:ef:ee:8d:8b:e0:71:fe:e8:6b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov  5 08:24:40 2026 GMT
            Not After : Nov  4 08:29:40 2027 GMT
        Subject: CN=395608D08021EF5D610612696344B8CF2E84AC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:49:d2:8b:ef:8f:08:56:9b:ff:e0:34:08:
                    96:e0:59:35:3b:ad:f0:c1:d6:98:cf:2f:97:c1:89:
                    b8:17:ac:e7:e1:e8:94:db:cc:fa:e8:d9:77:d0:4a:
                    09:4e:41:3b:55:ea:f8:18:ab:ff:ff:e5:44:54:15:
                    b0:73:e9:c3:46:f4:28:c7:78:8a:a7:54:1a:fc:14:
                    fa:52:7d:be:0c:c5:3b:88:b7:f9:10:fc:0a:bb:6f:
                    d5:ed:01:18:38:b4:50:a6:21:67:30:2f:ae:01:6e:
                    4c:3b:45:20:2e:52:9b:46:0c:8e:74:5d:06:1b:7e:
                    20:5e:74:59:24:fc:28:09:96:8e:3f:64:9f:4e:97:
                    1c:56:49:c7:dd:58:b8:82:57:b7:b7:9a:40:02:50:
                    be:da:82:fe:24:93:e2:41:d7:c6:a6:14:30:fa:bf:
                    06:78:aa:50:ca:48:7d:ff:fb:5f:8a:d7:d8:8a:79:
                    f5:bf:53:d4:91:a3:56:d4:ee:0e:0a:ef:aa:60:d7:
                    5e:8d:61:6f:c5:9d:c2:43:db:f8:46:aa:d5:9f:55:
                    b3:28:9b:0c:ca:bb:b1:59:0a:5e:ae:1f:45:ff:9b:
                    98:2e:7a:ee:33:b0:e9:f5:fe:a1:94:bc:8d:28:c7:
                    92:95:27:25:63:44:15:a1:9e:e6:3b:52:1d:6d:ab:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:08:D0:80:21:EF:5D:61:06:12:69:63:44:B8:CF:2E:84:AC:22
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.106.0/24
                  109.64.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:7a:41:f1:a8:bc:c6:98:8c:9f:a1:e3:ff:ac:83:b2:3c:5f:
         9b:8d:20:19:8e:42:15:e6:13:74:8a:0f:0d:44:9b:ea:44:0b:
         b7:e4:e4:21:46:b0:da:6a:9e:e9:5e:a3:6d:fc:63:60:5e:d6:
         9f:ba:45:8b:33:3a:5b:a0:b5:aa:96:6b:1e:3b:5e:0c:ac:1b:
         62:b6:65:ee:a7:be:8e:6a:f4:48:d4:82:bb:ef:c6:9f:2a:94:
         73:93:ae:f6:8f:bd:4f:4f:08:23:c3:7d:47:81:d6:42:1a:9b:
         6a:df:a1:02:ff:39:f1:b2:4d:d8:69:09:56:91:08:0f:b8:c4:
         ec:81:5d:34:9e:3a:11:a8:5b:31:22:46:f0:18:11:ad:ff:55:
         43:a5:88:d1:75:dd:98:bb:31:dc:ca:d2:a0:8b:6e:52:d5:5e:
         01:22:23:5a:24:48:fd:aa:3c:02:02:29:bd:7e:73:bd:31:5e:
         97:aa:06:f7:b2:d0:be:64:3e:dd:03:de:ea:92:d7:1a:76:f5:
         63:d8:12:42:e2:dc:63:bf:f7:72:01:21:7c:bb:8d:c9:dd:b8:
         99:2d:cf:13:87:ee:81:b6:16:8a:8c:e3:05:53:87:3d:71:7a:
         f2:31:ba:e4:1e:57:78:1b:5e:c3:d1:7c:57:78:a0:94:fd:f8:
         3b:60:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:07:33 2026 by rpki-client