Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218862.roa
File:                     AS218862.roa (raw, json)
Hash identifier:          boZE0lV6s+5mKJnSozqzeAuupYVqQTRioyov+YYXCl4=
Subject key identifier:   78:8C:9C:05:0F:3D:65:F1:00:42:92:E6:EB:51:E4:57:50:09:AD:16
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       61C2590BF1A3D5B53B7EABD35F6C75CA7D3C14E3
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218862.roa
Signing time:             Tue 27 Oct 2026 10:48:31 +0000
ROA not before:           Tue 27 Oct 2026 10:43:31 +0000
ROA not after:            Tue 26 Oct 2027 10:48:31 +0000
asID:                     218862
IP address blocks:        79.180.88.0/24 maxlen: 24
                          79.180.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c2:59:0b:f1:a3:d5:b5:3b:7e:ab:d3:5f:6c:75:ca:7d:3c:14:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 27 10:43:31 2026 GMT
            Not After : Oct 26 10:48:31 2027 GMT
        Subject: CN=788C9C050F3D65F1004292E6EB51E4575009AD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:bb:ad:c1:20:73:fc:d9:3b:16:f0:28:4f:
                    fa:e8:d7:4e:fa:15:9e:0d:ae:07:f7:d4:11:43:62:
                    73:f8:dd:c5:fe:3f:4e:08:21:26:cf:0d:66:a7:a1:
                    d6:3c:64:53:94:83:d3:8d:0e:9a:e7:db:f3:c6:1c:
                    5f:06:67:2a:b9:d7:74:46:5e:57:bf:05:23:99:46:
                    9f:b1:d8:7d:56:4a:43:d7:27:2e:63:ca:33:e4:89:
                    8d:ae:a5:eb:26:5d:88:19:65:cd:77:ba:a5:bd:23:
                    c2:c1:53:b6:8b:48:7e:b2:5a:72:c2:35:a5:e8:87:
                    08:a1:c2:4c:4a:58:3c:b8:18:11:eb:0e:e8:f2:5f:
                    35:f5:9a:a4:56:ce:40:9e:ef:69:2c:4f:d1:95:47:
                    7a:26:88:cc:7d:b4:a5:a1:17:19:81:35:e0:33:72:
                    e5:c3:84:57:6a:69:da:26:7e:d9:78:b0:ff:f7:ad:
                    62:53:e6:66:9c:c5:8f:18:3b:7f:28:40:59:8f:4a:
                    f5:76:d3:59:41:e6:0a:9b:71:f1:a2:21:72:87:5b:
                    53:08:ca:12:ec:5f:ae:3c:26:31:26:d8:bc:fd:e6:
                    35:0b:14:84:c2:db:ef:f3:2a:54:a3:41:86:c3:49:
                    6a:57:b3:b0:03:6c:a2:5b:75:59:0e:02:ca:66:38:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:9C:05:0F:3D:65:F1:00:42:92:E6:EB:51:E4:57:50:09:AD:16
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218862.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.88.0/24
                  79.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:64:c8:83:2f:45:2d:41:76:91:c4:96:39:97:05:5e:86:
         dc:69:b0:11:67:e8:d6:f4:36:03:74:b1:00:78:bb:b9:e3:74:
         4c:29:4e:63:28:10:a6:8b:b3:23:de:73:fe:f0:d4:3c:ab:ac:
         ff:99:39:b5:23:e8:ef:e2:af:95:60:fe:c8:fe:f6:0f:c5:80:
         91:67:d2:fb:63:d0:a9:fe:43:ce:bc:e8:6e:cd:f2:03:ad:eb:
         6c:f2:f3:c8:85:b6:05:1d:5e:28:41:9d:f0:f4:a0:91:a5:1d:
         be:56:9d:c4:27:82:dc:ab:53:9d:9e:76:94:37:4f:a5:9d:8a:
         fc:d8:88:e4:80:19:83:3b:a9:69:a3:82:57:78:f0:e4:a3:aa:
         97:f1:0e:4f:2a:1a:a7:81:1e:af:c2:89:f9:e0:a9:80:ff:12:
         ba:df:6a:1d:62:c3:0c:7c:12:45:b3:c2:70:0b:a8:fb:aa:e0:
         c8:a2:9a:4f:4b:cf:3b:4e:2c:5f:f8:16:83:89:25:89:91:a7:
         02:ed:c4:b2:04:3b:d5:cb:6f:ad:ef:94:c4:d3:8c:e8:5f:54:
         25:b1:6b:79:89:f2:90:ba:09:5f:73:1f:2c:73:69:02:55:5b:
         8c:ea:0b:a5:8c:34:b9:ce:b2:7c:6a:c9:1f:91:ed:a7:be:96:
         b3:96:e2:27
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUYcJZC/Gj1bU7fqvTX2x1yn08FOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMjcxMDQzMzFaFw0yNzEwMjYxMDQ4MzFaMDMxMTAvBgNV
BAMTKDc4OEM5QzA1MEYzRDY1RjEwMDQyOTJFNkVCNTFFNDU3NTAwOUFEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvrutwSBz/Nk7FvAoT/ro1076
FZ4Nrgf31BFDYnP43cX+P04IISbPDWanodY8ZFOUg9ONDprn2/PGHF8GZyq513RG
Xle/BSOZRp+x2H1WSkPXJy5jyjPkiY2upesmXYgZZc13uqW9I8LBU7aLSH6yWnLC
NaXohwihwkxKWDy4GBHrDujyXzX1mqRWzkCe72ksT9GVR3omiMx9tKWhFxmBNeAz
cuXDhFdqadomftl4sP/3rWJT5macxY8YO38oQFmPSvV201lB5gqbcfGiIXKHW1MI
yhLsX648JjEm2Lz95jULFITC2+/zKlSjQYbDSWpXs7ADbKJbdVkOAspmOG9pAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUeIycBQ89ZfEAQpLm61HkV1AJrRYwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg4NjIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBABPtFgDBABPtIMwDQYJKoZIhvcNAQELBQADggEBACsaZMiDL0UtQXaR
xJY5lwVehtxpsBFn6Nb0NgN0sQB4u7njdEwpTmMoEKaLsyPec/7w1DyrrP+ZObUj
6O/ir5Vg/sj+9g/FgJFn0vtj0Kn+Q8686G7N8gOt62zy88iFtgUdXihBnfD0oJGl
Hb5WncQngtyrU52edpQ3T6WdivzYiOSAGYM7qWmjgld48OSjqpfxDk8qGqeBHq/C
ifngqYD/Errfah1iwwx8EkWzwnALqPuq4Miimk9LzztOLF/4FoOJJYmRpwLtxLIE
O9XLb63vlMTTjOhfVCWxa3mJ8pC6CV9zHyxzaQJVW4zqC6WMNLnOsnxqyR+R7ae+
lrOW4ic=
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:56:12 2026 by rpki-client