Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218985.roa
File:                     AS218985.roa (raw, json)
Hash identifier:          O4L6WDGADP/EtjogZbB9/QWUrw1gr0tZFEzgt1LqSlo=
Subject key identifier:   BB:CF:B1:0E:F6:3F:05:B8:7B:03:13:72:27:6C:C7:2A:93:E5:B1:9B
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       5788D75425C286F465CC324354FDB5380A1980F1
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218985.roa
Signing time:             Sat 10 Oct 2026 13:10:28 +0000
ROA not before:           Sat 10 Oct 2026 13:05:28 +0000
ROA not after:            Sat 09 Oct 2027 13:10:28 +0000
asID:                     218985
IP address blocks:        79.180.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:88:d7:54:25:c2:86:f4:65:cc:32:43:54:fd:b5:38:0a:19:80:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 10 13:05:28 2026 GMT
            Not After : Oct  9 13:10:28 2027 GMT
        Subject: CN=BBCFB10EF63F05B87B031372276CC72A93E5B19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:9d:b5:08:da:f6:ee:e0:40:fa:f1:90:dc:
                    84:ef:1b:e4:ef:42:3f:45:ef:b6:4e:74:b6:ed:69:
                    fe:01:57:6f:9e:1f:62:6c:2b:2d:cf:f0:19:3f:99:
                    f9:e3:9a:de:8a:e4:f8:fe:9d:bc:73:2e:12:45:44:
                    db:44:f2:42:06:a9:97:c8:06:40:be:90:81:52:86:
                    e9:21:44:9a:46:36:03:d3:fc:7e:ee:af:77:c5:b1:
                    62:8a:07:41:0d:af:9d:f0:9f:ac:f5:8e:db:c2:b8:
                    d2:ff:b1:82:51:62:ce:bc:8e:c8:55:ba:22:b5:45:
                    00:11:98:ae:d1:62:11:4a:54:2d:21:4b:1e:61:47:
                    e0:ee:2f:c3:d6:45:3f:d2:69:bc:e2:74:45:4a:ac:
                    e2:47:e3:8a:aa:e0:f9:b9:e1:7d:70:55:1e:2d:6f:
                    d0:3e:d1:a2:38:93:a5:5a:24:ec:45:6e:5e:be:84:
                    7e:40:51:65:14:63:6c:e3:02:e1:56:23:c8:c3:49:
                    6f:03:69:1d:4d:36:6b:66:f6:1f:db:c7:9a:b2:0e:
                    5b:e6:6d:5a:de:45:09:95:b7:3e:51:ef:0b:64:48:
                    95:c5:d9:92:6e:43:25:3c:aa:e8:7f:f9:24:c1:ee:
                    ac:af:d8:c6:34:61:8b:6e:b8:88:77:26:c4:07:53:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:B1:0E:F6:3F:05:B8:7B:03:13:72:27:6C:C7:2A:93:E5:B1:9B
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218985.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:25:be:db:7d:72:67:dc:45:90:98:f9:83:5d:e6:53:3d:91:
         da:9f:80:e7:d4:90:60:e1:d4:74:c2:87:dd:25:78:c7:81:c8:
         66:87:e5:df:d9:0c:2b:7d:63:32:b1:69:bd:fa:45:1d:5e:53:
         cb:3b:c4:cb:ac:87:a5:4b:fa:71:d0:50:77:d1:dc:64:6f:d3:
         d2:98:36:91:4e:e8:3b:51:41:01:83:cd:5d:ee:df:ae:6f:82:
         0e:b7:c8:a0:5f:a1:cc:4a:ce:ca:92:cf:72:0f:31:d7:47:00:
         af:60:60:01:25:79:29:df:74:32:71:ad:8c:78:72:11:a2:ec:
         bf:bc:79:05:4c:c4:b8:32:b1:2b:14:63:08:08:f1:1f:45:24:
         b6:ad:dc:27:76:7a:44:f5:41:d0:c4:db:0a:73:9c:91:03:f6:
         b5:34:76:02:df:dc:98:d8:97:49:c0:75:78:b2:48:1b:b6:a9:
         6f:24:16:2d:0c:e3:79:66:d4:ab:2d:68:53:bc:b5:6e:12:31:
         25:61:3c:50:ac:52:be:66:b1:b7:cf:3e:2e:8a:1b:a6:2d:13:
         42:7d:f7:cf:54:c8:f5:0f:6f:47:b1:8c:84:3c:f6:1c:68:ba:
         ad:49:56:a6:db:fa:a8:7b:89:a8:e8:1a:9c:1e:be:93:92:81:
         ea:0d:0d:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:06 2026 by rpki-client