Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
File:                     AS402276.roa (raw, json)
Hash identifier:          ERP6/uya3q8MA9sTVw9/wRRi5q/MBGJ2feWwgAlloZI=
Subject key identifier:   EE:7C:89:AB:1B:D8:97:13:8E:62:A0:25:B7:63:1A:92:FD:FA:9F:34
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6FAF3191C2648CC9614B5B9610E92EFD6882AB15
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
Signing time:             Sun 07 Jun 2026 01:41:21 +0000
ROA not before:           Sun 07 Jun 2026 01:36:21 +0000
ROA not after:            Sun 06 Jun 2027 01:41:21 +0000
asID:                     402276
IP address blocks:        178.83.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:af:31:91:c2:64:8c:c9:61:4b:5b:96:10:e9:2e:fd:68:82:ab:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jun  7 01:36:21 2026 GMT
            Not After : Jun  6 01:41:21 2027 GMT
        Subject: CN=EE7C89AB1BD897138E62A025B7631A92FDFA9F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:ba:55:8a:8c:96:b1:f5:9f:8b:ce:23:43:
                    34:bd:4f:1c:05:71:56:fb:8b:0b:c1:0c:c5:d7:04:
                    88:08:d5:2a:ab:ff:60:89:a7:98:12:0f:92:f3:c4:
                    97:12:43:34:b2:cc:ac:e6:b0:d6:fb:01:df:7f:2c:
                    cd:87:9e:92:36:55:6f:f8:7d:06:4a:1c:bc:88:eb:
                    aa:0a:2a:9b:e8:62:26:af:fd:94:c6:87:af:66:b4:
                    3f:67:84:b6:cf:a4:bf:7c:81:3f:f5:3d:06:8d:dc:
                    ad:a5:ee:3a:4c:a1:f5:bb:b9:84:3a:cf:f9:d4:91:
                    c5:88:ae:f5:0f:d5:86:a5:4e:e4:9c:c5:21:37:1d:
                    bb:54:d5:9a:84:f1:c0:2b:54:fa:7f:3f:5c:8c:98:
                    05:18:ab:87:d7:dd:b3:18:06:0e:ad:81:64:3f:00:
                    c7:f5:f6:e2:18:34:71:06:70:06:f2:a7:c2:ce:ea:
                    92:85:09:4c:c7:8d:65:ba:c1:61:56:00:6a:37:56:
                    2f:52:42:e8:08:cc:e4:bd:4d:1d:89:9a:3e:ab:9d:
                    2d:f8:86:10:8d:89:10:bf:47:bf:d0:91:14:e1:5f:
                    a4:26:da:94:76:d4:e9:b9:2d:30:50:d6:ec:a0:40:
                    0f:38:06:36:70:2e:93:3f:aa:8d:cf:d3:63:01:f1:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:89:AB:1B:D8:97:13:8E:62:A0:25:B7:63:1A:92:FD:FA:9F:34
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.83.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:91:40:a0:12:40:d5:73:f9:e4:7e:b0:c5:ca:85:14:ad:62:
         40:46:a0:3c:c1:c6:ef:78:57:b5:8c:00:4d:66:8e:6f:30:c3:
         7f:0c:a1:33:5b:a2:cc:18:54:c3:6a:bd:03:bd:b4:d0:63:2e:
         e0:5a:9d:7e:93:70:6b:2f:db:7e:f7:a9:33:51:07:ac:89:23:
         61:7e:c5:43:80:a7:00:08:8f:e8:9d:b2:ab:61:b6:bb:39:91:
         66:91:b3:18:03:09:54:a0:42:e7:8d:f0:3c:fc:82:21:4f:8f:
         b8:6e:0f:4f:19:3c:09:4e:f2:77:4f:06:4a:80:af:c4:22:82:
         bc:c0:bc:4e:81:f2:35:03:13:dd:4d:2f:1c:83:37:c9:1f:ab:
         c0:ec:9d:04:aa:0e:3b:36:44:19:99:e4:5d:37:64:f6:c1:e9:
         41:a1:f1:9e:95:4d:6b:9e:af:11:d2:3c:85:90:65:b3:13:7d:
         66:02:5c:65:4f:c8:fc:ba:fc:dc:d8:f2:d2:96:0a:f4:0f:c3:
         c2:8b:80:43:0a:4a:f4:69:1f:fa:69:9e:5c:77:fd:3e:b5:2b:
         f2:18:c5:71:b6:55:61:8d:de:5c:9c:d4:b4:21:07:f1:de:8e:
         00:d6:5e:c4:c9:e9:c8:98:3b:f6:42:3f:2d:5d:d7:3f:3b:9f:
         f8:b6:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:13:57 2026 by rpki-client