Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          FCCfoKREFDOCCEHhdT9AykA+kLpZBFsX8B5yOAd0oHk=
Subject key identifier:   AF:C2:83:63:FE:73:FB:F3:E3:BD:7E:8A:60:50:E9:3D:CA:A5:E0:17
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       550540B4BA5E3889A9E62AE85E4CC9785B476F54
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51082.roa
Signing time:             Wed 03 Jun 2026 10:54:53 +0000
ROA not before:           Wed 03 Jun 2026 10:49:53 +0000
ROA not after:            Wed 02 Jun 2027 10:54:53 +0000
asID:                     51082
IP address blocks:        82.21.188.0/24 maxlen: 24
                          82.39.253.0/24 maxlen: 24
                          84.75.214.0/24 maxlen: 24
                          84.75.247.0/24 maxlen: 24
                          178.83.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:05:40:b4:ba:5e:38:89:a9:e6:2a:e8:5e:4c:c9:78:5b:47:6f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jun  3 10:49:53 2026 GMT
            Not After : Jun  2 10:54:53 2027 GMT
        Subject: CN=AFC28363FE73FBF3E3BD7E8A6050E93DCAA5E017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:b4:96:ee:e3:a2:18:18:26:76:36:95:f9:
                    df:27:0d:f6:ee:28:3d:01:c9:cd:fa:80:99:fe:8d:
                    a4:c8:1a:dd:13:2b:26:d0:f7:ca:59:d4:c3:1b:16:
                    6b:85:51:69:36:e4:3c:86:1a:5a:6a:08:68:61:d1:
                    5f:c2:42:31:27:6e:07:ba:a4:d5:3c:f9:6d:98:c8:
                    91:5e:ef:98:4b:5c:8a:8b:81:23:ee:71:ef:08:7e:
                    b2:5d:74:23:c0:3b:4c:17:46:16:cc:a5:8b:ec:ea:
                    a6:56:8f:bb:dc:20:ef:01:bf:d3:3e:99:1e:18:7a:
                    c8:0a:ff:5b:cb:e1:ee:a9:06:49:c7:13:1c:9f:1e:
                    08:ed:52:3c:d7:d1:c7:94:20:52:80:40:d9:7f:3a:
                    ac:63:e1:df:3c:ab:8f:f2:50:cf:84:25:07:d0:6a:
                    04:d9:e9:70:7f:2a:4d:e2:56:ae:92:de:97:5a:eb:
                    d0:3e:5a:60:f4:e2:1b:30:7e:9b:11:84:18:e8:a9:
                    c6:d2:bb:d1:3c:0f:8b:5a:bd:6a:4d:56:73:11:1d:
                    c7:72:a0:11:b1:16:97:97:08:60:7e:c4:5f:0e:a2:
                    ef:f2:3f:fe:cb:9b:ce:ff:85:49:79:58:1d:10:04:
                    a8:dd:91:d4:26:b1:c2:8e:87:40:77:fe:5d:1f:61:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:83:63:FE:73:FB:F3:E3:BD:7E:8A:60:50:E9:3D:CA:A5:E0:17
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.188.0/24
                  82.39.253.0/24
                  84.75.214.0/24
                  84.75.247.0/24
                  178.83.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:19:3c:0e:0e:0d:5c:f3:84:df:45:ba:80:70:3e:37:79:
         07:a6:dc:5d:8b:b9:63:8d:8c:92:2d:3c:82:e6:49:76:64:0a:
         6a:83:00:56:47:b9:c0:1d:f1:0e:5f:02:3f:ca:e1:2f:28:93:
         f4:11:f6:2c:39:25:b1:5c:5c:36:47:be:54:c1:8d:81:d2:cc:
         92:cb:9b:b0:37:c9:93:08:17:bc:64:fc:65:5c:bb:12:32:ca:
         96:c5:21:29:12:d5:1f:e9:f5:38:f0:4d:a3:26:23:a7:66:a6:
         7e:fe:21:e2:e9:7c:20:ac:d2:5c:22:19:6d:b7:2f:5e:cf:23:
         76:62:b0:42:1d:f8:5c:9e:3d:05:06:ef:d9:fd:31:d0:2e:b9:
         f6:ac:d2:a2:45:60:31:0e:c8:5a:cf:c9:cc:b4:f8:27:9e:80:
         87:e9:96:52:19:a2:35:e7:1f:37:1b:d6:c7:cf:d7:29:48:dc:
         9c:ca:d7:df:de:e7:61:ce:6d:ad:79:7c:29:7e:55:f4:a5:63:
         a3:cc:ee:ee:1a:18:db:f3:3f:e1:93:c7:0d:e9:8c:02:e0:de:
         41:82:8b:40:af:a1:a8:35:62:c0:dc:c6:2f:27:0a:86:93:de:
         e5:b6:f9:cb:da:bf:64:f1:41:7c:f0:39:41:84:79:cf:3a:a3:
         b5:aa:b7:df
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUVQVAtLpeOImp5iroXkzJeFtHb1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MDMxMDQ5NTNaFw0yNzA2MDIxMDU0NTNaMDMxMTAvBgNV
BAMTKEFGQzI4MzYzRkU3M0ZCRjNFM0JEN0U4QTYwNTBFOTNEQ0FBNUUwMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5crSW7uOiGBgmdjaV+d8nDfbu
KD0Byc36gJn+jaTIGt0TKybQ98pZ1MMbFmuFUWk25DyGGlpqCGhh0V/CQjEnbge6
pNU8+W2YyJFe75hLXIqLgSPuce8IfrJddCPAO0wXRhbMpYvs6qZWj7vcIO8Bv9M+
mR4YesgK/1vL4e6pBknHExyfHgjtUjzX0ceUIFKAQNl/Oqxj4d88q4/yUM+EJQfQ
agTZ6XB/Kk3iVq6S3pda69A+WmD04hswfpsRhBjoqcbSu9E8D4tavWpNVnMRHcdy
oBGxFpeXCGB+xF8Oou/yP/7Lm87/hUl5WB0QBKjdkdQmscKOh0B3/l0fYenbAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUr8KDY/5z+/PjvX6KYFDpPcql4BcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTEwODIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABSFbwD
BABSJ/0DBABUS9YDBABUS/cDBACyU+owDQYJKoZIhvcNAQELBQADggEBADW9GTwO
Dg1c84TfRbqAcD43eQem3F2LuWONjJItPILmSXZkCmqDAFZHucAd8Q5fAj/K4S8o
k/QR9iw5JbFcXDZHvlTBjYHSzJLLm7A3yZMIF7xk/GVcuxIyypbFISkS1R/p9Tjw
TaMmI6dmpn7+IeLpfCCs0lwiGW23L17PI3ZisEId+FyePQUG79n9MdAuufas0qJF
YDEOyFrPycy0+CeegIfpllIZojXnHzcb1sfP1ylI3JzK19/e52HOba15fCl+VfSl
Y6PM7u4aGNvzP+GTxw3pjALg3kGCi0Cvoag1YsDcxi8nCoaT3uW2+cvav2TxQXzw
OUGEec86o7Wqt98=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:47:17 2026 by rpki-client