Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202792.roa
File:                     AS202792.roa (raw, json)
Hash identifier:          cenrPnLNvobCjvQiifKFmn441fliLVqZ/r1tW2sQ2VM=
Subject key identifier:   66:C4:44:C4:B9:30:60:55:FC:CD:05:56:E7:43:C1:54:B2:5A:A0:AA
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       2EADBED6C76C633B5E4F37D7BDC4B24E51003039
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202792.roa
Signing time:             Fri 05 Jun 2026 05:26:44 +0000
ROA not before:           Fri 05 Jun 2026 05:21:44 +0000
ROA not after:            Fri 04 Jun 2027 05:26:44 +0000
asID:                     202792
IP address blocks:        51.241.148.0/24 maxlen: 24
                          78.105.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ad:be:d6:c7:6c:63:3b:5e:4f:37:d7:bd:c4:b2:4e:51:00:30:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jun  5 05:21:44 2026 GMT
            Not After : Jun  4 05:26:44 2027 GMT
        Subject: CN=66C444C4B9306055FCCD0556E743C154B25AA0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:f7:ff:01:35:b0:e9:86:e0:24:f2:20:64:
                    6f:18:b0:b7:ec:37:5a:51:27:c9:5f:71:32:9d:33:
                    ce:8b:d6:20:87:fd:41:df:66:b0:6d:ab:e5:42:37:
                    79:6d:ee:3e:43:f9:da:2d:c1:68:c1:c1:57:63:63:
                    59:bf:d1:ea:57:6a:bd:87:4d:db:84:ff:6f:a9:eb:
                    2e:48:40:05:a3:0e:bd:55:0b:1c:5c:37:18:2a:d2:
                    1e:27:7e:6b:5e:86:20:ed:0a:ec:9c:48:3d:27:4f:
                    07:c9:3f:92:1b:46:3a:f9:c7:13:c4:6c:8e:a1:47:
                    26:01:b9:6a:ed:64:07:51:03:2d:1f:a5:e1:9e:18:
                    dd:c0:24:8f:16:e6:c8:f8:0f:80:2c:79:cf:4f:8a:
                    c1:72:93:54:64:b7:fd:dc:d2:9d:19:0c:ad:d2:52:
                    1b:33:39:5f:a9:f5:71:b5:a9:9b:e6:ac:e4:a0:d3:
                    0b:d7:77:fe:6e:1f:26:14:ed:b0:3d:20:ac:d6:59:
                    64:8e:6a:a7:71:1b:1e:ef:84:42:10:23:6f:38:c2:
                    9f:5e:fc:c6:3a:64:5e:0d:37:a2:f8:59:cc:f7:1c:
                    eb:8a:6d:e2:25:27:ca:c5:f1:33:dd:b6:06:e4:0c:
                    58:ad:de:e1:e4:3c:57:ed:73:55:22:d3:54:b9:5d:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C4:44:C4:B9:30:60:55:FC:CD:05:56:E7:43:C1:54:B2:5A:A0:AA
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.241.148.0/24
                  78.105.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:09:50:8f:64:35:bc:21:7d:14:f7:b2:1d:ca:25:23:0c:1e:
         28:00:2d:e9:6a:0b:b9:a9:00:45:27:a4:69:e2:96:77:66:2a:
         f4:7b:d2:2a:c0:7d:ae:37:cc:d4:0f:c0:bf:77:60:54:85:a2:
         f9:97:25:77:07:d5:e8:3c:8e:a5:ff:ea:88:ee:97:39:7c:50:
         bc:d5:62:b2:92:64:a9:ef:f5:77:7e:65:6e:fc:77:13:c2:65:
         87:a5:c4:14:98:53:18:91:b2:b6:f5:df:98:4b:eb:93:c1:4b:
         b1:76:29:6f:99:46:d5:a5:86:93:40:3e:b6:97:79:d5:33:fa:
         42:2e:2a:37:9c:b6:29:ec:77:9d:cd:12:5a:01:5a:65:e5:bc:
         0f:41:ca:28:63:3e:ef:e1:58:a7:c7:ae:c0:a1:5c:45:54:26:
         6c:89:03:73:ac:96:85:30:7d:da:95:81:f1:0d:a0:ff:4f:13:
         9a:19:18:cf:ca:85:1e:18:51:bd:1e:87:fd:5b:09:3b:d7:84:
         ed:65:67:de:77:4d:12:95:e5:ae:c9:cf:25:86:a5:de:47:1b:
         d7:89:db:8d:20:f4:c0:f5:6e:7f:f5:41:cb:98:f1:3e:46:90:
         20:74:d2:30:af:e1:9d:cb:ac:b2:9f:6e:ce:1d:43:49:71:40:
         79:61:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:17:43 2026 by rpki-client