Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          l6L/FUDclx1Blmna7CihdzTNSDBqTscKr0G+yC2WFxQ=
Subject key identifier:   63:6C:EC:A3:89:B0:FB:E0:17:F8:6E:B2:19:22:5D:8D:DF:EA:43:CD
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       692440D94EA92E5FC52DB9DA58C6BB7AB5755427
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
Signing time:             Wed 19 Aug 2026 18:49:30 +0000
ROA not before:           Wed 19 Aug 2026 18:44:30 +0000
ROA not after:            Wed 18 Aug 2027 18:49:30 +0000
asID:                     262287
IP address blocks:        92.112.170.0/24 maxlen: 24
                          92.112.171.0/24 maxlen: 24
                          92.112.172.0/24 maxlen: 24
                          92.112.175.0/24 maxlen: 24
                          92.112.200.0/24 maxlen: 24
                          92.112.202.0/24 maxlen: 24
                          92.113.234.0/24 maxlen: 24
                          92.113.235.0/24 maxlen: 24
                          92.113.239.0/24 maxlen: 24
                          92.113.240.0/24 maxlen: 24
                          92.113.244.0/24 maxlen: 24
                          92.113.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:40:d9:4e:a9:2e:5f:c5:2d:b9:da:58:c6:bb:7a:b5:75:54:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug 19 18:44:30 2026 GMT
            Not After : Aug 18 18:49:30 2027 GMT
        Subject: CN=636CECA389B0FBE017F86EB219225D8DDFEA43CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:e9:e0:f6:df:7f:b0:a0:e1:f0:c4:69:95:
                    61:e7:5d:0a:1f:d4:69:9a:c7:db:6d:df:6f:bb:8d:
                    46:29:5a:0d:16:0d:bf:11:97:1d:14:f9:95:4e:fb:
                    2f:f5:11:1e:33:8e:01:f6:1a:77:9b:2b:ea:31:b4:
                    37:56:cb:28:0b:d7:6d:b1:9b:ac:26:30:ad:9e:64:
                    0f:dd:d8:9b:bf:b8:5a:1e:52:f8:78:14:06:f4:83:
                    89:8a:d8:02:89:5f:95:38:b0:69:47:87:38:c7:a9:
                    8c:f9:4e:7b:53:c3:3b:5e:e2:55:82:ca:bf:dd:29:
                    76:98:29:46:21:b2:92:be:7f:64:d9:e0:ad:c8:0e:
                    5d:f6:aa:c5:94:07:0c:e9:a2:4f:99:b3:e2:7e:77:
                    af:64:f2:5e:ea:09:7c:e9:32:d1:dc:46:af:0e:5b:
                    e7:c1:9c:3d:03:9d:5b:46:d4:c0:5a:0b:33:af:2e:
                    73:1f:c8:f7:bd:15:aa:fc:18:65:b9:59:a9:51:c2:
                    95:1b:79:60:27:7e:18:bd:c0:dd:38:cc:b5:7a:64:
                    b2:8b:5d:5d:46:5d:f5:58:26:90:99:a8:9a:62:6e:
                    4a:f0:7d:4b:8c:69:72:1a:48:ec:d7:7a:bd:62:e4:
                    37:04:0f:f0:af:c9:5b:97:31:99:d9:1c:e1:ba:d3:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:EC:A3:89:B0:FB:E0:17:F8:6E:B2:19:22:5D:8D:DF:EA:43:CD
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.170.0-92.112.172.255
                  92.112.175.0/24
                  92.112.200.0/24
                  92.112.202.0/24
                  92.113.234.0/23
                  92.113.239.0-92.113.240.255
                  92.113.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:5f:e1:6b:2c:bc:71:b7:d7:73:10:c8:e3:ee:dd:eb:82:
         77:8f:0a:1e:1c:17:21:8f:cd:f6:d3:17:cf:04:f3:02:c6:da:
         f5:0b:c4:b1:9a:ae:7a:9a:1a:93:60:40:12:e1:0c:86:10:27:
         89:af:bd:f6:73:1a:46:36:88:a6:0e:58:99:5c:5a:c5:d5:f3:
         5c:8c:61:fb:42:62:f6:c1:3e:cd:65:6a:87:a3:f0:53:61:80:
         63:fe:03:9e:e5:0a:0b:56:c4:8c:bb:91:b9:25:0a:9b:4d:f1:
         e6:bd:32:88:f1:d8:40:72:b4:3f:6a:05:c9:e6:1b:39:2b:da:
         18:5e:b8:3d:1f:2f:6c:35:26:d3:f3:56:02:48:4a:bd:ba:b9:
         36:be:b9:cb:d5:cb:48:04:4c:42:1a:44:39:eb:56:0e:62:12:
         c6:ed:b5:e3:0e:84:fe:41:06:37:ad:8d:f3:c3:5f:51:97:29:
         ef:56:0e:8f:07:fb:22:d5:3e:f7:26:3d:40:84:3e:72:cd:c8:
         6f:7c:1a:6a:f2:32:e8:8c:12:bb:86:10:b0:f1:3c:e8:93:fb:
         b2:d2:c3:f0:f9:37:ce:42:a1:00:02:45:34:b6:2f:96:6b:15:
         47:11:a7:3c:ad:a7:97:d7:a2:86:ca:30:18:bb:e3:79:71:bf:
         48:74:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:29:32 2026 by rpki-client