Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
File:                     AS267192.roa (raw, json)
Hash identifier:          +u+B7lElzoYEb09R+xGQNpKpqwzTPutbsWmZX2eRF6s=
Subject key identifier:   D9:97:59:56:C9:42:2B:D7:01:D8:00:9C:03:CD:93:55:2B:D2:1D:21
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6379E4384FC7CD6FE06C8051676B4CC3270A5B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
Signing time:             Fri 11 Sep 2026 14:47:13 +0000
ROA not before:           Fri 11 Sep 2026 14:42:13 +0000
ROA not after:            Fri 10 Sep 2027 14:47:13 +0000
asID:                     267192
IP address blocks:        178.95.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:79:e4:38:4f:c7:cd:6f:e0:6c:80:51:67:6b:4c:c3:27:0a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep 11 14:42:13 2026 GMT
            Not After : Sep 10 14:47:13 2027 GMT
        Subject: CN=D9975956C9422BD701D8009C03CD93552BD21D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:49:e4:bd:1a:d7:cf:c9:19:8f:85:97:62:
                    83:59:a4:31:2e:91:90:b1:4c:65:f7:b4:0c:fc:04:
                    cc:37:bb:df:c8:e9:7d:5d:59:36:09:5a:b4:ab:be:
                    b3:8b:f1:3e:e3:b0:fb:65:f7:3d:97:8c:b2:f2:4d:
                    93:a9:6e:9d:5c:4b:c3:62:3b:10:a7:ff:9b:39:2f:
                    c6:cf:e6:ed:39:ec:97:6a:79:75:86:28:53:5a:cd:
                    a9:2b:b2:d6:82:ed:45:0a:e6:1a:54:86:91:ca:35:
                    0d:4e:6a:f3:15:75:58:44:a6:ea:1b:ec:81:a2:37:
                    33:78:ac:ec:17:74:2b:08:92:ad:c7:00:7b:4c:c3:
                    60:a3:40:6a:99:0a:9e:cc:4b:2c:56:92:78:ad:99:
                    e9:c0:d4:17:66:b5:a2:d4:0a:38:42:7d:23:5b:bf:
                    15:a2:65:ac:ad:ea:ed:94:9d:54:05:36:54:86:51:
                    f7:58:cf:ea:1e:23:66:21:e6:d1:f0:8f:8a:20:51:
                    c7:35:38:b8:88:32:da:6c:6f:37:83:ee:61:87:5c:
                    81:d6:92:d5:bd:1b:e1:13:db:ae:22:02:b1:dd:ef:
                    d1:ea:a0:99:93:ad:31:ca:85:71:a3:4f:15:7c:5d:
                    8c:bc:29:c4:c8:f8:ab:1f:a1:1a:99:41:6c:da:34:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:59:56:C9:42:2B:D7:01:D8:00:9C:03:CD:93:55:2B:D2:1D:21
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.95.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:18:41:4c:82:42:a8:24:59:56:90:85:0c:71:2c:91:b1:
         67:7e:de:57:c9:0b:89:f2:0e:47:77:e3:97:47:82:49:87:f9:
         61:ce:c9:9c:dc:11:f0:db:80:96:f1:9c:88:93:3a:bf:1b:87:
         df:e9:4c:d6:85:72:2d:20:7c:29:93:d5:65:3b:98:e9:d9:5c:
         7f:0c:b8:70:ae:1f:fe:c3:bf:96:d0:53:89:20:b8:b8:4e:67:
         6e:e7:df:81:e9:37:aa:b0:a6:a1:a4:9b:98:a1:4b:fc:50:3a:
         63:81:58:c4:00:84:8e:59:c8:82:d1:3a:dc:a0:d4:0a:bb:48:
         1e:bf:ac:e8:de:84:2d:54:f2:87:85:84:ae:c3:a1:4c:87:07:
         72:3f:9e:0a:00:e1:95:aa:e7:b5:6d:91:3a:e5:c9:e7:32:dd:
         3e:4e:75:de:6b:13:d9:c9:36:ff:a9:68:d0:0e:fd:fd:10:b9:
         55:87:84:17:27:49:d2:b8:2e:5b:0c:70:d9:c6:41:b2:4f:2f:
         45:95:46:08:cf:93:7b:b0:8c:86:91:2d:18:9a:b4:f5:36:3b:
         82:91:d8:c9:9a:a9:ea:45:ba:7a:93:4b:d6:5f:8e:4d:da:15:
         d4:ad:93:ca:5e:59:63:d6:ee:28:e7:0e:45:98:b4:8a:fe:25:
         98:6a:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:30 2026 by rpki-client