Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401362.roa
File:                     AS401362.roa (raw, json)
Hash identifier:          TLRwNvRB8sHhjweon8vmhA9mbjdUhwdJZFU6uEWcFJQ=
Subject key identifier:   62:79:08:53:BF:68:7F:A6:22:FE:78:20:42:6D:80:A9:35:56:84:7D
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       61FE5EF3DA7118CF8186D737537802681A51BB2C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401362.roa
Signing time:             Sun 04 Oct 2026 22:06:01 +0000
ROA not before:           Sun 04 Oct 2026 22:01:01 +0000
ROA not after:            Sun 03 Oct 2027 22:06:01 +0000
asID:                     401362
IP address blocks:        178.92.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 04:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fe:5e:f3:da:71:18:cf:81:86:d7:37:53:78:02:68:1a:51:bb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Oct  4 22:01:01 2026 GMT
            Not After : Oct  3 22:06:01 2027 GMT
        Subject: CN=62790853BF687FA622FE7820426D80A93556847D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:f3:cc:41:ab:d4:aa:fd:82:56:13:3e:1d:
                    90:7b:ed:d2:e7:73:b2:a4:d0:cb:36:1f:4f:0a:05:
                    79:20:1b:05:0e:32:bc:26:b0:12:ba:5a:ba:76:ea:
                    e1:a1:26:ae:6e:2d:04:d2:70:17:69:d9:4e:ca:d7:
                    72:1f:0a:87:1c:49:ad:56:a2:d3:5c:ac:53:2e:e3:
                    51:d4:1d:78:67:95:e5:fc:7c:18:b7:2b:6c:35:29:
                    20:2d:24:9d:58:d7:b5:79:28:6b:65:f7:5c:60:97:
                    4b:58:03:da:e4:ec:71:47:8d:b4:d4:6f:1d:47:e9:
                    ec:31:6b:2a:e4:3a:8b:5b:fa:f2:5e:23:40:8c:31:
                    7e:2a:4e:ba:12:91:58:e2:e5:9b:b2:42:d2:67:77:
                    7d:f7:32:af:02:8a:f5:a7:91:1d:b6:62:89:41:24:
                    eb:01:9d:34:4f:5c:de:e0:7d:47:cd:e5:44:c9:d1:
                    4e:af:7e:79:fb:a5:ca:f4:e3:4f:ca:cb:e6:32:6a:
                    ec:0d:ff:7c:af:55:34:b7:3f:36:b0:41:77:c0:d3:
                    99:2c:87:84:09:6a:4a:19:94:e7:bc:dc:04:b4:a5:
                    ef:b6:dd:f9:93:86:e3:0d:b3:cd:b5:7c:59:40:dc:
                    c9:d1:c8:bb:6c:c9:60:96:e7:de:bc:ef:84:1e:ef:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:08:53:BF:68:7F:A6:22:FE:78:20:42:6D:80:A9:35:56:84:7D
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:41:f4:d0:13:58:f5:65:84:97:cf:5e:16:0b:7a:d4:d7:
         b5:5c:37:5d:bb:2c:0a:97:60:8c:17:8d:e4:64:25:84:e3:12:
         e9:0f:9a:7e:75:0f:cf:bc:fb:d8:33:cb:21:44:a4:c9:67:b0:
         01:0a:03:e8:fd:6d:74:9e:ed:52:da:4f:eb:0b:fc:2c:98:41:
         d7:f0:5d:f5:ec:44:1d:05:35:ca:b5:67:14:46:7d:d8:62:b1:
         72:59:29:e9:64:f5:48:85:3c:98:ef:be:2f:a2:39:ea:e9:16:
         b0:ee:77:62:c3:36:fe:b6:9f:e8:9d:9a:a2:68:3a:58:dd:2c:
         50:1a:d9:e4:65:30:31:43:1f:3a:40:70:5c:38:32:fa:66:0b:
         b7:71:58:87:b1:96:69:6c:fe:2a:e0:78:22:ab:06:4e:73:89:
         38:98:f5:88:48:e1:e8:c6:55:b7:67:9a:61:a2:98:6a:be:ac:
         a2:36:15:a2:e5:ec:bd:31:b6:7c:92:91:85:f6:db:b7:a6:43:
         a8:68:b5:b0:71:38:0c:f1:13:d8:cb:25:26:ab:e2:32:dd:25:
         57:54:34:61:7a:35:77:2e:97:c6:d8:16:64:e5:a0:57:a0:8d:
         77:b4:a2:d8:7e:85:6d:c0:cc:fc:d4:b7:e3:61:d2:bf:6a:db:
         4c:78:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:16:48 2026 by rpki-client