Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
File:                     AS48266.roa (raw, json)
Hash identifier:          B4KzIq1FNviusreLjMVZ+4tp6iKdrhUuZp9Sy2qJl5g=
Subject key identifier:   49:0A:B5:02:2B:DD:ED:D5:EE:76:3C:AA:ED:5E:2A:6D:CC:5A:E1:37
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6780BB312517C8F10FA4857F8915CF3EB59716C9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
Signing time:             Sun 13 Sep 2026 12:56:02 +0000
ROA not before:           Sun 13 Sep 2026 12:51:02 +0000
ROA not after:            Sun 12 Sep 2027 12:56:02 +0000
asID:                     48266
IP address blocks:        91.124.6.0/24 maxlen: 24
                          178.95.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:80:bb:31:25:17:c8:f1:0f:a4:85:7f:89:15:cf:3e:b5:97:16:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep 13 12:51:02 2026 GMT
            Not After : Sep 12 12:56:02 2027 GMT
        Subject: CN=490AB5022BDDEDD5EE763CAAED5E2A6DCC5AE137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:e5:7b:4b:26:06:ac:31:b5:64:8a:ba:c3:
                    af:3d:fc:6a:05:a1:88:0e:c3:42:a7:3b:d1:19:95:
                    97:40:d3:06:77:fe:6d:9b:5a:1d:ad:27:c6:67:a3:
                    48:4d:79:74:81:cd:57:22:bf:f7:47:f9:61:aa:7f:
                    bb:bd:53:af:f1:3f:3c:78:72:b4:f3:21:ed:af:b1:
                    4d:21:ec:dd:0f:9d:72:ab:8e:b8:30:65:31:59:71:
                    52:c7:6f:d8:3c:14:7e:5b:dd:dd:39:da:f9:c1:38:
                    e6:bd:db:1e:8e:c9:d3:9a:af:f4:ee:59:44:e5:36:
                    21:b8:2c:85:1c:fd:2f:a5:69:24:ac:f8:47:22:ad:
                    eb:58:b7:a3:45:bb:85:00:5d:1f:5b:d1:9d:a4:fa:
                    93:75:27:41:2a:19:0b:db:16:6c:4f:d6:51:14:bb:
                    c4:ac:24:f7:4f:c1:9f:5d:a1:3f:98:fe:0b:cf:89:
                    14:1d:cd:d8:62:23:58:97:19:56:42:02:d9:34:29:
                    14:70:20:d8:4d:3e:1b:4d:80:e3:2d:da:d4:57:36:
                    2d:ea:7a:15:ad:bb:0e:c5:c5:76:b5:da:b6:a4:be:
                    80:f7:82:49:d0:18:14:ad:12:57:73:a7:71:d7:b7:
                    74:fc:cf:79:21:24:e9:62:df:b7:42:2f:5d:46:21:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0A:B5:02:2B:DD:ED:D5:EE:76:3C:AA:ED:5E:2A:6D:CC:5A:E1:37
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.6.0/24
                  178.95.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:14:79:6c:b0:d6:a3:cc:fe:28:8a:05:5d:d8:7f:53:f2:9c:
         f7:c1:a5:5b:9d:8b:65:38:1a:90:5c:48:45:47:8d:6e:08:82:
         28:3d:f3:7c:ab:65:be:8f:51:d3:a3:b5:a2:39:69:38:1a:3e:
         97:bb:8a:03:3b:7e:6a:49:36:4b:5b:e9:ec:6a:90:80:fe:c4:
         e5:0d:30:4f:6e:c8:9c:5e:7e:69:4e:0e:1b:bf:c0:9a:78:cc:
         a3:f2:80:26:d2:07:31:3a:84:f3:41:78:93:59:32:65:ec:60:
         d0:5e:c5:81:8c:c7:a2:ad:c0:ce:ee:1d:90:14:58:67:a7:82:
         af:09:e5:fb:ef:df:4f:07:34:89:d0:b1:44:24:cf:80:d5:de:
         ad:e5:48:d8:46:04:5f:b7:fa:1a:4f:46:8d:20:4e:28:36:6c:
         b5:47:56:0c:15:27:52:2e:1d:62:6d:91:a7:5f:29:51:65:9e:
         e5:78:99:a5:88:08:9e:b8:a3:1e:99:af:25:55:31:39:ad:7a:
         63:82:21:37:d4:87:e2:42:0b:6f:44:ce:7f:0f:76:7f:82:16:
         79:f7:22:20:91:05:7b:16:a9:8e:46:b7:dd:fb:dc:3a:e4:7a:
         50:9c:41:3d:c3:11:de:6f:28:f8:0b:f7:6a:c8:a5:5c:71:51:
         77:75:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:08:12 2026 by rpki-client