Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
File:                     AS53107.roa (raw, json)
Hash identifier:          3FlVluA06eFcc5Zwj0gLgYRjBacGnqKAicBlLiE/fEQ=
Subject key identifier:   C3:40:17:04:72:86:02:91:D1:94:6A:F8:12:06:C0:CB:A4:A6:CF:EF
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5EBEDD7F03A54F53095DE40C77E55134FE0EED68
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
Signing time:             Mon 14 Sep 2026 00:01:25 +0000
ROA not before:           Sun 13 Sep 2026 23:56:25 +0000
ROA not after:            Mon 13 Sep 2027 00:01:25 +0000
asID:                     53107
IP address blocks:        178.92.192.0/24 maxlen: 24
                          178.92.204.0/24 maxlen: 24
                          178.95.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:be:dd:7f:03:a5:4f:53:09:5d:e4:0c:77:e5:51:34:fe:0e:ed:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep 13 23:56:25 2026 GMT
            Not After : Sep 13 00:01:25 2027 GMT
        Subject: CN=C340170472860291D1946AF81206C0CBA4A6CFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:e3:c0:50:df:06:0b:34:60:3a:08:fe:66:
                    2e:d3:0c:0e:09:f3:55:c4:bf:2f:35:d5:9c:07:2a:
                    e5:6b:48:ac:62:76:bd:78:88:83:65:ee:d7:e5:c1:
                    f0:2d:69:91:d1:55:9b:eb:91:4a:8b:9e:ee:2e:29:
                    07:c2:82:80:ad:b9:27:8b:39:81:63:53:0d:24:f4:
                    7f:f9:d6:12:d0:61:38:fd:e3:ca:33:c3:57:9d:e5:
                    6b:11:d8:ea:1e:28:9d:7e:c5:95:c2:33:4c:42:68:
                    79:84:d5:29:db:8e:34:84:dc:05:74:e3:ce:e3:41:
                    3c:01:a0:a2:85:52:8d:cd:ab:dc:93:70:08:1f:aa:
                    13:b9:f4:ff:51:d4:f8:67:8e:bb:c7:7f:67:b9:99:
                    78:47:97:d5:5c:db:2c:89:96:c0:c3:23:2f:aa:71:
                    9e:dd:0c:3a:72:5c:de:6e:61:0b:1e:b4:4d:10:a9:
                    3e:28:26:0f:2b:f1:8b:d5:a4:51:dc:2a:80:2c:91:
                    9d:2d:46:7f:34:3a:fa:6e:4e:2a:cb:62:b8:7d:60:
                    f9:89:58:93:ff:d8:cb:3e:64:02:85:a2:32:bb:33:
                    b8:3c:e6:e8:b4:61:d5:bb:60:b8:27:e2:cd:36:bd:
                    87:f6:d1:42:99:70:bb:06:01:d3:a6:28:60:ce:a6:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:17:04:72:86:02:91:D1:94:6A:F8:12:06:C0:CB:A4:A6:CF:EF
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.192.0/24
                  178.92.204.0/24
                  178.95.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:86:fd:5a:25:41:47:d2:25:84:49:af:4c:3e:f3:47:8a:ee:
         c6:25:42:66:0f:69:39:74:18:65:fb:08:e3:21:ee:ec:5f:52:
         fe:1a:7c:cb:32:b1:20:af:92:34:58:e2:cc:8b:2b:0d:56:2c:
         4d:b5:ba:2b:8b:bf:08:75:08:ec:fb:20:fe:b4:e7:5c:fc:5a:
         ca:17:67:bb:a4:bc:14:9f:af:ec:3f:a3:4d:d2:b2:f3:58:a2:
         a5:77:bc:b9:8e:43:bd:79:0c:65:8d:6e:dd:9b:29:0b:d9:e6:
         a8:bf:73:20:7a:b1:c3:fa:3e:93:b6:31:2b:51:c8:9b:4e:f5:
         23:81:0a:b0:27:31:28:23:12:7e:08:2c:18:e7:ee:8e:9f:a7:
         e4:e1:49:05:42:db:5c:76:6c:04:e9:f4:30:76:50:95:4d:95:
         12:36:dd:47:f4:15:80:f8:4a:ca:f5:8d:76:43:2e:32:e8:4d:
         95:03:4e:04:f2:38:e4:ff:87:e5:00:30:16:db:fd:59:a5:be:
         b1:ef:f2:26:93:ff:ee:df:21:58:25:23:5c:39:ad:e4:3b:d6:
         6c:f3:04:6d:de:e9:45:d0:d3:ea:80:2a:4f:a3:93:d4:d9:3e:
         74:35:89:c3:b5:2d:a1:23:68:a2:60:31:bb:4d:db:0d:80:de:
         60:a9:b0:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:58:16 2026 by rpki-client