Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
File:                     AS53107.roa (raw, json)
Hash identifier:          vRXEXaBOO0XBuxCcG/h4RNrV7r9p5eFFftrbzkSmq2Y=
Subject key identifier:   B0:8F:9C:2D:F8:47:48:35:2D:7C:51:23:A7:EA:9C:9E:22:57:D3:E4
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       083877D7F5A14A31102E7948E903A5008B22CA61
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
Signing time:             Thu 24 Sep 2026 07:57:34 +0000
ROA not before:           Thu 24 Sep 2026 07:52:34 +0000
ROA not after:            Thu 23 Sep 2027 07:57:34 +0000
asID:                     53107
IP address blocks:        178.92.192.0/24 maxlen: 24
                          178.92.204.0/24 maxlen: 24
                          178.95.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:38:77:d7:f5:a1:4a:31:10:2e:79:48:e9:03:a5:00:8b:22:ca:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep 24 07:52:34 2026 GMT
            Not After : Sep 23 07:57:34 2027 GMT
        Subject: CN=B08F9C2DF84748352D7C5123A7EA9C9E2257D3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:9d:6b:94:85:b5:16:b8:22:8d:d9:15:c6:
                    2f:87:6a:19:66:b0:40:d8:36:76:1c:d3:94:98:a6:
                    84:fb:37:b3:2a:3c:2a:9b:2f:b7:6b:ee:3b:7b:6c:
                    f6:a6:cb:f7:30:c8:27:7b:f5:b3:4a:a6:50:78:72:
                    ef:cb:50:75:37:54:a2:23:95:76:16:d2:8c:c4:34:
                    74:84:4e:f4:9a:11:95:62:c4:e2:92:4e:85:45:d9:
                    5f:bb:24:aa:d3:ef:32:82:fa:bf:2d:80:9b:99:3a:
                    4b:12:da:db:0e:89:66:28:d0:a0:67:f3:70:e3:14:
                    6e:16:b6:f0:ea:d5:57:7b:5e:24:42:14:7b:3d:ac:
                    6f:56:e3:89:f1:d7:b1:73:f8:c2:6f:31:54:29:c5:
                    3f:ea:ac:d3:b9:ae:09:54:9c:4c:6d:aa:c5:85:33:
                    ae:c9:a6:08:a3:3e:6a:15:c3:45:ba:77:b7:f8:59:
                    72:b2:44:3c:c5:4c:24:2a:df:6f:a0:42:13:5e:6e:
                    51:0f:45:0b:5c:df:c9:f1:98:27:8a:6d:f9:00:6e:
                    fe:b7:9f:db:22:79:73:66:b0:37:cd:6d:14:31:8e:
                    30:4f:65:d0:c8:fa:23:d0:6f:b2:fe:36:d9:1e:1b:
                    49:c7:a4:87:4d:33:e6:7e:23:88:e5:ec:0f:70:31:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:9C:2D:F8:47:48:35:2D:7C:51:23:A7:EA:9C:9E:22:57:D3:E4
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.92.192.0/24
                  178.92.204.0/24
                  178.95.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:0f:ec:49:2e:77:06:a1:11:8e:81:52:64:bd:03:b8:5e:26:
         ca:69:90:9d:e7:ed:b0:97:00:17:0e:07:16:b8:87:81:cc:22:
         fa:91:c6:dc:c0:65:17:e3:94:2a:bf:d9:3a:4b:06:82:58:b4:
         fe:73:da:e3:c2:f3:9a:38:70:f1:83:21:3c:e6:b4:68:b2:82:
         e9:ea:ed:48:20:86:f4:0c:45:3f:2d:fc:ce:11:ee:a7:5e:f3:
         1f:3f:03:c3:52:0b:2c:78:c6:90:53:f9:39:ff:63:1b:ba:03:
         80:bc:5b:94:8b:96:93:91:f7:ff:be:3c:aa:db:ed:64:21:af:
         3e:df:20:c6:81:ee:5f:19:51:23:c4:fd:d1:fd:45:e5:b1:89:
         a7:d9:e0:4e:7d:bc:14:a2:3e:76:96:81:b7:80:cb:a2:62:86:
         49:1e:c6:e1:c0:c4:f6:b3:77:82:5f:3c:36:6d:73:24:30:17:
         a9:7a:46:58:12:1e:26:a4:c3:aa:d8:3a:e8:ce:98:46:79:68:
         0a:62:a5:af:ec:e2:54:db:ae:65:d2:47:55:f2:93:b2:e5:cd:
         37:68:4e:b9:35:21:bd:4e:b7:3a:27:d0:74:60:43:b7:06:09:
         aa:1f:e6:97:97:11:28:a8:fe:1e:0f:e1:6a:ee:c6:d1:7a:59:
         d2:62:2a:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 08:20:22 2026 by rpki-client