Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7459.roa
File:                     AS7459.roa (raw, json)
Hash identifier:          5Ga/F2QoInvxzWA+kYuOfsP+3rkcUATqRvuGbdg57ao=
Subject key identifier:   56:9A:0B:03:D9:7A:9C:43:7B:1E:29:52:44:40:54:88:E4:6E:FE:08
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6D1741372E0684D0908603CE2C7999D9B75E9E7E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7459.roa
Signing time:             Fri 18 Sep 2026 11:38:53 +0000
ROA not before:           Fri 18 Sep 2026 11:33:53 +0000
ROA not after:            Fri 17 Sep 2027 11:38:53 +0000
asID:                     7459
IP address blocks:        92.112.54.0/24 maxlen: 24
                          178.92.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:17:41:37:2e:06:84:d0:90:86:03:ce:2c:79:99:d9:b7:5e:9e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep 18 11:33:53 2026 GMT
            Not After : Sep 17 11:38:53 2027 GMT
        Subject: CN=569A0B03D97A9C437B1E295244405488E46EFE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:b8:bf:0b:44:e5:5b:5b:b0:2e:f4:bc:e3:
                    ad:dc:84:01:35:a9:8c:6c:06:ba:20:21:3b:9d:30:
                    63:6a:11:97:06:b8:34:bf:ab:3c:85:13:8f:51:6a:
                    72:67:86:88:bb:3b:34:1c:56:bb:ae:23:bb:60:fe:
                    b2:d0:6e:e6:15:56:58:25:3d:9f:d8:c0:b7:ce:d8:
                    ff:51:d9:c7:3a:fc:19:fe:81:a5:4b:1e:0b:21:4e:
                    e1:36:9d:37:74:ee:0e:6e:c0:df:a9:a2:e3:da:09:
                    23:dc:30:ae:31:49:5d:6b:7e:2f:19:b2:1a:3b:1f:
                    e2:60:13:d9:ed:f9:8e:a8:25:7c:12:8f:a0:2d:06:
                    d7:fe:ed:3f:84:c7:96:3b:52:e3:01:49:39:28:d6:
                    b0:a5:2e:e1:3f:b0:84:97:18:2c:5f:2d:f3:c9:73:
                    5d:d2:10:fe:14:63:3c:b3:a7:8b:94:d1:b4:be:8d:
                    b2:65:a2:15:2d:9d:d4:dd:33:8a:71:87:aa:06:93:
                    b5:b9:e5:bf:c5:09:c5:a4:68:d6:16:17:68:37:b1:
                    f9:8e:36:c4:ee:6b:cb:98:88:2c:6c:a1:f8:61:3f:
                    30:6f:09:e0:a7:83:74:84:09:52:b2:d8:bf:43:6b:
                    5d:12:d0:57:b5:df:2a:cd:ec:10:84:07:50:7f:ee:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9A:0B:03:D9:7A:9C:43:7B:1E:29:52:44:40:54:88:E4:6E:FE:08
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.54.0/24
                  178.92.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:6a:30:a7:ed:22:06:e4:8e:24:fc:78:81:7f:fe:a4:e3:
         87:97:45:2e:89:bf:e3:40:6c:85:fe:c3:17:bf:c5:f5:65:53:
         fe:fa:a0:31:4d:f7:a9:9b:88:cd:7f:71:c3:ac:34:9e:01:a9:
         39:c1:ae:ec:f3:85:1c:32:7e:bd:88:01:ae:af:5f:b5:94:4d:
         49:b5:66:30:95:21:ef:7a:4a:87:84:2a:0f:68:57:99:0c:eb:
         94:42:52:d5:15:83:1e:85:f5:8b:ed:1f:aa:5a:08:97:44:1d:
         98:e9:82:0f:85:58:ff:cf:e2:3c:cd:22:a2:53:0e:c5:a8:12:
         75:79:f4:a2:01:6d:96:2a:00:2f:09:b5:11:a4:89:1a:48:b0:
         39:01:8d:e8:5b:ab:ee:05:7f:1a:9e:c0:fd:a6:05:35:ef:ba:
         e8:bf:50:ac:fb:30:30:8e:f4:21:05:9c:0f:d0:52:0c:68:1a:
         f4:98:cf:d1:52:2b:a0:c0:b7:2a:4b:a5:4b:47:2c:bc:3c:43:
         9b:a8:62:f6:a0:16:26:3f:04:a8:5a:b8:72:73:d0:4c:04:ba:
         85:70:d9:9d:f6:e8:ac:07:04:1d:93:40:70:b9:25:62:a8:d0:
         37:f8:e0:cf:d1:be:2b:5e:ee:62:14:fc:c1:03:16:4e:0f:f9:
         32:c2:b6:45
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUbRdBNy4GhNCQhgPOLHmZ2bdenn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MTgxMTMzNTNaFw0yNzA5MTcxMTM4NTNaMDMxMTAvBgNV
BAMTKDU2OUEwQjAzRDk3QTlDNDM3QjFFMjk1MjQ0NDA1NDg4RTQ2RUZFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRLi/C0TlW1uwLvS8463chAE1
qYxsBrogITudMGNqEZcGuDS/qzyFE49RanJnhoi7OzQcVruuI7tg/rLQbuYVVlgl
PZ/YwLfO2P9R2cc6/Bn+gaVLHgshTuE2nTd07g5uwN+pouPaCSPcMK4xSV1rfi8Z
sho7H+JgE9nt+Y6oJXwSj6AtBtf+7T+Ex5Y7UuMBSTko1rClLuE/sISXGCxfLfPJ
c13SEP4UYzyzp4uU0bS+jbJlohUtndTdM4pxh6oGk7W55b/FCcWkaNYWF2g3sfmO
NsTua8uYiCxsofhhPzBvCeCng3SECVKy2L9Da10S0Fe13yrN7BCEB1B/7nq/AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUVpoLA9l6nEN7HilSREBUiORu/ggwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNzQ1OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFxwNgME
ALJckzANBgkqhkiG9w0BAQsFAAOCAQEAi9xqMKftIgbkjiT8eIF//qTjh5dFLom/
40Bshf7DF7/F9WVT/vqgMU33qZuIzX9xw6w0ngGpOcGu7POFHDJ+vYgBrq9ftZRN
SbVmMJUh73pKh4QqD2hXmQzrlEJS1RWDHoX1i+0fqloIl0QdmOmCD4VY/8/iPM0i
olMOxagSdXn0ogFtlioALwm1EaSJGkiwOQGN6Fur7gV/Gp7A/aYFNe+66L9QrPsw
MI70IQWcD9BSDGga9JjP0VIroMC3KkulS0csvDxDm6hi9qAWJj8EqFq4cnPQTAS6
hXDZnfborAcEHZNAcLklYqjQN/jgz9G+K17uYhT8wQMWTg/5MsK2RQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:18 2026 by rpki-client