Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa
File:                     AS214483.roa (raw, json)
Hash identifier:          Kr5TROe4LlpnJssKWrEiqVaD8tOk6fDMfOiaAZISCDY=
Subject key identifier:   07:34:50:52:8A:57:84:E0:2E:0C:0B:8F:74:21:5A:C9:33:DE:7E:1A
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       3D66EC7F63FEDA61743212CE30A8E1F9F0484E8D
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa
Signing time:             Wed 11 Nov 2026 00:01:37 +0000
ROA not before:           Tue 10 Nov 2026 23:56:37 +0000
ROA not after:            Wed 10 Nov 2027 00:01:37 +0000
asID:                     214483
IP address blocks:        177.177.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:66:ec:7f:63:fe:da:61:74:32:12:ce:30:a8:e1:f9:f0:48:4e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Nov 10 23:56:37 2026 GMT
            Not After : Nov 10 00:01:37 2027 GMT
        Subject: CN=073450528A5784E02E0C0B8F74215AC933DE7E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:12:36:92:e8:c8:7b:33:4b:83:2b:3d:41:63:
                    e7:af:6a:9e:d3:1f:55:26:b0:22:ce:7b:55:66:d8:
                    75:a6:b9:cf:62:b5:62:16:af:2b:66:bb:7b:6d:bb:
                    2b:ee:13:7f:b1:7b:ec:30:2f:69:9c:f8:a9:35:8a:
                    c7:3b:a7:8c:d1:36:28:b1:d1:0a:32:83:a2:34:20:
                    09:b2:9c:9c:06:26:d1:f8:03:d5:6c:de:34:a6:9a:
                    f0:22:38:ff:ab:cb:64:d9:e8:24:50:af:ba:dd:c5:
                    08:23:94:ac:be:b5:2c:e4:bd:b9:a5:a7:7c:d0:e8:
                    6f:16:a1:a1:04:c7:5a:83:f2:7e:6b:ec:a9:fd:ba:
                    2f:ed:51:1b:3d:de:97:64:0a:2c:03:95:b3:2a:fd:
                    a8:c7:26:94:6e:d5:97:03:b7:80:f0:24:ad:01:0a:
                    7d:6e:eb:9f:c6:5b:01:6d:9f:5d:41:e4:17:01:f6:
                    02:46:64:1a:bb:61:a2:eb:65:78:4d:63:be:d1:75:
                    8c:56:c7:50:5a:87:79:46:13:af:3c:05:99:36:69:
                    07:4f:24:33:ec:87:e2:d0:2c:c6:f9:0d:b6:bb:42:
                    96:bf:b4:72:bc:02:f3:ef:b2:b7:29:d1:50:cf:b4:
                    0b:aa:1a:d9:af:7c:44:bd:7f:74:4d:b9:6d:ec:21:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:50:52:8A:57:84:E0:2E:0C:0B:8F:74:21:5A:C9:33:DE:7E:1A
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.177.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:85:aa:34:e3:2a:bc:1c:70:ca:12:69:10:17:bc:56:05:
         02:41:f1:f7:b3:51:b7:e4:ba:b2:fc:cc:39:93:96:5c:2f:47:
         1e:4f:4e:54:65:fc:21:ac:ef:4c:a8:b4:e6:7a:89:32:6e:72:
         02:fb:4a:1b:9b:fd:a5:d1:f5:36:7e:24:d3:e8:7a:38:0e:b1:
         05:09:e9:ac:8a:97:9f:69:2b:b8:1c:35:7a:8c:f3:2f:fb:6c:
         49:4e:89:a2:13:89:5d:b5:82:33:b5:a8:69:1f:97:60:a0:d0:
         85:17:b6:83:b9:94:99:12:4b:65:f3:58:d4:5e:b0:84:92:43:
         8e:c6:8f:88:99:10:52:ec:d0:bf:32:bd:71:86:8a:53:92:cb:
         06:64:5e:dc:f5:8d:40:95:df:a8:32:95:f2:a0:a0:6f:30:85:
         a0:e1:59:d0:83:04:3c:55:65:73:a9:09:83:31:a1:a1:a4:fc:
         e4:77:89:6b:29:3a:f6:6f:7a:c1:d5:d4:68:e5:99:f3:c0:db:
         76:d5:49:00:d9:d1:d3:33:3d:02:af:7f:54:3e:bc:c4:4b:e5:
         89:f5:47:66:00:dc:9d:47:c9:3e:66:e4:75:c9:15:79:d4:30:
         56:78:77:d7:58:f1:27:8b:22:62:14:e0:83:ea:7b:14:2e:78:
         a0:a2:64:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:50:09 2026 by rpki-client