Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135392.roa
File:                     AS135392.roa (raw, json)
Hash identifier:          L0XsEITPrtOPpuRuiFHkM2q9pgd3bMtuqGEsTvvDEYo=
Subject key identifier:   9D:39:FC:EE:28:9D:79:E7:C5:A8:65:0D:E9:C6:3B:A2:C9:F5:34:38
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       632922544C663EEF748A0C3BA0644B5A47071407
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135392.roa
Signing time:             Wed 14 Oct 2026 08:14:22 +0000
ROA not before:           Wed 14 Oct 2026 08:09:22 +0000
ROA not after:            Wed 13 Oct 2027 08:14:22 +0000
asID:                     135392
IP address blocks:        109.66.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:29:22:54:4c:66:3e:ef:74:8a:0c:3b:a0:64:4b:5a:47:07:14:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 14 08:09:22 2026 GMT
            Not After : Oct 13 08:14:22 2027 GMT
        Subject: CN=9D39FCEE289D79E7C5A8650DE9C63BA2C9F53438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:d4:35:3e:e1:29:59:ef:74:3d:f4:1b:92:
                    9f:b1:f4:26:7e:4e:94:af:d1:48:e3:48:ae:32:4e:
                    43:69:cb:73:c8:09:15:ee:f2:aa:de:06:4a:17:ef:
                    b1:04:a3:31:49:5b:05:06:d4:0b:87:36:79:82:85:
                    a1:43:ea:c6:27:93:2a:9b:c1:68:f1:1f:9f:48:e7:
                    4a:08:1d:7a:54:bd:b3:c3:22:9e:76:9a:a9:2d:c3:
                    ce:f9:3e:75:79:d0:e6:24:33:13:47:40:d2:75:4f:
                    e6:54:d0:ea:ac:19:a2:04:52:14:37:63:76:1e:d8:
                    53:06:1a:30:03:4f:24:a0:56:87:13:f6:51:79:ec:
                    79:3a:55:f7:13:ba:27:4a:31:c1:3a:d2:df:88:94:
                    7d:d3:e1:4c:12:e3:39:26:b0:dd:d1:4e:78:85:5d:
                    3e:4e:4c:24:6d:3a:42:63:c9:f3:54:b7:3c:23:55:
                    07:8b:33:1d:ef:df:97:82:c1:9c:10:dc:e0:62:6a:
                    22:07:47:b0:f3:be:f3:15:aa:65:df:18:dd:52:e0:
                    31:13:c4:09:63:6c:93:92:64:38:4f:26:d2:8c:57:
                    23:df:b9:8a:f8:f3:38:64:69:62:e3:87:0a:b0:f7:
                    76:3e:fd:12:50:ec:17:7e:2e:53:ca:c8:6c:f4:28:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:39:FC:EE:28:9D:79:E7:C5:A8:65:0D:E9:C6:3B:A2:C9:F5:34:38
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.66.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:37:00:48:95:41:c0:46:8e:2b:04:08:85:00:a6:83:c5:14:
         77:4a:e1:76:e5:f0:83:64:f6:af:98:1c:30:92:eb:53:8b:89:
         e9:7c:e5:6a:64:41:51:51:57:a6:bd:29:3d:4f:1e:fe:3a:62:
         cc:c6:56:23:af:fe:d4:44:06:72:52:8a:7e:df:cc:4c:b3:91:
         fc:b7:c0:a8:07:e4:af:8b:26:92:37:9e:00:24:ab:4d:b4:68:
         bf:fd:c0:41:7f:7a:21:6b:9a:13:7c:3c:7e:18:b2:34:c5:bb:
         5d:00:9b:bf:a2:e8:17:53:59:98:22:3a:24:39:bd:5d:5f:2c:
         61:35:75:58:dc:44:7e:8c:0c:fc:37:27:6e:fc:f8:ae:b6:89:
         7b:48:dd:1c:b0:4b:29:43:17:3b:f8:9b:f1:5f:f5:0b:d8:f1:
         f4:d1:86:c0:6e:ab:71:56:3d:b9:61:0e:31:e6:5c:30:be:ac:
         d6:20:32:a5:76:a6:b9:cf:2c:52:4b:b8:75:a1:ba:bf:64:28:
         c5:23:23:e3:58:c5:0c:d0:bb:b2:06:b3:7a:0f:26:15:07:2b:
         84:cf:4a:b6:d1:c9:ed:91:49:3c:5e:ca:75:82:ce:42:18:43:
         8e:26:94:80:f2:19:74:4f:19:f4:4f:65:f1:47:df:31:7a:98:
         a5:ff:9d:13
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUYykiVExmPu90igw7oGRLWkcHFAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMTQwODA5MjJaFw0yNzEwMTMwODE0MjJaMDMxMTAvBgNV
BAMTKDlEMzlGQ0VFMjg5RDc5RTdDNUE4NjUwREU5QzYzQkEyQzlGNTM0MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlNQ1PuEpWe90PfQbkp+x9CZ+
TpSv0UjjSK4yTkNpy3PICRXu8qreBkoX77EEozFJWwUG1AuHNnmChaFD6sYnkyqb
wWjxH59I50oIHXpUvbPDIp52mqktw875PnV50OYkMxNHQNJ1T+ZU0OqsGaIEUhQ3
Y3Ye2FMGGjADTySgVocT9lF57Hk6VfcTuidKMcE60t+IlH3T4UwS4zkmsN3RTniF
XT5OTCRtOkJjyfNUtzwjVQeLMx3v35eCwZwQ3OBiaiIHR7DzvvMVqmXfGN1S4DET
xAljbJOSZDhPJtKMVyPfuYr48zhkaWLjhwqw93Y+/RJQ7Bd+LlPKyGz0KPlBAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUnTn87iideefFqGUN6cY7osn1NDgwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzUzOTIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABtQrIwDQYJKoZIhvcNAQELBQADggEBANs3AEiVQcBGjisECIUApoPF
FHdK4Xbl8INk9q+YHDCS61OLiel85WpkQVFRV6a9KT1PHv46YszGViOv/tREBnJS
in7fzEyzkfy3wKgH5K+LJpI3ngAkq020aL/9wEF/eiFrmhN8PH4YsjTFu10Am7+i
6BdTWZgiOiQ5vV1fLGE1dVjcRH6MDPw3J278+K62iXtI3RywSylDFzv4m/Ff9QvY
8fTRhsBuq3FWPblhDjHmXDC+rNYgMqV2prnPLFJLuHWhur9kKMUjI+NYxQzQu7IG
s3oPJhUHK4TPSrbRye2RSTxeynWCzkIYQ44mlIDyGXRPGfRPZfFH3zF6mKX/nRM=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:25 2026 by rpki-client