Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19318.roa
File:                     AS19318.roa (raw, json)
Hash identifier:          SvIw0HHWU730UZdprSeSjmrphlDweGhkDM71fR2tCtY=
Subject key identifier:   53:49:0B:8A:BB:52:A6:5F:24:2B:95:3A:44:F0:8E:9E:85:D6:EA:9F
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       3EC656484DF701EDCDC9E3E0AF30BC33989BB7DE
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19318.roa
Signing time:             Thu 29 Oct 2026 10:37:04 +0000
ROA not before:           Thu 29 Oct 2026 10:32:04 +0000
ROA not after:            Thu 28 Oct 2027 10:37:04 +0000
asID:                     19318
IP address blocks:        79.182.57.0/24 maxlen: 24
                          109.66.129.0/24 maxlen: 24
                          109.66.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Nov 2026 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:56:48:4d:f7:01:ed:cd:c9:e3:e0:af:30:bc:33:98:9b:b7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 29 10:32:04 2026 GMT
            Not After : Oct 28 10:37:04 2027 GMT
        Subject: CN=53490B8ABB52A65F242B953A44F08E9E85D6EA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:4c:b5:d6:63:80:d8:b7:66:00:8e:24:eb:
                    00:ad:bb:f3:eb:ff:60:1a:75:78:80:43:58:eb:dc:
                    16:df:54:0e:2f:27:ad:0a:34:49:09:d6:9e:4f:a2:
                    04:da:04:06:50:f8:22:2c:17:12:bf:57:83:c3:5b:
                    08:0e:4f:b0:2f:5d:e6:b8:1e:77:f9:e4:72:f1:5e:
                    16:d9:d6:c8:2c:84:39:f4:20:de:a4:50:be:4c:c1:
                    b8:d5:17:74:7b:fd:9e:8e:4c:a4:32:b5:78:7e:f2:
                    8e:e6:4e:cc:a5:a5:d7:a2:4f:1f:82:17:85:7e:f7:
                    00:6c:37:e7:1a:75:84:65:64:29:9e:0f:7a:5d:ae:
                    15:b3:fe:77:3d:64:83:0c:47:4f:01:72:93:b8:35:
                    f0:b7:42:66:ff:4f:26:0a:20:3e:0a:30:86:86:a9:
                    ac:9e:86:d4:bc:58:90:06:8d:d4:cd:a9:b7:9a:e7:
                    0f:64:b0:69:8c:f7:85:40:6d:34:f7:99:34:7b:33:
                    28:6a:ea:6e:8b:d6:47:28:4d:1f:51:ec:a6:db:42:
                    04:60:9c:db:c5:2b:b2:79:c3:81:77:bc:7a:5e:71:
                    7a:eb:73:74:cb:66:4b:c4:e0:51:70:6a:b2:ed:2c:
                    81:92:53:4a:7c:08:88:c2:c3:80:3e:cf:7a:76:25:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:0B:8A:BB:52:A6:5F:24:2B:95:3A:44:F0:8E:9E:85:D6:EA:9F
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.57.0/24
                  109.66.129.0/24
                  109.66.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:31:f0:47:d8:89:50:5e:35:63:d6:3c:26:aa:c7:d4:fd:
         27:ab:02:42:ff:7c:5f:da:0c:fb:89:11:23:78:6d:51:bb:8c:
         3f:31:d4:8d:17:f6:35:ab:cb:f0:b0:74:1e:41:88:76:0c:aa:
         8c:de:dd:bb:3a:0c:fd:39:72:bb:14:5b:97:cb:9a:93:5b:55:
         54:50:6d:e9:ce:d5:c1:57:3b:5d:2f:8d:14:92:2f:64:cb:02:
         c7:81:c8:1d:9c:bc:b2:b8:36:9d:ab:6c:0b:ec:66:ce:eb:5c:
         55:3a:58:4a:88:49:76:3e:89:73:57:61:19:45:18:b2:05:6f:
         ee:1a:59:6f:28:1f:43:68:cd:60:6a:a1:ae:ef:62:af:44:47:
         3a:9a:12:33:80:ad:f0:1e:22:90:d3:8d:8f:8d:f5:fe:6d:88:
         f1:e6:17:06:23:3c:14:5b:ea:f0:5c:81:ca:fe:f4:bb:3e:79:
         35:6a:53:e8:54:f4:7a:34:a5:0d:d5:0e:43:44:18:e3:fd:b3:
         96:af:63:23:d0:f4:8c:12:d4:1b:72:d4:ad:a6:15:cb:bf:5d:
         f3:47:e4:16:ca:92:75:29:d7:f3:6d:49:d5:95:50:ed:da:ce:
         a8:ef:47:b8:cf:f6:72:c4:5b:51:18:f0:04:fb:37:4f:40:73:
         ed:a4:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:06:39 2026 by rpki-client