Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199741.roa
File:                     AS199741.roa (raw, json)
Hash identifier:          1QY8s63pYv4OsBkpadVV1kRZYHT7mCycbROmATGI/4k=
Subject key identifier:   62:59:F0:1F:BD:7E:A8:30:E6:8D:57:4F:EA:15:21:35:29:30:5A:8A
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       4FDDAD4E3F46DEAE50E86F2447AF5676283502CF
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199741.roa
Signing time:             Fri 13 Nov 2026 09:55:12 +0000
ROA not before:           Fri 13 Nov 2026 09:50:12 +0000
ROA not after:            Fri 12 Nov 2027 09:55:12 +0000
asID:                     199741
IP address blocks:        79.182.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dd:ad:4e:3f:46:de:ae:50:e8:6f:24:47:af:56:76:28:35:02:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov 13 09:50:12 2026 GMT
            Not After : Nov 12 09:55:12 2027 GMT
        Subject: CN=6259F01FBD7EA830E68D574FEA15213529305A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:9d:17:24:10:47:cc:d9:6e:f4:67:94:0c:
                    53:96:88:a3:48:f0:36:b4:e4:11:ae:d4:80:fc:1e:
                    83:ed:bd:a1:c9:ea:22:dd:22:a2:01:e2:f2:67:bc:
                    9b:37:cc:6d:5e:a0:26:fb:a7:1f:52:77:19:c9:72:
                    5c:a1:e5:bf:11:08:59:c3:c7:3b:a2:83:45:db:2e:
                    43:59:14:48:ed:6b:7e:f0:b9:12:1f:53:c5:a8:1a:
                    a7:ba:fc:87:61:6c:e5:4e:18:af:a3:c6:ef:d0:a2:
                    43:98:21:8a:20:62:cd:1e:6b:bc:3e:ba:96:7d:22:
                    3b:10:ca:02:2f:ca:69:e9:0b:09:33:6b:6d:0d:3d:
                    38:86:d1:50:7b:96:9c:ce:95:53:72:ff:9e:c3:dc:
                    7e:b6:c6:ce:93:b8:81:25:cb:c5:8a:55:7c:77:b4:
                    39:2b:a1:45:4c:bb:18:50:29:ad:ba:ff:3f:a1:39:
                    c6:94:dd:34:9c:55:4c:8f:f6:ee:33:3f:7b:9b:e5:
                    34:ce:72:f1:99:7d:be:a8:30:04:fe:05:34:06:3d:
                    f4:f2:89:07:11:6b:55:f4:20:9d:54:a8:da:53:dc:
                    e0:54:ae:04:df:c5:fc:e3:fa:78:95:cd:80:27:37:
                    28:b9:62:e2:a0:4d:2d:9d:54:00:d8:66:0e:e8:f3:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:F0:1F:BD:7E:A8:30:E6:8D:57:4F:EA:15:21:35:29:30:5A:8A
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199741.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:96:06:79:fe:47:b0:33:2f:52:18:ad:d5:f9:79:9b:9b:f1:
         6d:4e:c0:02:9e:0f:7a:b0:2f:09:de:61:70:e0:91:c4:23:ce:
         b3:f8:7d:a3:0c:c0:2e:57:62:ea:6a:4e:5f:24:94:c2:93:fa:
         6e:90:e0:01:e8:c9:23:88:af:31:6e:5f:85:a3:97:3d:f6:6d:
         e2:84:d7:45:c2:4a:38:77:8d:96:0e:87:b2:d0:3e:70:66:90:
         5d:88:45:12:fb:a3:7f:8e:04:78:ba:95:e0:c3:c6:95:f7:66:
         8e:85:c0:90:32:2f:7f:f8:8b:04:0a:35:b2:c9:f2:86:d3:fd:
         eb:2a:56:f7:cb:9b:16:f4:a1:36:0d:d3:84:39:ce:b6:aa:17:
         6d:78:91:00:81:83:b9:13:23:4c:30:f2:00:c9:a6:04:9d:14:
         1b:24:93:50:0b:8a:be:78:e9:83:09:88:0d:69:c1:43:92:f9:
         c0:82:c5:31:27:e9:e4:9a:1d:95:03:45:9c:4d:fe:69:0f:b3:
         e3:6c:9e:9d:9f:5a:a7:4e:ef:27:1d:ab:e1:a3:77:cd:b3:1c:
         a3:e3:38:cd:3b:3e:6d:0d:08:b2:b0:e1:50:01:ae:72:fb:c2:
         f6:0c:c9:d3:6f:8c:f2:7c:77:9a:b4:54:57:f9:c7:2a:f2:24:
         3d:3d:91:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:07:00 2026 by rpki-client