Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207083.roa
File:                     AS207083.roa (raw, json)
Hash identifier:          A0Fkd8tFQR6wXf6JZYVkopN95ZClZKMy75m75ULmXPo=
Subject key identifier:   AD:95:97:E1:FA:CC:FD:D6:53:F1:EC:98:46:28:0A:88:07:0E:B6:78
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       2F58BE2DB39E0E83810D0FE4CC760F2A25B4D750
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207083.roa
Signing time:             Tue 27 Oct 2026 08:36:42 +0000
ROA not before:           Tue 27 Oct 2026 08:31:42 +0000
ROA not after:            Tue 26 Oct 2027 08:36:42 +0000
asID:                     207083
IP address blocks:        79.182.162.0/24 maxlen: 24
                          109.66.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:be:2d:b3:9e:0e:83:81:0d:0f:e4:cc:76:0f:2a:25:b4:d7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 27 08:31:42 2026 GMT
            Not After : Oct 26 08:36:42 2027 GMT
        Subject: CN=AD9597E1FACCFDD653F1EC9846280A88070EB678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:ff:82:48:5a:ac:dd:5c:2c:cd:9e:6a:68:
                    ac:95:e8:f8:f8:24:74:9a:d2:ad:90:57:31:72:2f:
                    03:92:92:b3:cc:fe:dd:1e:06:9b:ba:56:24:4e:d5:
                    84:11:8d:f9:69:9b:56:bd:eb:45:b2:ae:6f:e2:fe:
                    77:02:fd:ce:b8:0b:9f:22:0e:2a:2f:65:14:7a:71:
                    66:98:e7:95:44:82:ac:d8:f0:b3:72:c0:6c:1f:76:
                    a6:0c:5d:1d:44:96:50:f0:56:26:a7:54:d1:7f:25:
                    6e:a5:be:53:85:9c:37:76:1e:eb:9d:45:f8:2e:7e:
                    ee:2c:a9:82:3f:41:da:9c:aa:9f:cf:bd:25:6f:6e:
                    3b:6d:55:27:ee:39:d9:93:58:c9:8b:a5:e5:43:c5:
                    69:18:4d:ce:fb:20:a7:62:d4:13:56:1d:f5:3b:7a:
                    a9:2f:97:8f:6d:87:c9:ee:4a:a0:85:17:c1:cf:58:
                    e2:97:a4:ac:a3:ac:06:47:20:a9:2f:3d:15:6d:df:
                    ab:fa:ae:a0:e4:d1:7d:90:74:d3:c3:a9:df:dd:2e:
                    3a:3e:f0:02:2f:f8:bb:75:fb:f3:2b:53:4d:3c:52:
                    15:d5:ce:94:e2:96:f9:71:79:38:6c:ba:03:8c:b1:
                    4f:d8:5b:ca:92:52:22:45:d6:65:4a:f9:80:24:1b:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:97:E1:FA:CC:FD:D6:53:F1:EC:98:46:28:0A:88:07:0E:B6:78
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.162.0/24
                  109.66.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:ef:76:14:76:0d:1c:ef:58:ea:c0:b1:db:02:71:a9:4b:
         95:31:91:f8:67:65:68:1a:d7:95:11:0c:58:f0:d4:07:9d:31:
         5b:62:2a:7e:12:21:0e:76:e5:4b:e0:86:c8:bd:e8:21:e5:23:
         4b:6a:5b:52:ea:e2:66:95:3a:e4:18:0f:3c:67:90:fc:7c:4b:
         d1:e4:a4:b7:2c:55:67:30:e0:1b:02:16:f9:36:1c:9c:5a:42:
         97:da:c9:83:52:1f:ee:11:fa:1d:44:97:1a:5f:07:5c:2c:a4:
         9b:5c:dd:b4:77:c5:c0:14:7c:70:1a:3a:34:54:43:17:15:e1:
         61:80:f3:2c:b6:b1:54:6f:f1:17:8c:ea:85:6f:48:6b:11:39:
         11:10:2b:ce:3d:28:d0:de:fa:0b:30:76:bb:b7:5f:ea:8d:bb:
         f6:f1:45:d7:85:e5:1d:30:b6:e9:e8:47:f9:0d:25:c6:e4:77:
         17:b1:c0:34:dc:c7:74:56:dd:c0:f6:f6:8d:6a:9c:b5:8f:6f:
         c2:09:f9:cd:d9:21:22:42:e0:1e:e5:74:f5:58:13:7b:ec:f8:
         41:28:1e:5c:54:74:15:84:bb:47:b7:98:59:11:bd:ed:03:02:
         f9:93:e5:24:7d:92:c3:f7:b8:2b:09:23:17:76:c4:c7:61:ee:
         8e:43:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:00 2026 by rpki-client