Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208450.roa
File:                     AS208450.roa (raw, json)
Hash identifier:          1h4AM7PszSD13NFoWzVk5uoZaQyf8/uywDpoSzuAle0=
Subject key identifier:   3E:A6:7A:54:37:48:0F:1F:03:6F:43:CC:4C:84:AD:68:41:79:64:6A
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       4CD2F3EB898581BC7469975DD1C2739B8AA2304F
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208450.roa
Signing time:             Wed 11 Nov 2026 13:13:22 +0000
ROA not before:           Wed 11 Nov 2026 13:08:22 +0000
ROA not after:            Wed 10 Nov 2027 13:13:22 +0000
asID:                     208450
IP address blocks:        79.182.21.0/24 maxlen: 24
                          79.182.168.0/23 maxlen: 24
                          79.183.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:f3:eb:89:85:81:bc:74:69:97:5d:d1:c2:73:9b:8a:a2:30:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov 11 13:08:22 2026 GMT
            Not After : Nov 10 13:13:22 2027 GMT
        Subject: CN=3EA67A5437480F1F036F43CC4C84AD684179646A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:84:82:f4:ae:91:72:47:5b:9f:12:8b:ef:
                    eb:ca:59:8f:1a:d1:35:1e:0a:b1:5f:7f:60:da:fc:
                    68:fe:94:b4:fa:b9:89:a2:cc:a0:97:55:09:ab:9b:
                    a2:37:df:87:15:4d:c1:52:39:0b:c6:7f:df:77:4c:
                    47:af:b2:0f:8d:d6:3d:56:55:4e:9b:4e:28:ef:53:
                    89:b1:7b:26:88:bc:58:55:e5:a9:11:4d:db:7c:5f:
                    05:76:a0:6c:c9:10:6a:c9:1d:f1:b7:5a:1a:4e:f2:
                    b0:5c:2d:ce:66:3c:f7:0e:07:59:a7:fd:32:71:7f:
                    c0:95:ee:a2:29:03:df:12:c4:df:2e:ff:37:2f:ca:
                    8a:ef:77:33:15:07:e8:5f:57:09:22:83:ff:42:40:
                    44:a0:9e:6e:2e:1d:08:a3:a3:82:ce:ff:19:7d:2c:
                    07:0a:e7:f8:71:39:9e:9b:38:de:f1:80:18:f0:9a:
                    eb:40:fb:a5:aa:17:e0:8c:2b:c7:63:31:34:cd:34:
                    6c:f4:b7:d0:f0:dc:52:cc:d6:e8:13:ca:bd:a4:5d:
                    17:55:7c:e1:05:40:a3:bc:63:11:34:77:00:61:56:
                    3d:e5:33:53:e6:ec:2a:d9:9b:ff:cb:48:d2:3c:31:
                    10:bd:d1:62:bf:5b:54:a7:c1:79:5e:80:1e:70:f0:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A6:7A:54:37:48:0F:1F:03:6F:43:CC:4C:84:AD:68:41:79:64:6A
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.21.0/24
                  79.182.168.0/23
                  79.183.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:48:42:11:59:12:2c:f1:8a:bc:b6:43:ec:ea:80:3a:6a:ab:
         fd:cc:5c:0e:15:35:45:3a:35:af:77:07:e3:f8:7b:ef:b3:8d:
         89:15:28:c2:3c:17:f2:e9:75:c2:42:bd:58:4b:a0:e9:3f:49:
         96:cf:94:3d:8f:6f:a2:ee:7a:6f:57:05:41:b2:8d:02:ac:0a:
         a4:83:d9:35:b7:78:29:4d:a3:66:49:3d:e2:dd:f2:ba:8a:dd:
         01:3c:ad:8a:a0:e1:97:0e:c3:e5:48:3e:66:03:a6:be:45:c6:
         59:48:b9:76:9f:c0:6b:3d:d9:84:51:11:9f:25:64:9e:10:a0:
         27:24:ef:28:1a:15:2a:ee:2e:54:c9:17:cb:5d:72:9d:40:a1:
         a0:fb:ba:ac:c0:7f:de:a5:44:75:01:30:94:54:17:97:27:6c:
         ba:5e:fe:d9:ab:8b:eb:e2:36:02:f2:e8:01:f2:ca:01:2a:ed:
         54:aa:b5:17:1a:bc:2a:14:33:4d:c9:a7:f8:65:23:c3:65:7f:
         d5:7c:6a:a6:c1:b1:3a:de:9a:73:53:1c:58:11:d0:9b:35:3b:
         a1:97:aa:98:0f:2f:12:21:fe:79:4e:ce:42:9f:c1:ce:13:44:
         18:17:dc:b0:ab:42:cc:28:c4:fd:b3:68:c5:4a:42:bb:ea:ea:
         dd:34:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:22:54 2026 by rpki-client