Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208690.roa
File:                     AS208690.roa (raw, json)
Hash identifier:          ZWtAcNUcSaTOgUM4sthVNUR80UDqCWNlh87diZb+jWQ=
Subject key identifier:   C2:37:FD:13:A4:EE:37:E7:37:07:75:4C:90:FB:87:4A:29:FC:D8:BB
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       559D92778A8485C85567447C92CD9A90C3B99DCE
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208690.roa
Signing time:             Wed 28 Oct 2026 08:15:34 +0000
ROA not before:           Wed 28 Oct 2026 08:10:34 +0000
ROA not after:            Wed 27 Oct 2027 08:15:34 +0000
asID:                     208690
IP address blocks:        79.182.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9d:92:77:8a:84:85:c8:55:67:44:7c:92:cd:9a:90:c3:b9:9d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 28 08:10:34 2026 GMT
            Not After : Oct 27 08:15:34 2027 GMT
        Subject: CN=C237FD13A4EE37E73707754C90FB874A29FCD8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:a1:f8:d4:46:70:42:ba:fe:d5:f1:bf:9c:
                    4d:e9:c1:5b:95:d3:10:7c:bf:a9:2a:31:5f:9f:16:
                    fc:06:61:1d:b3:06:a4:2d:3c:10:6c:21:df:e3:99:
                    3e:86:0a:3f:35:2a:a6:2e:7d:f7:48:a1:d1:d9:80:
                    9f:d7:04:ec:e4:e8:8e:7c:22:89:44:54:d3:c7:9d:
                    ef:ac:e3:9a:4a:fc:8d:17:cb:b9:4d:fe:f2:29:4e:
                    db:fb:c8:f2:62:f2:c9:e0:bb:72:af:9a:10:bd:3d:
                    55:84:e9:0b:1c:b0:a6:37:bf:d9:df:85:d1:6f:7a:
                    aa:ed:a7:a9:f8:dc:47:bf:cb:65:88:22:8b:2e:30:
                    3b:5e:b2:92:ba:c2:5c:26:70:9d:a8:14:67:58:c8:
                    a4:ef:15:0b:0f:fa:cc:10:fb:f3:04:5d:93:97:e1:
                    41:76:2a:a0:e0:6f:61:30:12:9d:fc:86:11:4b:2b:
                    1a:e5:6d:fa:74:d6:28:85:be:f1:fa:d3:a9:d8:c0:
                    0f:59:08:15:cb:81:ee:8f:6c:45:7c:4b:f6:8d:27:
                    29:ac:69:22:90:46:a5:79:74:95:60:12:1d:94:b0:
                    1b:41:3c:7f:37:10:92:40:bf:45:19:99:8e:52:7b:
                    f2:30:a6:b6:dd:dd:33:d8:da:59:22:87:31:d6:ad:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:37:FD:13:A4:EE:37:E7:37:07:75:4C:90:FB:87:4A:29:FC:D8:BB
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:14:c1:98:43:c4:e1:c9:c1:84:e6:0d:e9:04:78:68:e3:
         4f:fd:2f:6b:a5:f4:28:e1:f4:cc:93:03:95:6a:98:9a:85:d7:
         a0:fb:ae:51:9e:c8:fd:fb:54:76:96:76:fe:76:d6:83:92:ff:
         2f:d3:ac:ca:7d:9c:52:ea:9c:9c:8c:a3:83:26:e3:d7:1b:93:
         af:de:da:27:40:3f:9c:13:ac:8b:97:d7:02:88:63:82:a0:92:
         0d:4a:10:00:d1:de:e4:26:9e:12:5f:99:cd:18:ad:18:b9:1d:
         a0:e9:80:d5:4b:ac:a4:b9:1f:53:ce:a2:17:05:eb:44:e8:68:
         25:96:97:d4:c5:49:67:87:1b:32:7f:07:3b:ce:9b:ac:06:3b:
         42:0f:b9:c4:59:6b:7e:0a:74:02:83:e6:95:09:55:47:b2:87:
         60:df:28:af:db:e9:a2:6f:82:1d:ef:65:d9:5a:99:54:cb:fe:
         28:2e:fd:cf:b0:a9:25:80:ea:4e:7e:aa:5e:12:35:a2:fa:7f:
         6b:f6:05:e0:9f:53:b7:eb:83:d8:55:19:25:53:87:69:57:c1:
         1f:da:1c:4f:14:0a:8b:58:92:14:a7:6d:50:94:94:7d:36:5d:
         0b:2e:a4:c2:4d:32:52:d2:82:e2:3d:d1:2a:16:e3:c5:b0:0b:
         d6:d3:0e:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:18:43 2026 by rpki-client