Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218127.roa
File:                     AS218127.roa (raw, json)
Hash identifier:          JFaUlMZ881jxvV4FdyKAZ65/9MW/+2viH4IGmvtd06g=
Subject key identifier:   B1:51:EE:54:38:11:DC:16:B7:F1:78:BC:F5:2E:4A:54:47:47:1B:58
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       64284C8F4B716819734ECF8E4CFF1D2C9C908DE9
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218127.roa
Signing time:             Thu 12 Nov 2026 16:54:56 +0000
ROA not before:           Thu 12 Nov 2026 16:49:56 +0000
ROA not after:            Thu 11 Nov 2027 16:54:56 +0000
asID:                     218127
IP address blocks:        79.176.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:28:4c:8f:4b:71:68:19:73:4e:cf:8e:4c:ff:1d:2c:9c:90:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov 12 16:49:56 2026 GMT
            Not After : Nov 11 16:54:56 2027 GMT
        Subject: CN=B151EE543811DC16B7F178BCF52E4A5447471B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:71:97:99:33:42:4a:f6:b3:85:da:4a:36:
                    ba:74:8d:56:c8:55:8e:27:a4:39:57:f5:4b:b9:97:
                    f0:d5:49:1c:f4:72:aa:8b:bf:0c:cc:70:31:2a:6c:
                    96:7b:b8:92:34:26:a6:c9:13:8a:2e:e8:f3:87:91:
                    f4:80:a9:d5:26:a4:49:e3:57:ef:0d:dc:0a:df:95:
                    e3:d4:75:2c:30:b0:2e:36:77:d8:15:84:99:ca:47:
                    bf:d7:1f:9c:da:48:bc:9f:e9:fa:04:63:2a:ab:45:
                    5e:91:5d:3a:fc:60:1d:97:e3:a7:b6:8d:ff:46:7d:
                    f2:62:10:46:f7:1d:af:35:1f:68:68:fd:9e:1d:da:
                    2f:32:99:d3:a6:55:5d:8d:05:ef:51:27:48:31:04:
                    15:a9:61:2a:75:b2:7a:6b:21:ad:16:b6:9d:98:4a:
                    bf:a7:0f:9f:3e:91:93:ac:c9:af:c0:c2:51:b1:d5:
                    75:09:6e:a1:3a:04:40:5e:e1:9a:13:74:44:3f:1b:
                    d8:a1:32:74:1b:a2:56:73:44:25:24:ba:d2:e3:55:
                    05:f2:90:3e:e6:7b:39:a1:b5:f5:75:bd:e4:db:8f:
                    15:8b:a2:ae:04:2b:0f:b8:b5:9e:c0:38:cb:79:68:
                    d2:a0:ad:39:e8:e1:f5:ba:bd:34:ba:61:37:5d:91:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:51:EE:54:38:11:DC:16:B7:F1:78:BC:F5:2E:4A:54:47:47:1B:58
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:6e:fc:89:99:e7:66:86:53:34:c9:49:22:5d:31:09:7a:
         3e:c2:4c:06:42:25:5c:f3:de:c3:9e:a9:3b:67:79:b2:e0:0b:
         2e:08:07:f0:1f:fe:07:d7:d0:1d:20:aa:65:a7:36:28:61:c1:
         a6:79:23:d5:63:a2:0c:46:23:9c:cc:0a:d6:58:8c:2f:0f:c2:
         0e:e0:be:ee:c1:de:3c:79:1b:29:b5:07:52:85:79:3a:ff:fd:
         8f:0c:0d:c5:1f:9a:b4:38:7a:aa:4d:e2:5b:85:99:59:13:93:
         a3:c3:59:f5:06:8b:08:c8:5c:a3:6e:26:ff:a0:4c:22:b7:ed:
         73:47:06:fa:54:96:0f:7e:b1:20:66:00:7b:af:0e:6e:8c:52:
         25:ff:15:c2:56:a5:dc:de:f6:5d:35:9a:37:9f:71:bd:46:4a:
         58:0c:b4:15:7a:3e:66:0c:55:81:0c:9a:f2:01:b5:58:63:ee:
         d6:69:93:ad:bc:05:91:f4:ba:74:b4:81:76:e6:f8:0f:c8:1b:
         c9:1e:4c:38:0e:26:7b:b5:fc:4f:aa:c9:07:7e:ee:ec:e7:f2:
         06:a3:91:7d:f7:c1:ab:22:b9:c3:ad:3e:4f:22:48:e5:f7:d7:
         9a:9d:0c:f5:3d:98:88:c4:23:9a:11:2b:fc:0d:fd:2f:cb:c6:
         e6:7f:fb:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:13 2026 by rpki-client