Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218283.roa
File:                     AS218283.roa (raw, json)
Hash identifier:          /u5UFljytfcmv7VOTnyPkOIQQgt0/6OO5nlk/+G/N7E=
Subject key identifier:   FD:CD:82:E0:8C:84:FA:38:52:36:13:1A:62:0B:6A:68:5F:CF:CF:89
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       1E11A6ACA6B87A74AD96F35D5578EF497DD7F334
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218283.roa
Signing time:             Thu 29 Oct 2026 07:47:54 +0000
ROA not before:           Thu 29 Oct 2026 07:42:54 +0000
ROA not after:            Thu 28 Oct 2027 07:47:54 +0000
asID:                     218283
IP address blocks:        109.65.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:11:a6:ac:a6:b8:7a:74:ad:96:f3:5d:55:78:ef:49:7d:d7:f3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 29 07:42:54 2026 GMT
            Not After : Oct 28 07:47:54 2027 GMT
        Subject: CN=FDCD82E08C84FA385236131A620B6A685FCFCF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:75:0f:2f:ba:0e:fe:d7:46:44:3d:7d:13:
                    72:02:06:8e:ad:94:64:68:25:23:bd:07:e1:72:00:
                    2e:26:cf:03:bb:e4:c7:10:3a:9d:4a:cd:ee:80:16:
                    93:3a:4c:10:70:52:8c:30:a7:38:51:dc:98:16:f9:
                    6c:43:c0:35:f3:3d:30:cf:77:4e:00:75:39:8e:11:
                    33:1a:ae:6c:e4:d7:e9:ed:9d:22:0c:ae:e6:e6:59:
                    31:6f:fb:56:8e:5f:ed:e0:61:00:bf:4f:12:3b:2b:
                    14:43:36:8c:d8:87:24:5b:b5:bd:d2:af:d6:bd:3c:
                    6c:59:be:c4:79:6f:ea:f7:4b:d6:8f:23:84:07:a1:
                    91:04:a4:0b:07:60:4f:2b:e0:5e:c2:cf:44:e4:01:
                    6b:0e:20:61:ec:ee:98:94:d9:43:4e:86:8e:eb:38:
                    e2:05:38:be:43:8d:a0:c0:28:f0:0f:e9:1f:8f:b5:
                    9a:e8:20:b3:bd:0c:ea:82:b8:18:52:87:39:b4:f0:
                    39:9e:01:89:95:c8:1f:91:9e:f7:c2:60:c7:5f:91:
                    19:86:df:e5:5a:56:01:a0:07:b3:19:ad:b1:b0:fd:
                    eb:5d:90:53:31:e9:3a:c6:53:77:e6:7a:ed:fa:82:
                    c2:cf:d6:ff:8d:e0:25:d1:a0:02:01:9b:30:8b:31:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CD:82:E0:8C:84:FA:38:52:36:13:1A:62:0B:6A:68:5F:CF:CF:89
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218283.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.65.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:14:bf:19:48:27:5a:27:a3:63:91:46:d6:8c:a0:36:c0:b6:
         51:8a:d9:fa:3f:73:e0:a3:04:dd:4f:88:7c:ef:c9:5d:38:0b:
         7a:7a:89:9a:c0:c0:d4:e6:d8:2c:49:3e:d4:17:a8:dc:23:a0:
         2a:5e:ef:75:c1:ff:e8:87:a4:13:86:77:8e:a3:9a:49:55:07:
         83:b6:3d:5e:1e:66:b1:25:29:0c:27:86:b3:75:f3:7a:72:b6:
         6f:40:21:e9:1d:5b:96:b2:93:50:39:48:3b:71:f2:97:d8:f0:
         c9:50:cd:15:7e:0e:35:b3:3d:9d:0e:c5:a4:22:17:7a:98:14:
         f6:03:59:f3:7f:0d:5d:3b:23:81:b8:d4:b7:69:02:a1:df:9d:
         41:65:20:8d:3b:52:c1:c8:5a:5a:b0:9c:6c:d8:69:4a:26:15:
         6b:26:9d:33:ff:78:1e:f6:a4:95:a0:b6:4d:da:8d:70:10:1a:
         54:14:af:a8:ef:b1:4c:80:e1:09:41:72:74:1e:41:f8:8d:46:
         61:c6:ef:ca:b0:3a:6b:c1:88:0d:aa:1e:34:8d:46:66:1b:dc:
         e3:f8:e0:07:33:96:46:da:df:3e:f5:85:0e:b3:17:be:6a:f2:
         9b:13:6b:5b:e0:da:84:e0:d6:14:3d:92:7a:25:08:c0:88:6f:
         39:f9:e8:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:47:16 2026 by rpki-client