Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS274365.roa
File:                     AS274365.roa (raw, json)
Hash identifier:          1Lv0qEeDf8LIzlwK2/35+DpTii8eZpl+ZiQLY+D43qg=
Subject key identifier:   FA:C5:FA:53:CC:95:85:35:20:D4:8C:84:50:47:B4:EC:AD:16:7E:00
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       0E6986E3CD97E1726326620FBA1F3A125900F1B4
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS274365.roa
Signing time:             Wed 04 Nov 2026 12:28:11 +0000
ROA not before:           Wed 04 Nov 2026 12:23:11 +0000
ROA not after:            Wed 03 Nov 2027 12:28:11 +0000
asID:                     274365
IP address blocks:        79.182.190.0/24 maxlen: 24
                          109.66.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:69:86:e3:cd:97:e1:72:63:26:62:0f:ba:1f:3a:12:59:00:f1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov  4 12:23:11 2026 GMT
            Not After : Nov  3 12:28:11 2027 GMT
        Subject: CN=FAC5FA53CC95853520D48C845047B4ECAD167E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:a8:82:d7:3c:43:09:73:b3:77:e8:3f:21:
                    dc:d3:ec:c2:0f:79:00:31:55:68:84:d5:fe:43:cf:
                    a0:6e:81:d7:ee:d2:4b:b8:78:7c:fb:c2:a8:86:c1:
                    c0:f9:6c:84:73:a9:50:d2:1e:8d:63:d8:72:01:d0:
                    39:bf:f6:6c:2a:8f:a3:19:f0:50:bb:0a:72:89:be:
                    19:f1:98:8c:c7:77:fa:89:ed:ea:18:cd:d7:bf:06:
                    ce:da:25:cd:e2:c3:94:d7:0b:b8:7a:67:7b:3c:d7:
                    f7:24:c4:d9:2d:38:a3:88:cf:86:dc:42:71:27:f5:
                    ae:0d:ab:61:45:8e:8c:c1:75:bc:f8:30:d9:77:b6:
                    92:bf:4f:29:4a:76:9a:5d:9d:b5:44:9f:4a:9f:13:
                    17:15:c7:49:fc:7c:6a:87:80:92:85:94:b1:93:4d:
                    5f:e2:1b:28:28:61:bd:ef:13:be:f9:e7:db:a9:60:
                    92:ca:7e:f6:ac:bb:c8:b5:fa:1c:2b:c5:2e:76:4b:
                    1e:7d:64:8c:58:ef:e8:b5:e6:29:29:14:ae:d8:88:
                    7e:38:bb:db:c9:65:1d:6a:3c:5b:af:65:dc:a4:95:
                    bf:a5:3e:54:77:c7:00:47:09:91:8c:15:0a:87:93:
                    bd:b1:12:13:a0:06:eb:89:2a:eb:4a:9a:07:7f:31:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C5:FA:53:CC:95:85:35:20:D4:8C:84:50:47:B4:EC:AD:16:7E:00
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS274365.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.190.0/24
                  109.66.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:45:b2:a5:e3:44:67:d7:a6:dc:31:43:52:6d:06:11:80:
         0f:36:b2:1d:c8:ed:fd:a6:bf:eb:44:31:67:ee:8b:5c:c8:80:
         8f:4f:7f:e6:20:e9:ea:0e:c8:6f:78:c8:cc:05:82:23:66:54:
         69:ea:ab:dd:d8:51:8a:9d:ba:33:95:6c:9f:04:c8:37:e2:ae:
         34:ec:d0:02:f3:99:13:f9:34:e5:ed:38:09:72:cb:f7:ae:ad:
         42:73:b9:62:39:c8:f8:f7:0d:b7:65:6e:95:16:d8:67:b5:7f:
         58:c2:c6:ef:ad:91:52:9b:99:51:b7:10:40:13:07:48:d1:01:
         99:3f:45:56:54:28:fb:03:55:af:9f:64:24:36:a5:fb:00:6a:
         f0:01:8e:d8:08:da:3a:78:72:20:b6:97:8c:2b:2e:8a:3b:8e:
         69:67:ae:28:3c:6f:7d:c1:3a:4c:21:41:15:79:c8:dd:18:33:
         db:4f:16:55:b2:c7:da:1e:c1:c7:0e:34:28:b9:32:5a:7e:0a:
         6b:5b:85:a3:2a:df:11:3f:ee:94:67:5e:fe:24:ec:ea:90:ee:
         88:09:6a:88:da:2c:46:49:58:95:2f:4d:55:11:ab:00:aa:c7:
         11:d0:4a:f7:85:21:a7:08:92:0d:ec:7b:61:48:04:a7:dc:53:
         a6:b0:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:28 2026 by rpki-client