Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS63099.roa
File:                     AS63099.roa (raw, json)
Hash identifier:          dVsNcMqMc+iYu+bxLDOozh3DJIq7fBDhQIUioB5ryuE=
Subject key identifier:   4A:27:68:54:75:51:F6:00:10:9B:D9:0C:B1:39:29:96:AE:D2:70:73
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       3AE17898E9333E252EAF19320B08ABCB7F4137A6
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS63099.roa
Signing time:             Thu 29 Oct 2026 06:04:53 +0000
ROA not before:           Thu 29 Oct 2026 05:59:53 +0000
ROA not after:            Thu 28 Oct 2027 06:04:53 +0000
asID:                     63099
IP address blocks:        79.182.116.0/24 maxlen: 24
                          79.182.164.0/24 maxlen: 24
                          109.66.131.0/24 maxlen: 24
                          109.66.135.0/24 maxlen: 24
                          109.66.136.0/24 maxlen: 24
                          109.66.145.0/24 maxlen: 24
                          109.66.154.0/24 maxlen: 24
                          109.66.161.0/24 maxlen: 24
                          109.66.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:78:98:e9:33:3e:25:2e:af:19:32:0b:08:ab:cb:7f:41:37:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 29 05:59:53 2026 GMT
            Not After : Oct 28 06:04:53 2027 GMT
        Subject: CN=4A2768547551F600109BD90CB1392996AED27073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:ee:2b:be:34:56:c1:a5:3b:29:0d:ca:87:
                    c1:d4:48:ea:8b:66:de:6c:0a:c7:3c:c5:67:9e:27:
                    08:02:2a:cb:34:9f:03:f1:3e:11:82:3e:c9:0c:c0:
                    29:db:27:c2:72:3c:30:c8:aa:42:68:d1:ec:34:7c:
                    06:69:1a:8c:95:5e:c7:1a:ca:93:6f:32:9c:be:11:
                    04:9d:a5:0e:52:94:cb:d4:6d:73:0f:22:e7:82:d4:
                    7c:33:86:85:d1:6d:66:82:9d:95:94:dc:8d:bd:26:
                    08:a2:10:66:12:98:36:36:75:61:1d:d1:3d:41:d8:
                    2a:9f:b5:57:d2:67:6e:a7:e9:de:ba:b9:50:25:de:
                    22:ad:9d:f7:53:ae:9f:6e:4c:fa:aa:82:0f:cc:35:
                    76:21:56:85:5f:95:be:9d:4d:c6:00:a5:78:78:be:
                    e0:4f:03:e8:dc:96:7e:5a:a3:3c:26:80:d1:1d:4f:
                    11:74:87:08:42:04:79:12:36:b9:ff:0a:54:83:b5:
                    fa:84:ee:b5:33:ea:1c:16:9e:f2:9d:f5:5a:24:b7:
                    bf:1e:7a:99:fe:1b:db:68:b8:e4:68:de:95:77:5b:
                    e3:ee:81:25:8b:6c:51:81:d3:5e:b0:79:c7:a9:e1:
                    6d:34:d3:d6:53:94:e2:bb:e4:58:d1:8e:1c:98:ee:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:27:68:54:75:51:F6:00:10:9B:D9:0C:B1:39:29:96:AE:D2:70:73
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS63099.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.116.0/24
                  79.182.164.0/24
                  109.66.131.0/24
                  109.66.135.0-109.66.136.255
                  109.66.145.0/24
                  109.66.154.0/24
                  109.66.161.0/24
                  109.66.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:27:9c:56:13:29:de:0d:12:25:be:76:5b:9b:6f:17:dc:7c:
         6e:5d:ab:80:6c:db:f8:4d:e8:ec:0b:65:2f:55:78:7c:a7:07:
         22:20:3a:f5:92:5e:66:a5:99:fa:99:e3:a1:56:2c:31:29:ab:
         28:2c:03:a4:e7:99:14:7d:81:a2:7a:f2:65:12:44:2e:31:f5:
         5a:89:31:4d:35:ef:5c:9a:cb:ce:4a:74:9a:c1:bd:a6:95:e5:
         7e:98:a0:41:30:df:33:b6:94:34:a0:00:1c:f7:2f:8d:3a:3a:
         84:57:16:7b:9b:ae:f5:fe:42:9e:43:6b:8e:3d:8e:e4:0e:22:
         d9:04:a3:b5:88:08:76:ad:06:a0:57:55:f9:66:6e:cd:27:bb:
         8c:8f:7d:f0:3e:7a:c1:f1:b5:ab:93:a9:af:f8:49:b4:ae:0c:
         d2:da:bb:b1:1c:8b:b3:91:90:5a:59:ec:3d:33:24:73:34:0e:
         df:d8:1e:5f:1e:52:76:24:49:8d:07:66:84:98:32:05:8a:5d:
         ff:a8:9b:0b:65:97:95:f8:65:3e:a2:be:2c:0b:83:1d:e7:64:
         7e:c5:7c:b9:d5:ec:17:97:36:bb:a8:49:17:93:ae:51:13:7d:
         4e:84:46:56:f1:f9:c5:3f:5d:41:28:25:97:5c:6b:b5:e8:0a:
         b5:95:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:10:30 2026 by rpki-client