Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203679.roa
File:                     AS203679.roa (raw, json)
Hash identifier:          m8QWShqjGEg+agA7gbQKDRsrCOf+Y8y9kE8XmS1kGgw=
Subject key identifier:   9C:32:45:F8:3D:2E:5C:59:7A:26:91:25:26:71:90:FC:72:09:6C:36
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       447081E8C0D799C654FEB64A8AE5B7771D087EF2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203679.roa
Signing time:             Sun 10 May 2026 01:55:17 +0000
ROA not before:           Sun 10 May 2026 01:50:17 +0000
ROA not after:            Sun 09 May 2027 01:55:17 +0000
asID:                     203679
IP address blocks:        82.26.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:81:e8:c0:d7:99:c6:54:fe:b6:4a:8a:e5:b7:77:1d:08:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: May 10 01:50:17 2026 GMT
            Not After : May  9 01:55:17 2027 GMT
        Subject: CN=9C3245F83D2E5C597A269125267190FC72096C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:fb:0c:46:c0:7c:f2:ed:eb:17:86:e5:97:
                    47:1c:cb:d4:80:c1:08:e4:37:44:c0:0d:f0:b0:0c:
                    e7:8d:c8:bd:8f:6c:56:4b:24:c0:59:82:db:2e:50:
                    27:65:16:14:f7:3d:f1:34:60:e7:06:7f:38:c2:41:
                    79:d9:b5:43:8d:98:2d:39:8d:bc:bd:a9:67:b5:75:
                    a0:09:fe:48:0b:45:3c:88:1a:85:6e:1f:3e:a3:00:
                    68:11:06:e6:cc:15:dc:e3:4f:6a:75:cf:9f:e4:5d:
                    a2:8a:1c:58:1c:c0:50:d5:16:fb:c1:3f:a0:f7:c4:
                    6f:0b:6f:8b:47:60:ec:73:78:90:04:6f:f0:9d:98:
                    e5:99:64:55:5a:0e:ea:41:02:7b:46:5e:34:bb:6e:
                    e5:63:dc:6a:8b:3f:e4:8b:a1:05:6d:e4:4f:38:fc:
                    67:13:9f:34:7a:49:2b:5f:53:e8:36:1b:03:81:0c:
                    a2:a7:3a:ed:1f:da:c8:b7:65:f1:41:44:e7:27:e4:
                    32:65:e4:0f:5f:4a:b5:53:40:d1:b4:f2:e1:06:33:
                    fe:8e:7d:3e:83:e5:1c:42:ab:24:f1:c3:53:e9:95:
                    83:b7:4d:01:6e:2e:3f:0f:ad:39:23:b9:25:3a:e3:
                    21:7c:91:8f:9e:ef:b5:4c:79:76:83:42:29:9b:3b:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:32:45:F8:3D:2E:5C:59:7A:26:91:25:26:71:90:FC:72:09:6C:36
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203679.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:48:a4:c8:e2:da:38:5b:52:e8:e5:d8:14:a4:4a:a0:ae:
         12:06:40:97:d3:4d:26:a2:ae:e1:6b:0e:c2:03:5e:aa:25:c4:
         3e:11:7f:41:d6:26:e5:62:60:d6:c1:46:4e:b6:16:89:6d:6a:
         1f:43:19:77:84:a7:03:e8:95:dd:33:5d:4c:a6:c2:b4:d5:f6:
         2c:8d:2c:40:92:c8:4c:16:10:0b:67:fc:ad:6a:de:26:85:e5:
         f6:8a:b5:99:22:2a:a3:56:23:7b:38:72:8a:fb:13:ea:d1:32:
         a6:fe:2c:07:91:ee:9f:87:cf:7f:8c:b5:57:7f:3b:6c:e0:0a:
         22:da:82:e0:66:97:6a:0d:d7:29:d4:00:8f:67:7c:90:0e:18:
         49:01:7d:d8:0e:02:0a:ef:cc:5b:bd:46:46:4d:0d:58:3d:6f:
         8a:12:fc:c4:82:49:9a:27:2d:a6:db:77:0a:61:57:95:0d:03:
         de:0a:0b:8d:70:09:13:ae:df:58:8d:b8:28:0e:aa:7c:e4:bd:
         83:90:1d:bc:0a:f2:70:e0:9c:41:04:3e:22:4a:40:b1:9f:99:
         5b:90:60:2e:23:fc:73:2f:49:3d:30:77:48:c2:2d:05:af:e0:
         6e:74:d3:d0:5f:08:74:c1:85:0c:dc:12:ac:ad:a5:32:4d:66:
         a6:56:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:29 2026 by rpki-client