Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26769.roa
File:                     AS26769.roa (raw, json)
Hash identifier:          IIqMBnPeiVVcId+h3jqC9bIGaUjbbZMZvwk+uDROvY4=
Subject key identifier:   0E:26:49:02:88:22:01:1F:ED:99:58:3B:4D:A6:A3:6D:BC:F3:73:A0
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       1C6D047056FCC65F326ACF4F6A506772556BA0A5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26769.roa
Signing time:             Wed 06 May 2026 09:45:22 +0000
ROA not before:           Wed 06 May 2026 09:40:22 +0000
ROA not after:            Wed 05 May 2027 09:45:22 +0000
asID:                     26769
IP address blocks:        82.26.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6d:04:70:56:fc:c6:5f:32:6a:cf:4f:6a:50:67:72:55:6b:a0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: May  6 09:40:22 2026 GMT
            Not After : May  5 09:45:22 2027 GMT
        Subject: CN=0E2649028822011FED99583B4DA6A36DBCF373A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:e5:20:a9:56:f7:09:4d:da:dc:e7:c2:02:
                    f9:24:44:ed:49:28:47:16:cf:1f:5f:e4:23:80:45:
                    f8:7d:44:b3:20:23:7a:44:e8:e9:71:51:06:1f:17:
                    0c:e2:6a:0c:a0:75:04:b2:e8:4e:31:c8:b7:42:f1:
                    52:bb:d0:53:2a:a3:89:0b:2c:5f:88:19:4d:87:af:
                    69:f7:8c:e6:32:ec:24:a1:79:2a:a5:29:17:64:bb:
                    eb:55:f4:cf:92:63:74:9a:26:69:a9:fe:e2:72:78:
                    3a:9c:10:d8:59:ff:e6:0d:45:92:6c:67:e8:e3:54:
                    24:24:d0:a5:66:b2:14:c3:2c:f3:66:db:ce:fa:80:
                    0e:7a:37:71:c0:34:b4:e3:4b:3f:2e:18:88:b8:84:
                    9b:c6:74:b4:b3:aa:e1:eb:6c:3d:ca:2e:8f:df:2f:
                    6d:3a:61:d7:cf:cd:62:97:b4:52:db:73:e6:05:04:
                    c4:93:e2:bf:e8:92:bc:36:34:f4:8e:fd:dc:ef:de:
                    c5:05:d3:ea:7f:b8:01:d6:82:65:8d:0a:f1:a0:97:
                    64:40:cb:a8:74:ce:e9:4a:bf:7b:5d:8f:19:57:4c:
                    55:1b:b4:0b:33:5a:63:da:a6:44:ea:39:65:9c:56:
                    96:38:87:b4:35:8b:2a:7e:98:44:0f:b8:e4:86:9c:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:26:49:02:88:22:01:1F:ED:99:58:3B:4D:A6:A3:6D:BC:F3:73:A0
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:6a:51:f1:f0:a7:6d:f0:60:cb:0d:79:dd:ec:11:4c:47:
         19:69:be:19:99:fb:97:fb:db:e3:bd:4c:a2:d1:75:c1:fb:25:
         0a:f1:84:08:ee:e3:ed:05:af:68:44:1c:5d:21:66:99:1d:51:
         63:d0:8f:88:08:da:a1:a5:d7:19:93:86:ed:6b:9f:87:19:8a:
         1e:5c:7e:80:de:4e:1a:20:b6:00:29:a0:07:33:a8:24:3e:b8:
         7a:79:e3:ac:50:8d:82:82:84:9f:25:aa:78:4f:0c:da:f5:60:
         3b:6a:81:00:fb:79:14:b5:05:91:83:f6:98:db:bb:54:60:12:
         ef:e5:8c:43:e6:47:dc:a6:24:8a:77:0d:22:a7:8b:db:f1:13:
         92:b1:f3:ef:6f:30:55:5b:48:82:dd:79:ec:8e:68:78:b6:16:
         16:77:63:27:f7:9f:14:c7:5a:e9:7c:72:62:ac:b9:a6:9b:f8:
         7b:3d:9f:23:65:c3:e3:4d:87:81:49:84:8e:16:6b:93:dc:b0:
         6b:cd:68:77:70:bd:83:36:6c:af:73:a1:35:23:f9:ab:2f:69:
         d7:1b:87:5d:b4:de:19:b3:1b:0d:7f:0e:0b:ec:da:76:25:22:
         a3:db:d9:42:0d:c9:0c:04:22:3a:36:47:cd:fa:77:c8:c7:74:
         42:25:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:32:14 2026 by rpki-client