Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
File:                     AS199746.roa (raw, json)
Hash identifier:          mCPHFdRKbS7/3AsVPGL+Ba78DOVXlm4f7l2iPHtsrms=
Subject key identifier:   20:48:9D:04:AE:AC:2E:E9:46:82:FB:5C:3A:0E:5A:55:EB:98:53:8D
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       6864A31FED6ACB5EC275C2F26C55116EC451626D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa
Signing time:             Wed 25 Mar 2026 18:08:17 +0000
ROA not before:           Wed 25 Mar 2026 18:03:17 +0000
ROA not after:            Wed 24 Mar 2027 18:08:17 +0000
asID:                     199746
IP address blocks:        2a14:7585::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:a3:1f:ed:6a:cb:5e:c2:75:c2:f2:6c:55:11:6e:c4:51:62:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Mar 25 18:03:17 2026 GMT
            Not After : Mar 24 18:08:17 2027 GMT
        Subject: CN=20489D04AEAC2EE94682FB5C3A0E5A55EB98538D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:b1:59:ca:3d:7a:f4:57:fe:11:b5:11:3d:
                    79:df:23:75:cb:33:03:db:0d:3d:33:4f:2a:7c:a8:
                    c0:9f:a5:fb:c2:de:40:0f:1f:d8:71:d2:8d:e2:ef:
                    f5:84:f8:9a:9f:5a:35:f4:8b:3b:09:12:32:07:04:
                    2c:99:ec:7c:e9:ed:3a:8b:47:09:74:c1:ee:b0:47:
                    da:01:61:f0:67:35:a3:1f:80:f6:a5:0e:81:6a:4d:
                    40:60:9f:65:e3:47:eb:05:81:98:52:b2:11:0f:46:
                    43:3a:81:16:e4:11:bd:a1:ac:4e:74:ae:3c:54:f3:
                    97:d0:10:e1:cc:eb:77:35:c7:da:aa:b6:bb:15:3b:
                    b5:90:f5:13:d2:e9:38:6e:62:22:a6:8c:63:cc:fb:
                    60:e7:6b:61:4d:7c:9a:4b:59:6d:f8:4f:27:5f:f5:
                    53:e2:9d:fd:95:5a:5d:b0:c9:18:65:f8:01:0d:e4:
                    fb:7a:76:58:ce:76:75:f7:ea:72:c8:7c:30:b1:f2:
                    01:65:b3:4c:d4:56:7a:24:23:9d:72:c5:2f:79:06:
                    b2:76:70:d4:d8:00:fd:81:28:ad:1d:4a:d7:1b:d4:
                    d0:c2:44:fb:b6:4b:cd:6a:9d:ea:77:44:3b:e4:61:
                    2e:d4:7e:56:d5:73:7b:f2:da:76:38:59:13:60:e8:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:48:9D:04:AE:AC:2E:E9:46:82:FB:5C:3A:0E:5A:55:EB:98:53:8D
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199746.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7585::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:a2:ac:bb:1e:9d:50:79:6c:2f:55:0a:c8:38:23:75:e9:ad:
         77:c1:0c:d2:3e:39:e0:c4:e2:63:e8:1a:43:0c:ec:83:c4:c6:
         23:04:5f:99:cd:77:e8:b2:63:f3:2c:92:31:0e:d1:7e:29:ee:
         47:13:6a:37:ee:01:01:cb:8b:a7:5f:c0:48:87:6f:b0:92:ea:
         95:4a:38:4b:8d:20:fb:8b:7b:f7:6e:6c:03:2f:3d:d2:65:34:
         b1:8e:11:fa:e9:89:d5:d1:52:20:db:5b:e8:8d:3f:d5:6c:6c:
         0f:4e:f5:f1:3e:dc:9b:0c:f3:f9:b9:95:7e:c0:84:ff:b0:a8:
         21:2e:7d:77:47:e7:21:96:cf:c4:68:62:4e:20:12:f3:d2:65:
         51:66:47:1c:41:65:c9:d4:10:f9:06:10:c2:e2:c8:ec:12:4b:
         8e:52:2b:57:f1:38:7a:73:74:b0:9d:33:90:84:ec:ee:da:0b:
         bb:bd:fc:5e:12:d2:60:48:fb:a4:0d:46:83:5f:8d:bc:cf:04:
         78:8f:61:68:61:a7:53:2f:f6:98:21:c3:2a:5f:f7:e9:22:12:
         17:69:32:c0:cd:29:e6:cb:b4:c8:30:61:96:c0:ec:b4:de:95:
         79:81:5b:4b:47:38:cf:0c:f1:af:c3:16:a2:7c:cd:7f:c5:3c:
         8c:fa:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----