Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206574.roa
File:                     AS206574.roa (raw, json)
Hash identifier:          MvUCG0NAk9UxxOrfYsk4AKrABG840UD0Ko4HFD8P7wA=
Subject key identifier:   8C:BB:CF:81:02:1B:F4:03:76:FD:0B:B2:7D:EA:18:60:19:91:AA:90
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       0A026E38E10B5A5D11225C8533F7FFB30036296C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206574.roa
Signing time:             Wed 29 Apr 2026 01:23:07 +0000
ROA not before:           Wed 29 Apr 2026 01:18:07 +0000
ROA not after:            Wed 28 Apr 2027 01:23:07 +0000
asID:                     206574
IP address blocks:        2a14:7580:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:02:6e:38:e1:0b:5a:5d:11:22:5c:85:33:f7:ff:b3:00:36:29:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Apr 29 01:18:07 2026 GMT
            Not After : Apr 28 01:23:07 2027 GMT
        Subject: CN=8CBBCF81021BF40376FD0BB27DEA18601991AA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:96:81:b1:32:72:2e:6b:75:d8:bf:32:6a:
                    31:ee:ed:99:55:59:c2:23:16:88:9a:f6:eb:a4:e9:
                    4a:12:16:eb:e7:f0:65:15:ff:1b:11:61:41:d6:66:
                    a0:0a:14:22:d0:34:90:b1:3a:69:df:06:23:2b:53:
                    c6:67:b6:dc:31:07:e1:a1:a6:bf:bd:18:34:d3:13:
                    d4:28:c1:d5:60:32:97:e8:af:85:1a:0d:36:58:40:
                    4f:db:4e:86:99:f0:18:cd:4e:c6:34:90:75:ba:c5:
                    f6:7f:90:c0:7c:95:e3:08:d5:da:39:7f:6b:54:98:
                    87:b8:cc:af:b0:0f:26:aa:68:29:3c:ce:2a:3b:b1:
                    ef:86:be:16:b0:ba:08:0c:85:9e:7e:a4:e1:d9:ba:
                    16:c1:0b:52:6b:c4:77:39:d0:06:73:90:27:68:0a:
                    a6:30:9e:8c:fc:7d:96:17:3d:8e:be:03:a0:0b:9c:
                    7e:8b:0d:3e:a5:49:56:a4:f8:d8:5b:e9:a2:c3:9c:
                    ed:22:7e:43:4e:43:56:60:49:26:1a:78:b6:06:11:
                    b3:58:7f:a5:09:4e:62:59:85:11:75:0f:ff:76:e8:
                    4f:66:ce:ce:2d:b9:51:55:f6:27:8a:14:0e:4c:5a:
                    47:fc:3e:8f:c6:d7:80:03:4e:dd:c6:e3:c0:68:a3:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BB:CF:81:02:1B:F4:03:76:FD:0B:B2:7D:EA:18:60:19:91:AA:90
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206574.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ec:63:44:b7:92:00:5a:ad:6e:29:a7:4f:bd:c5:78:92:dd:
         53:b8:29:4a:52:ac:88:fb:97:5d:9e:19:e6:a7:bf:c6:47:1d:
         0e:a6:c7:91:96:81:cc:46:8f:2c:4c:34:f1:d5:c9:a1:88:46:
         9d:12:e5:30:b2:03:f2:6c:22:4e:b8:e6:5e:e1:73:ad:cd:ca:
         07:e9:92:8b:b0:f0:ea:6d:91:f8:b6:46:d0:36:a9:57:bd:2e:
         f3:ff:fe:15:d6:ed:64:8c:fb:96:97:9e:e3:ed:89:92:af:54:
         bf:d7:ac:48:c8:53:fb:65:e3:40:46:78:3a:9a:ea:1a:60:f4:
         07:cb:b4:3a:40:cb:6c:d9:de:9f:a7:1c:06:91:38:73:40:76:
         ae:21:17:dc:4a:ec:01:27:40:2a:74:2c:b3:70:93:cc:9d:ac:
         9b:a8:e6:35:65:8b:d1:97:87:3d:7c:32:7b:69:17:f0:4e:ff:
         6f:31:a4:ce:2b:05:07:d4:68:e2:fc:69:d5:c3:76:ff:19:d2:
         fd:b9:94:1b:eb:c3:46:28:48:c9:86:44:49:45:a5:e6:ea:1c:
         29:dc:a7:1b:fc:52:66:eb:e7:04:1c:37:05:f0:90:ca:bd:ad:
         07:0c:29:70:5e:f1:ba:71:35:23:df:31:a7:32:91:80:eb:c6:
         6e:35:20:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUCgJuOOELWl0RIlyFM/f/swA2KWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA0MjkwMTE4MDdaFw0yNzA0MjgwMTIzMDdaMDMxMTAvBgNV
BAMTKDhDQkJDRjgxMDIxQkY0MDM3NkZEMEJCMjdERUExODYwMTk5MUFBOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrpaBsTJyLmt12L8yajHu7ZlV
WcIjFoia9uuk6UoSFuvn8GUV/xsRYUHWZqAKFCLQNJCxOmnfBiMrU8ZnttwxB+Gh
pr+9GDTTE9QowdVgMpfor4UaDTZYQE/bToaZ8BjNTsY0kHW6xfZ/kMB8leMI1do5
f2tUmIe4zK+wDyaqaCk8zio7se+GvhawuggMhZ5+pOHZuhbBC1JrxHc50AZzkCdo
CqYwnoz8fZYXPY6+A6ALnH6LDT6lSVak+Nhb6aLDnO0ifkNOQ1ZgSSYaeLYGEbNY
f6UJTmJZhRF1D/926E9mzs4tuVFV9ieKFA5MWkf8Po/G14ADTt3G48Boo7wbAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUjLvPgQIb9AN2/QuyfeoYYBmRqpAwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA2NTc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gP/uMA0GCSqGSIb3DQEBCwUAA4IBAQB67GNEt5IAWq1uKadPvcV4kt1TuClKUqyI
+5ddnhnmp7/GRx0OpseRloHMRo8sTDTx1cmhiEadEuUwsgPybCJOuOZe4XOtzcoH
6ZKLsPDqbZH4tkbQNqlXvS7z//4V1u1kjPuWl57j7YmSr1S/16xIyFP7ZeNARng6
muoaYPQHy7Q6QMts2d6fpxwGkThzQHauIRfcSuwBJ0AqdCyzcJPMnaybqOY1ZYvR
l4c9fDJ7aRfwTv9vMaTOKwUH1Gji/GnVw3b/GdL9uZQb68NGKEjJhkRJRaXm6hwp
3Kcb/FJm6+cEHDcF8JDKva0HDClwXvG6cTUj3zGnMpGA68ZuNSDF
-----END CERTIFICATE-----