Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274941.roa
File:                     AS274941.roa (raw, json)
Hash identifier:          tTwfhogL3nqCVVAsRkybKIbVAOhIwvhtqy/9XlfmfFA=
Subject key identifier:   9D:CB:DD:62:D2:AF:70:4C:73:70:1D:9D:0F:63:4A:7D:18:34:A6:0D
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       0A717C60DE101E65F132B71E835FBA50FBF21969
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274941.roa
Signing time:             Tue 21 Jul 2026 23:33:28 +0000
ROA not before:           Tue 21 Jul 2026 23:28:28 +0000
ROA not after:            Tue 20 Jul 2027 23:33:28 +0000
asID:                     274941
IP address blocks:        51.194.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:7c:60:de:10:1e:65:f1:32:b7:1e:83:5f:ba:50:fb:f2:19:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jul 21 23:28:28 2026 GMT
            Not After : Jul 20 23:33:28 2027 GMT
        Subject: CN=9DCBDD62D2AF704C73701D9D0F634A7D1834A60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:25:09:e5:fa:d1:a2:29:16:49:e1:ba:ee:
                    33:19:30:6c:6f:ee:64:5e:94:a0:58:bb:e5:90:d4:
                    9d:42:51:74:2b:75:4e:b2:e0:2e:07:16:b8:1d:be:
                    45:80:ca:b3:b3:63:f5:fe:1a:a0:0e:41:7d:a4:8d:
                    1e:50:72:7e:8d:e3:4a:1b:e4:8f:15:97:57:77:82:
                    09:fc:90:5e:0d:99:80:69:dd:e9:3a:4d:71:8d:16:
                    af:72:23:db:39:fd:23:fe:4f:b3:70:3b:be:29:79:
                    4b:d7:c3:a1:9a:7f:cc:9e:7d:81:9a:ee:aa:e5:f1:
                    55:19:4f:63:fb:38:11:51:e1:1e:90:72:82:4d:75:
                    b4:e2:e8:49:9e:82:f6:30:c1:60:40:0d:18:aa:3a:
                    81:39:c3:25:26:a9:5f:e7:43:9e:a2:93:83:10:06:
                    08:71:8f:8f:c5:f2:9c:fa:dd:db:4b:da:4d:c5:25:
                    68:e7:de:51:31:0d:f4:ef:18:88:8a:da:d8:b7:58:
                    a5:21:91:1c:7f:07:0e:40:fa:36:64:6b:d0:d9:4e:
                    4b:20:96:0d:98:74:05:e0:9c:a2:c2:62:b8:df:7a:
                    ae:8d:d1:f2:0c:f2:c0:a4:ee:94:df:e2:d2:65:94:
                    1d:3f:70:e6:f7:18:ae:76:8f:e6:f2:6a:bf:0c:83:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CB:DD:62:D2:AF:70:4C:73:70:1D:9D:0F:63:4A:7D:18:34:A6:0D
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:13:80:24:c0:15:a1:c6:46:c8:23:27:97:14:73:47:f7:
         f6:97:26:ef:f5:2b:14:a2:0b:6c:f1:bf:09:6d:23:a6:94:fa:
         fc:04:08:96:c7:a3:5a:39:14:78:a3:bb:b0:f6:1a:ee:92:b3:
         99:1b:90:43:4d:ba:46:0c:2e:0f:64:34:ff:10:f4:f1:64:97:
         7b:76:4c:7a:49:df:87:9f:8b:f2:b6:ca:45:f8:3e:96:0c:84:
         09:b0:1c:ee:10:bb:f1:0e:b7:60:51:31:3d:9e:f1:37:7b:42:
         aa:84:be:43:18:d4:87:d0:6f:2e:04:7f:18:43:9a:84:65:35:
         f1:da:45:24:81:ce:44:f2:ab:24:81:14:6e:3e:ac:47:9f:10:
         c7:f4:54:c5:e5:ce:e6:99:23:06:93:a1:f0:19:b5:24:e9:fd:
         de:eb:9a:75:05:0f:05:38:01:ca:ad:04:a8:8e:75:9c:dd:d7:
         e3:9e:c2:36:fc:12:a8:b9:91:56:68:0a:da:2d:84:c1:1e:bb:
         d0:35:ba:5c:f8:70:c2:64:e2:6c:93:b4:1d:13:07:a8:03:f2:
         a5:23:be:9a:f9:b0:33:56:4d:33:8a:91:c3:0d:af:ca:fd:4b:
         0a:54:89:6a:5a:40:ba:a8:fb:0a:6b:61:f5:5f:29:af:d7:ef:
         68:e0:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:26 2026 by rpki-client