Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS146813.roa
File:                     AS146813.roa (raw, json)
Hash identifier:          34I52DYEMc00sz7h++PsbycrZ15/qRqw1QARefNkt5M=
Subject key identifier:   33:6A:ED:AC:25:C7:C0:94:95:E2:74:43:A0:19:97:04:E9:6A:AA:CA
Certificate issuer:       /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial:       5879947D6AEB8A688E9CAC4197D783F3C9D5E42C
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS146813.roa
Signing time:             Thu 24 Sep 2026 17:19:44 +0000
ROA not before:           Thu 24 Sep 2026 17:14:44 +0000
ROA not after:            Thu 23 Sep 2027 17:19:44 +0000
asID:                     146813
IP address blocks:        200.141.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:79:94:7d:6a:eb:8a:68:8e:9c:ac:41:97:d7:83:f3:c9:d5:e4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
        Validity
            Not Before: Sep 24 17:14:44 2026 GMT
            Not After : Sep 23 17:19:44 2027 GMT
        Subject: CN=336AEDAC25C7C09495E27443A0199704E96AAACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:83:16:73:55:e9:ab:0a:96:c1:95:62:ea:
                    49:a2:d6:7d:6b:3d:c2:17:6a:c9:9f:a6:47:3e:6f:
                    ce:e4:c4:ca:a1:16:8b:54:76:a7:4d:39:fd:1a:d6:
                    a7:e3:0c:5c:ad:8c:5b:4d:70:47:a4:f4:3b:25:b0:
                    7f:08:12:45:2d:a9:b9:38:09:48:1d:c2:f8:b6:67:
                    c2:55:da:c7:15:37:e1:ce:ea:e7:2a:73:be:24:fd:
                    e4:52:df:a1:4c:74:b5:7c:79:99:42:18:06:d8:04:
                    63:c7:50:6f:ef:13:99:ce:c5:ea:63:29:4b:01:ca:
                    7f:d6:dd:c3:09:37:4a:f4:68:60:cd:e4:a0:3a:94:
                    30:3e:fc:bd:e5:99:41:75:d2:be:37:87:03:72:63:
                    11:e3:e4:11:b4:a4:83:2a:c9:b0:24:e7:c9:c2:37:
                    45:06:06:6a:63:f0:45:1b:14:16:b5:c7:c6:4e:b7:
                    27:a6:92:d6:27:c4:2d:5f:4a:29:ed:9e:39:5f:a6:
                    5c:eb:9f:36:63:6d:a3:ac:7b:b0:d1:0a:d9:ed:a8:
                    96:06:0d:fd:67:6c:f8:36:64:9e:02:fe:0b:58:fb:
                    17:2a:09:ce:24:c9:eb:b6:97:a2:e1:d6:96:a2:0b:
                    ba:db:af:03:a9:aa:af:be:41:84:13:f7:3f:66:54:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6A:ED:AC:25:C7:C0:94:95:E2:74:43:A0:19:97:04:E9:6A:AA:CA
            X509v3 Authority Key Identifier:
                keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS146813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c9:64:1c:bd:9e:87:7c:e8:b9:9c:3e:7b:6b:e9:67:c3:47:
         25:77:d5:b5:5c:d7:87:ae:cc:10:30:df:16:0f:51:e1:c9:53:
         63:ba:89:6b:80:bc:12:fe:d0:c0:a1:29:50:1a:fa:fc:aa:ab:
         7a:ec:8a:e6:f0:eb:b9:1d:61:d7:4e:7c:40:ec:34:f1:d8:57:
         90:37:45:a5:c0:a6:03:c6:25:d1:d5:1b:92:0f:d3:9a:6d:c9:
         c4:f8:76:60:e9:ce:aa:59:84:8b:e5:3c:36:bb:da:64:25:37:
         97:dc:2b:db:b3:18:57:06:b8:01:f0:78:55:d2:89:2b:bb:93:
         ff:03:f6:85:12:0b:5b:f0:80:d2:cd:cc:3b:f9:df:61:05:fc:
         52:f6:6c:0a:69:04:90:90:f5:40:10:29:99:f3:05:78:0c:58:
         29:04:1a:37:91:06:f6:6e:76:50:5f:6b:ce:20:69:12:26:a7:
         0d:85:a3:8d:32:a3:01:05:dc:73:c5:f8:42:ba:8e:57:15:8f:
         d7:6c:57:5e:f5:a6:2e:f3:c9:57:2f:a8:81:6f:ee:83:76:e9:
         99:65:ea:f5:a3:1f:ad:f5:00:a6:27:39:b4:cf:61:07:3d:54:
         b7:4e:09:b0:97:d8:f7:a3:a4:57:cb:16:c8:ea:3f:9e:19:11:
         b4:96:c0:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:25 2026 by rpki-client