Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS275761.roa
File:                     AS275761.roa (raw, json)
Hash identifier:          0qUE/p9BI3NpiIyXK6Aes2Tf0wH347tNc8jYOV2DJRU=
Subject key identifier:   87:20:4B:F1:70:F2:B2:E1:D1:90:A0:2F:2B:D4:17:10:C9:24:27:AB
Certificate issuer:       /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial:       4E6F82C3434B19EEB181C267D6E23C3536D13FDE
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS275761.roa
Signing time:             Tue 22 Sep 2026 08:47:06 +0000
ROA not before:           Tue 22 Sep 2026 08:42:06 +0000
ROA not after:            Tue 21 Sep 2027 08:47:06 +0000
asID:                     275761
IP address blocks:        200.141.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6f:82:c3:43:4b:19:ee:b1:81:c2:67:d6:e2:3c:35:36:d1:3f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
        Validity
            Not Before: Sep 22 08:42:06 2026 GMT
            Not After : Sep 21 08:47:06 2027 GMT
        Subject: CN=87204BF170F2B2E1D190A02F2BD41710C92427AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:50:df:0b:c9:36:94:67:54:06:95:d3:b4:
                    62:b4:65:6c:6a:a2:64:2d:b4:d5:20:0a:ff:cc:e7:
                    86:25:1c:90:82:6e:0d:c2:fa:d2:38:c3:40:3e:ec:
                    95:aa:f4:97:48:df:56:ca:16:9e:3a:08:a8:d8:63:
                    8a:a8:57:cd:f7:7d:77:36:d2:5c:5f:71:8a:f6:eb:
                    16:34:e2:44:21:14:c5:57:8b:6f:5b:90:7d:a9:1e:
                    0d:57:5d:30:8f:0e:f9:cd:03:c2:12:78:4f:eb:55:
                    03:98:8e:7c:33:5d:db:7e:dc:1f:b4:36:e2:3b:f6:
                    39:94:38:19:3a:62:80:56:a8:8e:b5:60:16:57:bb:
                    0b:29:f3:30:62:92:1f:01:b4:56:be:8a:cf:1f:41:
                    4f:24:ab:24:b3:7f:aa:72:75:52:18:45:ba:dc:36:
                    0d:31:1d:8c:66:61:5e:df:9a:7d:97:61:ca:c0:a0:
                    56:91:89:45:83:52:32:4d:6e:82:2b:69:f5:9e:91:
                    b4:39:cb:71:aa:a9:36:06:ed:fe:bd:b2:1a:e0:19:
                    c5:c9:7d:1d:e3:0f:92:fd:db:5b:4b:b1:48:b4:c5:
                    50:5b:cb:51:77:78:f6:02:6f:9d:d0:08:98:12:1d:
                    94:ea:ab:97:8e:fb:e7:fd:51:fb:51:8b:1b:bc:20:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:4B:F1:70:F2:B2:E1:D1:90:A0:2F:2B:D4:17:10:C9:24:27:AB
            X509v3 Authority Key Identifier:
                keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS275761.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.141.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:39:43:3f:df:15:8b:6e:f7:3b:af:23:93:5d:d9:78:7d:
         fb:9d:d7:14:de:dd:43:1e:f1:49:72:07:03:62:42:57:ef:98:
         a8:bd:6e:88:b6:75:78:34:8d:01:da:cd:2c:bb:04:23:78:00:
         49:e6:1d:54:8d:56:e3:9e:39:b5:f1:9c:c0:f8:fa:bd:83:f0:
         1a:64:e3:a9:e0:6b:57:cb:3a:06:53:6b:06:e5:f1:34:de:0f:
         e7:bd:3f:a2:cc:ba:c9:21:46:e1:8d:9f:03:fb:f2:c4:d3:a3:
         68:dc:ac:a9:8e:a6:f4:82:03:39:b0:e4:a3:5e:02:91:74:5d:
         e6:17:e4:21:bd:a4:de:e4:24:d6:8b:20:25:d8:18:1c:51:b2:
         0b:77:7d:b6:a6:33:c1:5d:19:06:1d:28:e9:ea:ec:f6:cb:36:
         a0:29:b1:9b:7a:27:c5:bf:5f:cc:ee:1b:2f:60:6b:09:4e:12:
         e6:5c:da:a2:2a:c7:c8:44:bc:03:7e:ae:83:51:a7:ca:f9:b9:
         5a:0f:7f:eb:7a:bc:b8:e1:fc:61:d6:5a:54:f1:76:a7:2b:0a:
         03:ad:96:fe:04:d5:8e:d5:b8:ec:71:b7:18:e7:dd:98:64:8e:
         53:09:ae:da:73:14:ce:70:f6:38:e0:19:52:a6:06:d4:19:81:
         77:b6:31:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:44:52 2026 by rpki-client