Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
File:                     AS48266.roa (raw, json)
Hash identifier:          gw5HMwtGQQk4Z2iju1VFDZ7ePfnLWNwDnPvfV+FCFqk=
Subject key identifier:   BF:24:93:A9:29:CE:03:08:3E:BF:05:A4:16:54:17:C6:94:89:CB:E8
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       15282875F423358D29F4754FB044BC1D8CFB0DFA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
Signing time:             Mon 02 Mar 2026 01:25:03 +0000
ROA not before:           Mon 02 Mar 2026 01:20:03 +0000
ROA not after:            Mon 01 Mar 2027 01:25:03 +0000
asID:                     48266
IP address blocks:        91.124.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:28:28:75:f4:23:35:8d:29:f4:75:4f:b0:44:bc:1d:8c:fb:0d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Mar  2 01:20:03 2026 GMT
            Not After : Mar  1 01:25:03 2027 GMT
        Subject: CN=BF2493A929CE03083EBF05A4165417C69489CBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:c4:2d:f8:9e:74:f4:2d:e5:64:7e:9a:9c:
                    a5:1c:69:1a:13:b3:37:ce:14:65:c5:4f:e1:6d:66:
                    5a:0f:ae:e6:56:eb:54:89:e9:95:f4:a2:95:da:f0:
                    46:de:67:19:aa:5e:0d:34:c6:10:bb:67:1f:a4:56:
                    a0:24:e2:59:87:3c:d3:48:fc:4b:2b:e1:5b:e8:72:
                    3d:27:cf:cb:57:3e:19:49:61:a1:e3:f0:27:42:4f:
                    cb:d5:cb:6a:8f:eb:23:ea:5e:07:7c:2b:5a:9a:96:
                    d0:0f:79:79:0a:d7:47:45:89:60:09:d8:7b:ab:ac:
                    65:bb:08:b0:32:af:2d:4a:df:f6:ad:21:9a:fe:42:
                    9a:b3:c5:9d:bb:19:27:2d:3f:98:46:54:75:52:f7:
                    33:0f:62:5b:e9:44:df:0a:e6:a7:4c:69:5c:ae:8e:
                    6b:fc:ca:53:82:6d:2f:44:eb:16:81:ed:4b:03:e0:
                    91:d4:98:b0:1c:c4:c5:18:29:fb:93:f7:a2:26:37:
                    fa:42:af:33:d7:6e:2b:8d:e0:6c:a6:04:c9:b6:b3:
                    05:f3:30:05:26:32:05:34:db:e0:f5:66:ed:8e:3d:
                    73:89:fd:a8:14:4b:73:7d:85:53:42:4c:7c:f0:c9:
                    e6:e1:b0:55:7a:01:ac:f0:c7:e1:03:e6:ff:b3:5c:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:24:93:A9:29:CE:03:08:3E:BF:05:A4:16:54:17:C6:94:89:CB:E8
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:d2:f4:95:db:68:bd:a1:65:f9:78:b6:ee:cc:b4:a7:7e:
         b0:aa:28:60:b6:59:70:86:04:10:95:68:18:46:35:4f:5e:14:
         00:97:d5:40:fe:46:28:c1:b6:72:bb:d3:95:07:17:21:5e:3b:
         d0:f8:02:43:77:fd:f8:75:62:b6:44:c3:59:49:57:46:30:db:
         11:37:45:ed:ec:0c:30:47:3f:e7:37:97:92:3f:e0:4b:19:8c:
         87:c6:67:9c:89:b6:b3:6c:14:55:01:38:63:80:43:33:c2:fe:
         f7:ac:94:b8:32:2d:17:a9:c0:08:70:3d:5b:a5:88:e2:5d:1a:
         38:65:96:dc:63:25:08:9b:e9:fe:97:fc:cc:74:b0:df:48:40:
         0f:be:8d:32:86:e0:4d:d4:91:57:dd:bb:5f:82:5f:d7:08:2d:
         ed:7a:05:ae:64:af:b7:cb:3b:b5:0f:1e:dd:50:0b:81:f9:2d:
         3b:af:1b:57:35:23:a8:3c:3c:73:0a:f9:e7:53:43:cd:35:f4:
         53:89:74:e5:3d:d2:34:ac:ff:4c:f9:4e:01:1b:da:99:31:f5:
         fc:79:ce:f4:d1:e7:bc:5e:01:16:79:02:df:8b:47:2f:2c:94:
         aa:48:6c:d3:74:cd:e9:90:98:81:95:83:c7:43:79:41:83:23:
         57:4e:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:31:16 2026 by rpki-client