Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
File:                     AS54339.roa (raw, json)
Hash identifier:          yBvumOuQaPPYVpzV4VDx1ZfNB/kjP8oiFWtw3mdJDvs=
Subject key identifier:   1E:4B:2B:D1:BE:34:4E:9F:73:F1:18:6D:AB:BB:A2:DF:1C:B6:9C:79
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       41DA8184103F9EC5602F5F9902C4AC34068A4F10
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
Signing time:             Wed 11 Nov 2026 00:03:27 +0000
ROA not before:           Tue 10 Nov 2026 23:58:27 +0000
ROA not after:            Wed 10 Nov 2027 00:03:27 +0000
asID:                     54339
IP address blocks:        92.113.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Nov 2026 14:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:da:81:84:10:3f:9e:c5:60:2f:5f:99:02:c4:ac:34:06:8a:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov 10 23:58:27 2026 GMT
            Not After : Nov 10 00:03:27 2027 GMT
        Subject: CN=1E4B2BD1BE344E9F73F1186DABBBA2DF1CB69C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:bb:e0:38:f2:99:30:c0:c2:78:af:bb:43:
                    12:c7:a3:ae:1c:3a:f3:73:df:7a:89:53:e1:e0:c1:
                    10:eb:2a:33:d3:92:6b:b1:28:d8:fd:92:53:56:f6:
                    35:62:b3:58:7e:8b:10:af:c2:5a:6c:7f:c8:c7:7d:
                    7d:ed:1f:8d:fd:08:dc:36:08:0b:64:6e:8a:11:9d:
                    a5:f5:30:fe:59:b1:06:0f:5f:f2:9e:a3:b9:c1:14:
                    d4:0c:35:39:02:0e:7f:04:69:94:bc:49:ac:f3:6c:
                    c2:61:22:69:66:8b:89:db:3f:1a:9b:58:1e:ed:72:
                    57:eb:f4:3f:42:4d:5b:a3:2c:ea:c1:34:0b:37:42:
                    09:77:48:b2:2c:ea:70:bb:93:09:2c:1e:cc:d2:1d:
                    1b:97:42:c0:b1:a7:a3:e3:93:36:5a:62:f7:63:e0:
                    5d:54:24:78:c3:5a:9f:d8:a5:32:15:47:8c:22:60:
                    d4:f1:2a:20:a0:71:04:c2:c1:d2:b3:01:c3:01:8c:
                    81:74:93:5c:15:29:4a:65:ea:0e:c4:d3:bc:c9:9e:
                    32:85:e2:73:87:86:f3:9b:f9:4d:2b:ef:00:fd:dd:
                    55:96:bf:c6:44:d7:26:d7:89:c0:09:23:d1:77:cf:
                    e0:d5:ba:5e:51:6c:e8:d5:ef:02:d1:47:28:7e:3c:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4B:2B:D1:BE:34:4E:9F:73:F1:18:6D:AB:BB:A2:DF:1C:B6:9C:79
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:99:7e:73:3e:c9:77:79:50:31:79:1d:5a:93:ed:9d:2a:
         4a:df:54:3c:db:0c:04:dd:1e:70:f5:6a:11:f9:8e:ab:86:08:
         b5:e3:d5:94:5e:3b:db:0a:f1:4c:dd:f8:6f:38:08:5b:b5:0d:
         1a:21:b4:aa:36:e8:26:cf:50:0f:8e:5c:39:e5:85:e8:08:1b:
         c7:dc:e5:21:b1:64:38:d4:4f:28:1f:bc:ef:5f:0a:e8:a4:79:
         f6:62:4e:8e:28:18:8d:94:dc:55:17:e5:9a:fb:1c:d4:f5:89:
         3e:fb:c6:0b:f8:7a:be:89:7d:f9:5d:19:5a:79:08:64:f1:2f:
         14:61:d2:3c:b3:da:2a:df:43:e0:9a:39:f1:56:2d:be:f2:ab:
         14:f7:51:b1:91:24:90:cf:01:c9:18:70:2a:29:e6:9c:9c:3a:
         d8:07:ad:60:58:87:a5:5e:cb:79:d7:cf:4c:12:38:d8:5b:e0:
         ca:97:19:f0:50:d9:89:a2:b7:47:40:3d:53:82:df:bd:b5:22:
         66:52:d5:61:1e:c8:ae:3b:06:51:3c:b2:f9:1b:e0:a6:2a:6e:
         8b:c3:d5:88:37:a2:56:08:31:9e:43:e4:17:64:42:42:41:c7:
         0c:fe:0f:d0:64:f0:41:ed:19:f5:98:de:6b:2b:14:be:85:4c:
         07:8b:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 23:52:33 2026 by rpki-client