Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
File:                     AS55410.roa (raw, json)
Hash identifier:          RD7hwq2zyXAevWf0PXX1iVPJx/ba42JNhBq4lDeYRM4=
Subject key identifier:   B1:47:88:7F:95:3B:BA:B4:04:B1:2E:63:41:D9:2F:7C:C9:81:96:5B
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       362CD1703675550E80B233312F5B6102F29E6C61
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
Signing time:             Tue 05 May 2026 17:47:11 +0000
ROA not before:           Tue 05 May 2026 17:42:11 +0000
ROA not after:            Tue 04 May 2027 17:47:11 +0000
asID:                     55410
IP address blocks:        92.112.24.0/22 maxlen: 24
                          92.112.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2c:d1:70:36:75:55:0e:80:b2:33:31:2f:5b:61:02:f2:9e:6c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May  5 17:42:11 2026 GMT
            Not After : May  4 17:47:11 2027 GMT
        Subject: CN=B147887F953BBAB404B12E6341D92F7CC981965B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:2e:33:dc:f2:9c:92:bf:6e:0c:4e:f5:08:
                    9f:32:cb:cf:fd:09:2c:d2:10:50:69:d5:ce:38:3c:
                    81:91:b8:b2:32:7a:7d:1f:7f:db:fe:3e:a9:1f:67:
                    96:83:65:c6:e3:3a:db:f3:69:56:4c:42:46:90:10:
                    9d:d2:4e:75:4d:4f:97:98:08:ad:6a:fe:58:91:1b:
                    97:55:6f:74:cd:be:d0:f7:4c:33:41:c7:23:43:7d:
                    ce:b2:4a:a7:fb:b8:6d:4d:56:8c:1e:c7:cb:b5:fe:
                    f0:33:92:59:b4:9a:be:97:16:80:a8:3a:96:25:86:
                    bb:2b:46:d9:0e:2d:24:dd:5a:8a:9e:53:75:26:b0:
                    46:70:08:58:8b:be:30:80:8a:89:1c:30:85:bc:b4:
                    04:f3:b2:ce:d8:24:61:11:46:d0:2f:96:04:c1:3f:
                    b2:c7:74:e9:13:21:b1:e3:20:01:4e:8a:59:be:f0:
                    ac:61:4b:f7:df:fc:dd:13:84:c9:fb:ad:4a:c5:45:
                    90:5c:bd:3b:0c:5d:cd:da:03:a2:9e:e8:d6:b7:24:
                    c4:6b:c2:b5:ef:8b:78:48:f8:ca:f2:d7:68:7f:fd:
                    92:af:4f:de:ce:05:d5:e0:3d:ba:36:a7:1f:02:1f:
                    08:f1:6b:16:ba:37:c9:2a:d0:96:81:cb:94:6f:14:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:88:7F:95:3B:BA:B4:04:B1:2E:63:41:D9:2F:7C:C9:81:96:5B
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:83:01:41:63:fc:4b:53:58:a7:91:4a:a0:44:1c:eb:33:
         3b:cc:c8:1d:52:d1:c1:0f:58:77:b2:d8:9f:29:e1:98:96:7a:
         07:b1:f6:b5:9b:d0:99:2a:d6:3b:57:88:aa:3b:f9:3c:2d:66:
         d3:68:82:aa:a0:1d:e4:a9:7f:d4:f6:68:af:84:96:6a:d1:4b:
         e8:e1:bb:22:b2:53:90:d7:7d:41:3f:12:05:77:20:93:e1:17:
         72:6e:ad:b3:f7:5c:2f:2b:42:6b:af:a1:61:c2:23:b5:c4:a1:
         8c:7d:fc:cb:b4:4b:a1:25:5c:07:c1:a4:bf:e0:d3:2f:44:71:
         b6:88:7f:29:65:3f:6a:49:73:84:f9:38:f2:97:c3:c6:a1:c8:
         9e:0a:6d:94:7b:a7:65:a8:b5:b1:08:e7:6d:e0:ad:c8:7a:f2:
         cc:fc:3b:6a:22:d0:3d:59:0c:ff:e0:5e:2e:84:57:67:ca:3c:
         d5:13:a8:4f:85:d6:65:9b:ad:e4:e4:c0:5c:f1:0e:51:70:96:
         24:7f:43:1d:6d:f9:79:03:0f:a2:5c:1f:8d:ae:9b:05:d8:1b:
         16:cc:f5:be:b5:81:d8:d6:13:8e:68:2e:b4:1b:47:03:d1:c3:
         a0:57:95:60:fb:00:60:14:41:38:8a:ab:f0:51:b5:f9:20:83:
         a6:c1:5d:b9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUNizRcDZ1VQ6AsjMxL1thAvKebGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA1MDUxNzQyMTFaFw0yNzA1MDQxNzQ3MTFaMDMxMTAvBgNV
BAMTKEIxNDc4ODdGOTUzQkJBQjQwNEIxMkU2MzQxRDkyRjdDQzk4MTk2NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4S4z3PKckr9uDE71CJ8yy8/9
CSzSEFBp1c44PIGRuLIyen0ff9v+PqkfZ5aDZcbjOtvzaVZMQkaQEJ3STnVNT5eY
CK1q/liRG5dVb3TNvtD3TDNBxyNDfc6ySqf7uG1NVowex8u1/vAzklm0mr6XFoCo
OpYlhrsrRtkOLSTdWoqeU3UmsEZwCFiLvjCAiokcMIW8tATzss7YJGERRtAvlgTB
P7LHdOkTIbHjIAFOilm+8KxhS/ff/N0ThMn7rUrFRZBcvTsMXc3aA6Ke6Na3JMRr
wrXvi3hI+Mry12h//ZKvT97OBdXgPbo2px8CHwjxaxa6N8kq0JaBy5RvFN+vAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUsUeIf5U7urQEsS5jQdkvfMmBllswHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTU0MTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANccBgw
DQYJKoZIhvcNAQELBQADggEBAAUugwFBY/xLU1inkUqgRBzrMzvMyB1S0cEPWHey
2J8p4ZiWegex9rWb0Jkq1jtXiKo7+TwtZtNogqqgHeSpf9T2aK+ElmrRS+jhuyKy
U5DXfUE/EgV3IJPhF3JurbP3XC8rQmuvoWHCI7XEoYx9/Mu0S6ElXAfBpL/g0y9E
cbaIfyllP2pJc4T5OPKXw8ahyJ4KbZR7p2WotbEI523grch68sz8O2oi0D1ZDP/g
Xi6EV2fKPNUTqE+F1mWbreTkwFzxDlFwliR/Qx1t+XkDD6JcH42umwXYGxbM9b61
gdjWE45oLrQbRwPRw6BXlWD7AGAUQTiKq/BRtfkgg6bBXbk=
-----END CERTIFICATE-----
Generated at Wed May 13 01:28:11 2026 by rpki-client