Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62160.roa
File:                     AS62160.roa (raw, json)
Hash identifier:          b9Q3ScvEocmGYbto5zhR6E7vvBnnFq+OzVVBLy1zQj8=
Subject key identifier:   7B:1B:5A:70:F0:48:B3:76:F1:7A:23:F5:49:B5:46:4B:DE:98:5F:F0
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       75799B01268278127B2D6A5740A691AB200F75B7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62160.roa
Signing time:             Thu 23 Apr 2026 08:47:05 +0000
ROA not before:           Thu 23 Apr 2026 08:42:05 +0000
ROA not after:            Thu 22 Apr 2027 08:47:05 +0000
asID:                     62160
IP address blocks:        92.112.213.0/24 maxlen: 24
                          92.112.216.0/24 maxlen: 24
                          92.112.222.0/24 maxlen: 24
                          92.112.227.0/24 maxlen: 24
                          92.112.235.0/24 maxlen: 24
                          92.112.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:9b:01:26:82:78:12:7b:2d:6a:57:40:a6:91:ab:20:0f:75:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Apr 23 08:42:05 2026 GMT
            Not After : Apr 22 08:47:05 2027 GMT
        Subject: CN=7B1B5A70F048B376F17A23F549B5464BDE985FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:5e:40:99:fb:d0:04:6b:a3:9e:1c:88:a5:
                    88:6b:d1:68:f0:ba:25:3d:f6:57:48:d7:d4:cf:9f:
                    b7:76:74:59:34:2b:6f:95:d9:3e:e2:1d:02:fc:e5:
                    48:09:93:83:f7:80:4c:be:30:c2:f4:1a:20:99:21:
                    72:f1:b4:c7:5b:c6:b5:6d:ed:4f:c4:db:9d:43:36:
                    50:09:ff:48:9f:ac:e8:e5:44:24:0a:dc:7a:44:7f:
                    d8:2a:53:08:5d:61:39:3b:61:f2:a0:f8:0a:e3:c8:
                    a6:ef:57:6d:1e:12:46:82:b2:32:d7:24:88:5b:72:
                    7f:66:54:ca:da:ef:21:06:50:4c:da:5d:ff:9b:76:
                    71:9d:ca:1c:ef:b2:96:c5:2b:9b:87:37:15:b4:78:
                    f2:73:d6:ed:62:4b:b5:f9:64:6c:13:46:87:1b:f9:
                    1f:53:fa:cf:d8:77:f2:b5:38:5e:5f:9e:89:4d:7d:
                    13:dd:75:e9:b5:87:8c:a6:b7:f0:09:ea:4c:fe:b4:
                    75:d9:e0:46:a6:1c:32:8f:b4:91:10:dd:e9:ba:40:
                    6d:22:94:c9:8a:82:dd:4a:e2:a3:7f:2c:9d:a9:be:
                    77:77:66:07:8a:01:03:69:42:5a:81:6a:79:35:83:
                    53:4c:02:b2:c6:d0:49:8a:7d:0c:02:78:ac:83:ea:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1B:5A:70:F0:48:B3:76:F1:7A:23:F5:49:B5:46:4B:DE:98:5F:F0
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.213.0/24
                  92.112.216.0/24
                  92.112.222.0/24
                  92.112.227.0/24
                  92.112.235.0/24
                  92.112.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:93:2e:b3:1d:c8:9a:95:cf:a8:68:a8:7f:44:62:cc:c7:9d:
         e1:47:b9:18:b8:d9:60:3a:23:b3:d8:31:48:ff:39:d6:bf:3d:
         41:ff:d6:7e:65:c2:6a:d3:87:11:f6:91:63:ef:cb:74:e3:47:
         49:d2:75:16:d0:63:3c:84:0e:c7:a1:ba:21:2b:68:2d:cc:b4:
         c4:15:37:8f:67:ad:b1:98:c1:c9:a9:d2:58:88:b0:cc:bc:1d:
         a9:17:fe:38:a1:6f:d1:f5:fe:76:99:5b:df:27:9a:10:ae:f7:
         8f:59:1d:60:85:c3:55:00:3f:b8:23:45:b7:04:73:3d:e4:b0:
         e8:d0:1f:05:37:e4:e8:10:a6:26:b4:4d:8a:5d:22:81:fd:23:
         8b:4a:a4:f3:ba:37:36:26:dc:c6:c4:d5:a9:ac:0d:c7:7b:d5:
         05:77:81:24:e9:1b:14:74:6b:48:7b:a4:09:18:9e:cc:2b:d9:
         3a:d5:27:9e:fb:29:df:54:c1:f7:f8:fb:cf:92:a8:a2:5a:2b:
         ba:02:70:28:7c:fd:51:10:28:c8:df:0a:29:af:f1:72:af:f0:
         c7:87:80:2a:95:91:a8:a5:dc:9a:f4:89:aa:92:bc:12:f4:43:
         fe:66:ab:2f:32:21:04:59:87:76:6b:f3:3e:5f:ec:05:5a:94:
         75:b6:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:18:07 2026 by rpki-client