Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/wv6d_Ebz8zRqf1MynTukbGa33Mw.roa
File:                     wv6d_Ebz8zRqf1MynTukbGa33Mw.roa (raw, json)
Hash identifier:          dPL9kg4wql0Qk9cME65ll/Ifth0q9haSyPRLmDFRDZk=
Subject key identifier:   C2:FE:9D:FC:46:F3:F3:34:6A:7F:53:32:9D:3B:A4:6C:66:B7:DC:CC
Certificate issuer:       /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial:       019E10D1FA31BCC5B77F9E5BA74D8D6CB33F
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/wv6d_Ebz8zRqf1MynTukbGa33Mw.roa
Signing time:             Sun 10 May 2026 07:37:36 +0000
ROA not before:           Sun 10 May 2026 07:37:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215597
IP address blocks:        5.181.196.0/24 maxlen: 24
                          5.181.197.0/24 maxlen: 24
                          82.199.222.0/23 maxlen: 23
                          82.199.222.0/24 maxlen: 24
                          82.199.223.0/24 maxlen: 24
                          91.213.191.0/24 maxlen: 24
                          91.217.185.0/24 maxlen: 24
                          185.90.252.0/24 maxlen: 24
                          185.95.206.0/23 maxlen: 23
                          185.95.206.0/24 maxlen: 24
                          185.95.207.0/24 maxlen: 24
                          212.95.142.0/24 maxlen: 24
                          212.95.148.0/24 maxlen: 24
                          212.95.156.0/24 maxlen: 24
                          212.95.158.0/24 maxlen: 24
                          2a12:f680:200::/48 maxlen: 48
                          2a12:f680:201::/48 maxlen: 48
                          2a12:f680:204::/48 maxlen: 48
                          2a12:f680:205::/48 maxlen: 48
                          2a12:f680:206::/48 maxlen: 48
                          2a12:f680:207::/48 maxlen: 48
                          2a12:f680:208::/48 maxlen: 48
                          2a12:f680:214::/48 maxlen: 48
                          2a12:f680:220::/43 maxlen: 43
                          2a12:f680:220::/45 maxlen: 45
                          2a12:f680:228::/45 maxlen: 45
                          2a12:f680:230::/45 maxlen: 45
                          2a12:f680:238::/45 maxlen: 45
                          2a12:f680:240::/43 maxlen: 43
                          2a12:f680:240::/45 maxlen: 45
                          2a12:f680:248::/45 maxlen: 45
                          2a12:f680:250::/45 maxlen: 45
                          2a12:f680:258::/45 maxlen: 45
                          2a12:f680:260::/43 maxlen: 43
                          2a12:f680:260::/45 maxlen: 45
                          2a12:f680:268::/45 maxlen: 45
                          2a12:f680:270::/45 maxlen: 45
                          2a12:f680:278::/45 maxlen: 45
                          2a12:f680:600::/48 maxlen: 48
                          2a12:f680:601::/48 maxlen: 48
                          2a12:f680:602::/48 maxlen: 48
                          2a12:f680:604::/48 maxlen: 48
                          2a12:f680:606::/48 maxlen: 48
                          2a12:f680:620::/43 maxlen: 43
                          2a12:f680:620::/45 maxlen: 45
                          2a12:f680:628::/45 maxlen: 45
                          2a12:f680:630::/45 maxlen: 45
                          2a12:f680:638::/45 maxlen: 45
                          2a12:f680:640::/43 maxlen: 43
                          2a12:f680:640::/45 maxlen: 45
                          2a12:f680:648::/45 maxlen: 45
                          2a12:f680:650::/45 maxlen: 45
                          2a12:f680:658::/45 maxlen: 45
                          2a12:f680:660::/43 maxlen: 43
                          2a12:f680:660::/45 maxlen: 45
                          2a12:f680:668::/45 maxlen: 45
                          2a12:f680:670::/45 maxlen: 45
                          2a12:f680:678::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:10:d1:fa:31:bc:c5:b7:7f:9e:5b:a7:4d:8d:6c:b3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
        Validity
            Not Before: May 10 07:37:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2fe9dfc46f3f3346a7f53329d3ba46c66b7dccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:dd:58:b0:20:88:5e:22:72:fa:bf:a5:9c:f6:
                    b1:99:ba:86:a1:ae:f9:47:ac:03:ef:e7:06:24:ef:
                    07:0b:bb:2a:6a:dc:c1:24:ec:9f:44:3e:fb:bc:2a:
                    68:0f:67:ab:65:b1:4f:6c:84:12:91:b7:f7:aa:43:
                    f3:5e:8e:ed:f5:00:43:79:cf:86:30:a6:d6:6f:00:
                    0c:b1:7b:f0:a5:bc:f5:c3:03:9b:96:d2:51:7b:c7:
                    8d:cf:5b:37:18:27:f4:66:8e:1d:4c:21:39:23:88:
                    c9:76:39:64:4f:97:ac:e8:37:5a:84:96:cd:56:c3:
                    ff:4e:2e:1d:98:a8:43:68:d1:c1:d0:8b:9b:a3:89:
                    31:92:19:58:00:e0:af:03:26:d6:12:fa:f4:1e:5b:
                    cd:4c:ae:29:6d:fb:2d:d8:c4:4f:7b:9e:3d:bf:9f:
                    c8:5b:c3:b6:a7:89:da:f0:79:f1:e6:9d:43:ae:5c:
                    2e:2b:5a:f6:7f:c4:95:8b:9a:0d:01:8e:d1:e0:42:
                    cb:0b:bf:95:75:44:d0:4a:19:89:a1:5d:62:27:c9:
                    7e:0b:77:66:42:08:e6:8b:73:7a:96:47:73:3c:ec:
                    e8:28:bf:ec:1e:e0:12:2d:3c:30:dd:36:7b:d6:86:
                    5a:19:70:29:d4:96:b1:5e:d1:ae:ac:2f:e1:77:27:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:9D:FC:46:F3:F3:34:6A:7F:53:32:9D:3B:A4:6C:66:B7:DC:CC
            X509v3 Authority Key Identifier:
                keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/wv6d_Ebz8zRqf1MynTukbGa33Mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.196.0/23
                  82.199.222.0/23
                  91.213.191.0/24
                  91.217.185.0/24
                  185.90.252.0/24
                  185.95.206.0/23
                  212.95.142.0/24
                  212.95.148.0/24
                  212.95.156.0/24
                  212.95.158.0/24
                IPv6:
                  2a12:f680:200::/47
                  2a12:f680:204::-2a12:f680:208:ffff:ffff:ffff:ffff:ffff
                  2a12:f680:214::/48
                  2a12:f680:220::-2a12:f680:27f:ffff:ffff:ffff:ffff:ffff
                  2a12:f680:600::-2a12:f680:602:ffff:ffff:ffff:ffff:ffff
                  2a12:f680:604::/48
                  2a12:f680:606::/48
                  2a12:f680:620::-2a12:f680:67f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:7c:fc:88:73:7a:92:20:c0:70:70:d7:3f:21:15:f6:a1:
         7c:0d:b5:44:cd:dc:a5:d6:53:c6:0c:a9:c8:8d:b4:cc:d8:15:
         48:68:85:f2:62:12:3a:f1:49:16:70:44:29:69:6c:19:b6:16:
         29:7e:4e:19:2d:0c:95:e9:38:ee:cd:de:11:70:3b:40:aa:35:
         cf:f8:40:53:08:bd:75:23:8d:bc:2d:ac:3b:dc:8b:77:86:d2:
         2b:b7:0e:c8:b6:77:55:94:8d:ed:12:d9:41:7c:fc:1b:e3:79:
         45:fc:6c:ca:68:47:49:12:e1:37:70:de:13:64:e6:0d:b5:31:
         3a:1f:8b:e1:95:54:98:90:8f:59:55:25:43:b8:95:a6:ca:8f:
         67:60:b1:de:11:f5:4c:9e:44:0c:a9:94:79:20:4c:bd:fa:e2:
         85:60:0f:c8:ae:a3:ef:d1:42:dc:66:54:10:ef:90:e5:ec:a7:
         5c:1a:f3:2c:83:91:63:b4:4d:b2:aa:eb:92:ab:e4:e0:f8:f2:
         b9:07:65:17:18:ad:ff:45:6a:e4:c9:b9:db:7c:8e:f7:ff:3f:
         34:36:68:42:f2:72:39:19:1c:73:05:d7:4e:ce:86:07:2d:17:
         9a:7e:2c:8b:b7:b2:0c:e8:9e:ba:f3:a5:cc:1e:24:bc:f8:23:
         8d:e7:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:35 2026 by rpki-client