Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa
File:                     XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa (raw, json)
Hash identifier:          Pambl0M9LVjm4MGPS57/2Bz+CkKpPC/JVa4fHyyRtbY=
Subject key identifier:   5C:4B:EE:74:A2:96:80:B5:EF:F9:52:D6:C3:B1:64:73:1C:BD:7C:7D
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       01992D44C1374F1B75EC94BFA0C9B924CB0A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa
Signing time:             Tue 09 Sep 2025 06:58:24 +0000
ROA not before:           Tue 09 Sep 2025 06:58:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202973
IP address blocks:        193.233.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:44:c1:37:4f:1b:75:ec:94:bf:a0:c9:b9:24:cb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Sep  9 06:58:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5c4bee74a29680b5eff952d6c3b164731cbd7c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:c9:77:fa:66:05:39:4f:fa:56:0d:d9:a3:
                    9d:5d:0c:24:2e:08:f4:8a:9b:19:8c:66:df:06:c7:
                    e6:62:ac:a9:c7:15:6e:01:2f:dc:17:05:e0:67:33:
                    71:29:3c:f2:a8:0b:c4:96:65:49:d5:70:cf:77:4c:
                    15:d4:5a:41:40:2c:c3:5c:82:94:02:86:4b:5a:ec:
                    f0:3d:37:21:0f:3c:39:e2:27:37:ff:e3:a6:72:3a:
                    ca:c9:2c:e4:8b:95:59:3e:db:80:d1:3d:76:86:f0:
                    f8:1a:d9:4d:11:46:30:89:73:59:44:08:fe:26:0a:
                    a8:91:b5:9f:4c:8b:28:b8:6c:38:b0:9c:e4:48:b7:
                    b0:bd:18:f3:0e:32:cf:40:d7:ad:1a:4e:45:2c:cc:
                    af:87:20:1b:27:13:59:a9:b6:dc:66:db:62:84:f3:
                    7e:c2:6e:ba:82:f6:4f:2b:31:9c:b4:50:cd:e9:e3:
                    ad:84:73:0f:d4:ec:0b:df:c7:c5:51:48:9c:68:57:
                    e2:15:ae:a8:a8:0d:ac:e4:07:37:9f:d5:95:5b:7c:
                    62:f2:11:cf:4c:0e:14:17:b0:8f:e9:f1:d6:d1:e1:
                    69:3f:5b:d3:41:87:a9:0a:ed:d6:5f:f4:fb:ff:b1:
                    18:c8:0a:16:3a:b8:e0:53:f9:d5:ae:d7:6f:4a:d7:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:EE:74:A2:96:80:B5:EF:F9:52:D6:C3:B1:64:73:1C:BD:7C:7D
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:29:3f:f4:42:fd:33:13:f8:f1:8c:4e:06:b1:b3:ec:83:
         e5:d0:0f:40:ca:da:84:b4:e1:cc:e9:d4:f2:38:63:c7:34:5c:
         18:be:8b:88:6f:b2:56:13:56:13:8c:8a:1f:c8:4c:95:e4:cc:
         84:be:98:3c:19:a0:c7:08:e3:a3:3f:9b:47:34:c9:8b:a5:8a:
         64:db:bb:37:db:3b:e2:0b:30:e8:e5:d0:13:10:4f:fb:86:db:
         e6:19:34:7e:cb:95:d7:9f:2a:b7:26:a0:b1:e9:cc:7c:4d:35:
         99:18:84:9f:de:64:60:ee:40:ad:3b:2a:5d:70:b1:1a:e8:41:
         05:df:66:41:0d:a1:94:99:23:63:d8:cf:7d:bf:d7:94:4d:04:
         b2:80:a4:3e:d3:de:3b:27:29:59:28:00:19:cd:5a:80:31:87:
         3c:62:ad:c6:37:68:c7:86:9f:0b:89:6e:2a:fb:79:dd:63:b2:
         93:80:b1:dd:80:c2:93:ff:96:82:0b:14:2f:62:a3:2a:20:72:
         6e:bc:a8:7f:21:4f:68:2d:7b:05:c2:21:81:75:9e:40:85:dc:
         24:94:7e:5b:13:cf:67:70:2b:4a:10:fd:ab:2f:d0:16:8c:04:
         ca:d8:28:15:f0:ad:a6:c7:42:11:ce:0d:49:6a:1e:a2:24:49:
         fc:f4:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:31 2025 by rpki-client