Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa
File:                     eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa (raw, json)
Hash identifier:          1+Q47VweGeMghafRGVxCzr3t0qseGVW1aR4Kb6fAFqQ=
Subject key identifier:   78:DE:84:42:B7:B1:FF:D6:F7:72:E8:8E:E7:E7:BE:FF:B9:B6:B3:86
Certificate issuer:       /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial:       019F2368865AC614DAEEC76CA59D68E38805
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa
Signing time:             Thu 02 Jul 2026 15:18:00 +0000
ROA not before:           Thu 02 Jul 2026 15:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42484
IP address blocks:        195.114.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:86:5a:c6:14:da:ee:c7:6c:a5:9d:68:e3:88:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
        Validity
            Not Before: Jul  2 15:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78de8442b7b1ffd6f772e88ee7e7beffb9b6b386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:8f:65:c0:3e:27:57:a3:b8:7b:46:54:a0:
                    8d:76:ed:d6:9f:77:ce:04:76:36:27:f2:57:eb:5d:
                    f8:88:4f:a1:a1:7e:bb:99:c8:c2:c8:7c:e8:0b:8e:
                    c2:99:f1:bb:d0:61:12:e4:46:26:22:a7:61:af:df:
                    ed:eb:5b:c5:5a:c8:a0:bf:e1:48:f1:71:dd:d0:f5:
                    59:ec:f2:64:f9:d6:eb:5d:9d:38:82:29:2d:01:c0:
                    4e:87:47:02:49:f7:cb:e0:e9:3c:49:9b:03:dc:66:
                    d8:37:98:2d:61:ae:f5:f9:0e:10:93:c3:cf:52:04:
                    ce:f9:19:18:e6:8e:40:07:9e:5f:52:49:70:a0:f8:
                    49:60:f6:dd:83:ef:4f:bb:e9:3f:88:8d:be:f7:dc:
                    48:19:b1:b1:05:95:04:ba:7e:9c:4f:42:6a:dc:91:
                    59:17:16:35:9a:63:8a:38:62:7d:ff:db:16:81:4e:
                    95:76:f7:88:a2:5d:45:31:32:fd:be:d0:57:43:2e:
                    bf:c6:6b:06:de:39:f7:a0:53:56:a7:58:af:39:11:
                    17:df:40:fc:bd:c6:7a:ed:7d:73:0c:91:38:f6:2c:
                    a2:8d:6b:4c:1d:1a:c7:33:2d:62:2d:d2:35:80:77:
                    10:cf:f8:43:c4:70:9d:f1:6c:d4:d5:47:33:26:72:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:84:42:B7:B1:FF:D6:F7:72:E8:8E:E7:E7:BE:FF:B9:B6:B3:86
            X509v3 Authority Key Identifier:
                keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/eN6EQrex_9b3cuiO5-e-_7m2s4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:9e:73:ec:28:d6:d5:ea:eb:e6:67:00:09:0f:91:4f:90:23:
         cf:57:f5:0c:49:27:6e:1e:9e:9f:a6:fe:d6:fc:be:61:f5:9f:
         fc:31:c9:b2:a7:c9:32:32:34:1a:6a:0e:2d:73:be:b6:ad:ee:
         27:a3:a2:9f:cd:fa:9d:93:c2:d3:ad:8e:61:0c:f9:c2:41:aa:
         55:47:87:04:4d:d8:61:2e:07:c4:2c:1b:db:6a:31:b6:fe:6c:
         f4:a3:b8:93:29:f9:fa:46:d0:67:ee:83:77:a2:56:66:c1:69:
         75:15:33:35:b1:04:36:af:3a:e9:8b:54:96:ca:46:f1:7b:49:
         ba:f9:67:95:19:75:73:c0:6e:2a:0f:65:00:93:21:85:6d:06:
         43:c4:1f:50:89:af:8d:47:65:be:d7:e9:18:6f:bf:5f:35:4b:
         51:e5:dd:33:d9:da:6c:4e:40:e8:b3:fd:14:5e:e2:4e:3a:ac:
         70:85:2b:d5:18:d8:be:b6:0d:7b:23:8c:2e:85:65:5f:96:29:
         7e:a0:48:c6:3e:d2:02:3e:c2:df:a1:21:1a:df:a6:e1:f4:d0:
         fa:55:03:17:08:0f:f1:a3:7f:a0:42:2e:04:ee:d1:d2:82:7d:
         2c:ac:b9:28:df:8f:f6:d0:6b:37:bf:28:8c:5c:49:dc:14:97:
         ab:7d:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:42 2026 by rpki-client