Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nUvVnaw5KqxNS7DMNTPBksZLaXM.roa
File:                     nUvVnaw5KqxNS7DMNTPBksZLaXM.roa (raw, json)
Hash identifier:          OsRSVdAep7TgfmT/a8RUC4BH/7r93i+7tfNHxYc8QFM=
Subject key identifier:   9D:4B:D5:9D:AC:39:2A:AC:4D:4B:B0:CC:35:33:C1:92:C6:4B:69:73
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019982886D836CD96001B4FBCFB928F0BF25
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nUvVnaw5KqxNS7DMNTPBksZLaXM.roa
Signing time:             Thu 25 Sep 2025 20:20:03 +0000
ROA not before:           Thu 25 Sep 2025 20:20:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150654
IP address blocks:        163.5.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:82:88:6d:83:6c:d9:60:01:b4:fb:cf:b9:28:f0:bf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Sep 25 20:20:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9d4bd59dac392aac4d4bb0cc3533c192c64b6973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1d:5a:90:d6:db:22:5a:00:64:51:6d:ff:f1:
                    33:50:52:ee:dc:5c:76:a4:6f:be:87:99:d4:ea:06:
                    ec:b1:eb:9d:f2:3f:59:06:c5:fb:28:4e:2e:2c:52:
                    0d:19:b9:ed:9d:a2:23:cd:ae:34:a3:cc:cc:0e:ab:
                    29:0b:a3:6b:a0:74:8f:a5:0e:93:fa:55:1c:d3:ea:
                    df:24:df:5a:c0:61:ba:97:fe:e9:7d:d4:29:14:53:
                    3e:2d:ba:d1:28:7a:e6:33:2e:0e:78:75:14:cd:a8:
                    ec:2f:24:1f:ef:86:a4:b4:6b:49:8d:3b:b1:8b:3e:
                    d3:54:bc:ba:01:92:2e:5e:56:b4:5c:e5:73:12:12:
                    df:70:4d:c4:77:e0:38:0d:ad:60:5f:5c:a0:4e:97:
                    73:10:b1:02:19:cf:2b:b8:28:c6:a5:bf:99:1a:06:
                    56:d6:35:fd:63:15:a7:ca:4c:37:53:89:87:47:b3:
                    c7:ec:1f:28:f6:76:13:19:b3:dc:7d:66:17:ed:45:
                    ec:04:bd:31:53:ba:c5:11:64:35:ff:1d:ea:30:0b:
                    b2:7a:a2:5b:0f:53:81:95:30:54:18:39:76:13:d9:
                    45:49:a8:4f:4e:e6:4d:c5:a4:ca:25:56:b7:bd:37:
                    3a:bd:ea:88:c3:33:1f:7e:f4:17:8c:e5:1d:3c:bb:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4B:D5:9D:AC:39:2A:AC:4D:4B:B0:CC:35:33:C1:92:C6:4B:69:73
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nUvVnaw5KqxNS7DMNTPBksZLaXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:13:af:ec:82:25:a8:1b:69:ab:8c:92:9a:c0:23:8c:7e:b7:
         b0:56:f0:53:6b:1b:dc:79:8d:59:78:93:80:cf:ce:f1:54:60:
         7a:32:2f:29:1f:25:a4:8c:75:c5:5d:6f:8b:3e:13:e5:de:55:
         e9:95:f6:6d:9b:62:29:05:9d:2a:21:c9:a1:c0:6e:29:8f:3d:
         40:3f:9d:13:c1:89:3b:b1:3d:4b:50:06:2a:80:ef:9a:fc:e0:
         cb:0a:50:c4:61:c0:37:ac:d3:8b:92:86:cc:a8:87:96:d3:10:
         4b:4a:4f:67:9d:2e:f9:90:6f:21:ea:e1:c8:fe:7d:b3:4d:13:
         3f:d0:51:e1:a4:27:9e:f1:26:fa:05:32:f6:3d:0e:6e:a6:4c:
         8e:50:6d:83:78:7e:95:e9:66:03:b6:b9:fc:09:91:0f:6a:e9:
         17:43:43:1d:fb:d9:05:10:b4:be:d2:22:3a:95:4c:21:9c:cf:
         d8:21:36:57:17:d6:ab:9a:89:83:e9:69:bb:7b:68:f9:e3:e2:
         1b:80:95:24:09:4c:59:8c:01:95:72:f1:b5:5e:7a:17:17:66:
         05:24:cf:5e:91:d3:9b:92:dc:ac:57:b4:d5:5c:3e:32:2e:0a:
         41:be:d5:21:ed:8b:e6:5b:2f:9f:cb:15:c4:09:45:27:52:d4:
         28:ab:1c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:44 2025 by rpki-client