Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/c6eb0f-c32d-4b66-ae25-ce5db002c9b2/1/_1FUiolqXxc-1wDzHdZq-Rz9JyM.roa
File:                     _1FUiolqXxc-1wDzHdZq-Rz9JyM.roa (raw, json)
Hash identifier:          dIq8hsQAzEPVMM0BCceWYJJQBr5pMZAJtCtNx39CNOg=
Subject key identifier:   FF:51:54:8A:89:6A:5F:17:3E:D7:00:F3:1D:D6:6A:F9:1C:FD:27:23
Certificate issuer:       /CN=c8d9d962d42886303a7192a52555d1da19e06307
Certificate serial:       01A13DFF22E61F0E3D1AE86961183D4E7584
Authority key identifier: C8:D9:D9:62:D4:28:86:30:3A:71:92:A5:25:55:D1:DA:19:E0:63:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNnZYtQohjA6cZKlJVXR2hngYwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/c6eb0f-c32d-4b66-ae25-ce5db002c9b2/1/_1FUiolqXxc-1wDzHdZq-Rz9JyM.roa
Signing time:             Thu 15 Oct 2026 05:18:13 +0000
ROA not before:           Thu 15 Oct 2026 05:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204300
IP address blocks:        193.24.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/c6eb0f-c32d-4b66-ae25-ce5db002c9b2/1/yNnZYtQohjA6cZKlJVXR2hngYwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/c6eb0f-c32d-4b66-ae25-ce5db002c9b2/1/yNnZYtQohjA6cZKlJVXR2hngYwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNnZYtQohjA6cZKlJVXR2hngYwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ff:22:e6:1f:0e:3d:1a:e8:69:61:18:3d:4e:75:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d9d962d42886303a7192a52555d1da19e06307
        Validity
            Not Before: Oct 15 05:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff51548a896a5f173ed700f31dd66af91cfd2723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:c8:a1:8c:98:a5:77:e2:43:b2:8e:d2:5e:
                    5f:e2:dd:5e:f8:ba:15:e1:b8:40:66:ef:98:9b:f0:
                    18:87:30:81:29:c1:6c:30:de:1b:da:63:0d:91:63:
                    c8:e2:69:85:08:81:b3:03:ca:7e:a9:0c:1e:4a:55:
                    9f:b1:59:b1:00:c5:fe:85:78:0f:4f:66:b1:9a:d3:
                    43:be:b6:31:2e:e6:57:09:7a:08:34:1b:11:bb:b5:
                    b6:e1:07:27:c9:29:5d:87:bb:1c:c4:ee:4e:6f:d9:
                    2f:3d:73:00:55:35:c2:9e:ae:55:04:2e:f0:62:5d:
                    bc:77:8c:9c:48:0e:d0:b6:09:ba:a9:0f:18:d3:79:
                    16:76:45:28:a4:fe:b9:36:aa:92:22:b3:b5:61:a6:
                    13:07:8a:37:9e:18:d0:a5:11:7c:d6:26:76:c8:52:
                    31:58:e2:0b:0c:c2:44:77:70:09:5b:9a:92:bd:81:
                    aa:b4:5b:86:e4:f6:3c:56:e5:73:cb:19:ac:1d:64:
                    56:81:14:d3:30:67:9e:e8:51:8b:c3:7e:b5:95:48:
                    be:a8:77:b9:14:76:c5:02:d4:26:ba:33:41:4f:7b:
                    3e:50:1e:2c:62:e9:20:aa:43:b6:e5:c8:50:69:1b:
                    87:b5:cf:d2:71:3e:e4:da:a7:8e:87:53:f6:e8:b1:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:51:54:8A:89:6A:5F:17:3E:D7:00:F3:1D:D6:6A:F9:1C:FD:27:23
            X509v3 Authority Key Identifier:
                keyid:C8:D9:D9:62:D4:28:86:30:3A:71:92:A5:25:55:D1:DA:19:E0:63:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNnZYtQohjA6cZKlJVXR2hngYwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c6eb0f-c32d-4b66-ae25-ce5db002c9b2/1/_1FUiolqXxc-1wDzHdZq-Rz9JyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c6eb0f-c32d-4b66-ae25-ce5db002c9b2/1/yNnZYtQohjA6cZKlJVXR2hngYwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:89:52:ff:76:65:b2:5e:f9:ad:2b:ae:b0:f2:3a:b8:89:1e:
         d8:a8:d8:39:1d:84:20:7c:6d:c7:6b:fb:20:c9:55:62:d1:df:
         c9:6a:65:27:57:7b:26:b0:e2:21:fc:10:6c:f2:0a:34:3b:e3:
         0e:c2:7b:ad:8e:46:6a:8f:fe:4d:81:68:92:86:df:24:f9:24:
         a4:40:7d:38:e8:25:b5:0b:b9:c3:d3:99:18:97:b8:7f:15:c8:
         88:33:05:1c:dc:88:7d:bd:9f:77:48:cc:eb:1b:c4:dd:36:e9:
         2a:84:4d:d7:44:c3:df:9e:da:1d:15:9a:23:76:d3:f2:6b:a7:
         a0:e9:7e:f7:df:b0:34:0c:ac:47:15:65:41:9a:6a:3e:c0:42:
         3c:a3:4d:c2:d4:35:05:fd:da:6f:29:b9:c6:2d:ef:db:81:95:
         12:0e:cf:38:d1:b0:eb:a8:53:d7:86:f0:df:cb:43:2e:ba:7a:
         87:50:f1:c5:18:f3:7a:bd:f6:f6:0e:17:3a:fd:d9:08:9e:16:
         a3:c1:bb:8d:d6:1e:e0:71:9d:bf:7d:37:21:1e:d4:6f:df:3c:
         9d:7b:2d:b5:48:ca:a1:5d:45:5e:d8:cc:6e:5a:40:10:8a:f0:
         64:9a:b6:47:ac:06:a8:e3:e4:99:ea:da:f5:fd:a7:11:f3:8d:
         78:b0:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:15:50 2026 by rpki-client