Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Gp3o2MiF1oou94m1N0eClpvHzrY.roa
File:                     Gp3o2MiF1oou94m1N0eClpvHzrY.roa (raw, json)
Hash identifier:          WlZdRex8WZO5KKcEySDhE9mngOOw2FW15QB8WoCkJfU=
Subject key identifier:   1A:9D:E8:D8:C8:85:D6:8A:2E:F7:89:B5:37:47:82:96:9B:C7:CE:B6
Certificate issuer:       /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial:       019934D4F5699C00D58EE0C37C906111462E
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Gp3o2MiF1oou94m1N0eClpvHzrY.roa
Signing time:             Wed 10 Sep 2025 18:13:15 +0000
ROA not before:           Wed 10 Sep 2025 18:13:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12844
IP address blocks:        62.100.196.0/22 maxlen: 24
                          62.100.208.0/24 maxlen: 24
                          185.71.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:d4:f5:69:9c:00:d5:8e:e0:c3:7c:90:61:11:46:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
        Validity
            Not Before: Sep 10 18:13:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a9de8d8c885d68a2ef789b5374782969bc7ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:75:6b:d3:fc:87:f6:2b:bb:87:bf:95:67:
                    be:88:02:97:26:bb:24:91:fe:2a:9a:f1:01:52:21:
                    16:8d:ca:8d:92:0e:03:ab:07:52:f5:1e:b8:c9:ca:
                    67:22:d1:83:74:72:cf:c7:be:35:59:85:89:12:c6:
                    89:e5:44:f0:0c:e8:ff:5a:71:1d:c9:78:54:c3:9a:
                    22:82:33:98:22:b9:fd:0f:4a:db:45:0f:62:bb:f8:
                    b5:a8:6d:47:6a:fb:59:79:0a:9a:bb:72:ac:6a:17:
                    b6:3c:e9:37:02:8b:d9:a4:1f:b8:01:04:38:63:46:
                    48:e4:e8:2c:bd:67:3e:fd:9a:ec:3f:63:1d:2a:9f:
                    11:d2:79:33:e2:b9:20:d9:58:3f:b9:48:db:60:49:
                    15:77:58:02:39:8a:c5:24:1f:b4:65:bf:18:8d:42:
                    a5:3c:93:2f:fc:de:de:d0:ce:64:e5:fd:8e:b2:7c:
                    dd:ce:83:ae:76:95:7a:61:14:0f:c9:33:7a:c7:14:
                    d7:c9:f2:05:97:51:cd:63:31:2e:c4:41:84:de:74:
                    28:ea:5d:39:1e:e8:cc:80:b2:68:89:07:ea:21:c7:
                    2a:40:15:c5:92:af:5b:32:ee:df:08:4d:a1:77:27:
                    42:b1:9b:3b:e1:77:2f:41:b2:b1:38:9d:56:fa:a3:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:E8:D8:C8:85:D6:8A:2E:F7:89:B5:37:47:82:96:9B:C7:CE:B6
            X509v3 Authority Key Identifier:
                keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Gp3o2MiF1oou94m1N0eClpvHzrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.100.196.0/22
                  62.100.208.0/24
                  185.71.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:49:f3:0e:cc:75:f0:0f:e6:c6:ab:13:2f:fe:29:1e:1c:
         35:c8:4a:57:8d:d0:ae:b9:d6:bb:b3:d5:7f:4e:ad:d3:c8:55:
         36:43:4a:1d:9a:81:f8:00:dc:80:60:b9:36:4c:b6:8c:59:7b:
         6c:8e:ca:d7:80:04:66:88:45:05:a7:cc:04:9e:88:38:65:46:
         ec:60:ae:3a:8a:07:13:d8:78:bb:33:89:fd:cc:81:0f:5e:e3:
         ba:6b:5e:2a:0b:1a:2c:74:01:63:84:9c:55:61:58:18:f0:c5:
         e4:fc:2c:49:26:12:ac:32:39:a0:e2:31:5c:73:41:2e:0c:56:
         25:6b:c2:29:2d:4e:b1:95:29:90:d7:8f:09:90:cd:bb:bf:75:
         47:7c:47:47:88:d0:eb:80:a3:67:d8:9d:a7:8a:2a:3f:64:2a:
         2f:e8:2c:cf:dd:c3:7d:17:60:76:5a:fe:05:12:91:3f:86:46:
         16:33:8c:00:02:9a:96:c4:80:d6:d5:d2:e9:45:7b:ff:7d:ad:
         00:78:dd:4a:2f:6d:3e:0a:b0:8e:ea:39:1e:f9:e1:30:05:80:
         00:fe:4b:52:0b:28:0a:98:91:52:88:42:50:cd:64:21:00:d8:
         2e:e3:f7:92:2a:1f:53:6b:b8:c3:16:96:c5:e8:73:6b:1c:36:
         53:b6:07:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZk01PVpnADVjuDDfJBhEUYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjUwOTEwMTgxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTlkZThkOGM4ODVkNjhhMmVmNzg5YjUzNzQ3ODI5NjliYzdjZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD51a9P8h/Yru4e/lWe+iAKXJrsk
kf4qmvEBUiEWjcqNkg4DqwdS9R64ycpnItGDdHLPx741WYWJEsaJ5UTwDOj/WnEd
yXhUw5oigjOYIrn9D0rbRQ9iu/i1qG1HavtZeQqau3Ksahe2POk3AovZpB+4AQQ4
Y0ZI5OgsvWc+/ZrsP2MdKp8R0nkz4rkg2Vg/uUjbYEkVd1gCOYrFJB+0Zb8YjUKl
PJMv/N7e0M5k5f2OsnzdzoOudpV6YRQPyTN6xxTXyfIFl1HNYzEuxEGE3nQo6l05
HujMgLJoiQfqIccqQBXFkq9bMu7fCE2hdydCsZs74XcvQbKxOJ1W+qN+lQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBqd6NjIhdaKLveJtTdHgpabx862MB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvR3AzbzJNaUYxb291OTRtMU4wZUNscHZIenJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCPmTEAwQA
PmTQAwQBuUfcMA0GCSqGSIb3DQEBCwUAA4IBAQBC+UnzDsx18A/mxqsTL/4pHhw1
yEpXjdCuuda7s9V/Tq3TyFU2Q0odmoH4ANyAYLk2TLaMWXtsjsrXgARmiEUFp8wE
nog4ZUbsYK46igcT2Hi7M4n9zIEPXuO6a14qCxosdAFjhJxVYVgY8MXk/CxJJhKs
Mjmg4jFcc0EuDFYla8IpLU6xlSmQ148JkM27v3VHfEdHiNDrgKNn2J2niio/ZCov
6CzP3cN9F2B2Wv4FEpE/hkYWM4wAApqWxIDW1dLpRXv/fa0AeN1KL20+CrCO6jke
+eEwBYAA/ktSCygKmJFSiEJQzWQhANgu4/eSKh9Ta7jDFpbF6HNrHDZTtgdA
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:10 2025 by rpki-client