Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/R_VE7I1x806EwoUXiVIa0NbmKcE.roa
File:                     R_VE7I1x806EwoUXiVIa0NbmKcE.roa (raw, json)
Hash identifier:          ZLm5fL0I7xiA37P8uAbGttpZNuJsPoY5cD/EgAdWn4k=
Subject key identifier:   47:F5:44:EC:8D:71:F3:4E:84:C2:85:17:89:52:1A:D0:D6:E6:29:C1
Certificate issuer:       /CN=e626419c7a7cbb5a295a603e1e20ab588046a8d5
Certificate serial:       01A0AEFFAEB923E0540229A03D249602980A
Authority key identifier: E6:26:41:9C:7A:7C:BB:5A:29:5A:60:3E:1E:20:AB:58:80:46:A8:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/R_VE7I1x806EwoUXiVIa0NbmKcE.roa
Signing time:             Thu 17 Sep 2026 10:53:07 +0000
ROA not before:           Thu 17 Sep 2026 10:53:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210741
IP address blocks:        194.62.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ae:ff:ae:b9:23:e0:54:02:29:a0:3d:24:96:02:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e626419c7a7cbb5a295a603e1e20ab588046a8d5
        Validity
            Not Before: Sep 17 10:53:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47f544ec8d71f34e84c2851789521ad0d6e629c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:d3:81:09:14:8d:15:ca:f3:ab:ab:ac:bc:
                    93:22:80:61:60:05:63:3b:3e:be:68:0e:33:77:a2:
                    e2:a9:6a:f3:b5:6e:5b:d9:fa:e8:83:cd:d5:e6:b6:
                    fb:50:fd:e9:cf:95:18:1c:30:b9:89:f6:6a:48:7b:
                    7a:c9:ec:34:d2:30:46:d3:35:ac:b6:ca:f4:1e:77:
                    6e:67:4a:7f:32:5b:2f:05:ad:4e:a3:18:2b:f1:f7:
                    a8:f6:e6:f2:6d:78:fb:8f:0c:d3:48:36:01:be:6b:
                    d6:55:9a:f6:58:33:54:32:24:4f:ff:e7:d0:ef:e7:
                    44:2e:e2:3f:90:f0:ec:9a:2e:84:e8:56:b0:2a:ca:
                    6b:b1:30:c2:d9:c9:88:78:8d:e7:a3:71:f7:f9:79:
                    e4:0d:68:f1:5a:78:c9:af:67:84:eb:2e:55:8d:77:
                    90:ce:cf:ed:24:34:a2:5a:7f:3c:f7:ea:86:26:05:
                    49:d1:1c:0d:b0:0f:b2:2a:c1:81:e7:8d:32:1f:d3:
                    6c:ea:2e:40:09:c6:0a:72:de:76:c6:63:6a:fd:4e:
                    3c:ff:c9:0b:90:d5:4e:41:20:c0:b1:6e:aa:29:71:
                    b6:f6:02:25:d2:a7:39:8b:be:15:8c:b7:0c:8f:80:
                    19:49:5b:62:64:82:9f:cf:42:69:39:7c:0a:24:04:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:44:EC:8D:71:F3:4E:84:C2:85:17:89:52:1A:D0:D6:E6:29:C1
            X509v3 Authority Key Identifier:
                keyid:E6:26:41:9C:7A:7C:BB:5A:29:5A:60:3E:1E:20:AB:58:80:46:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iZBnHp8u1opWmA-HiCrWIBGqNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/R_VE7I1x806EwoUXiVIa0NbmKcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e12bc8-e4ca-488f-80ec-0c6d6c66eb74/1/5iZBnHp8u1opWmA-HiCrWIBGqNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:ba:0e:a2:33:9f:4e:c4:6a:ab:10:c4:cf:e3:7c:d4:bf:
         61:a0:61:fc:ed:2c:65:cb:41:59:e7:13:26:60:df:b9:d3:48:
         ac:7e:3f:4c:29:fa:f9:24:90:0d:0c:b1:c0:d2:3e:9b:ac:c5:
         77:da:bc:68:12:f3:a8:db:ed:ca:65:4b:72:f7:17:10:9b:07:
         9a:52:99:ad:55:09:fc:c1:05:37:7c:51:03:04:e2:e6:d1:ea:
         94:cf:ac:29:a7:38:2f:fe:32:60:ee:0a:c2:5b:d6:91:44:54:
         f9:c3:10:df:79:5e:1d:5f:65:bf:3d:e9:e2:fa:51:2b:98:2e:
         2c:50:e6:02:8c:ab:ca:49:15:40:a6:d7:0e:3b:78:5f:bc:f7:
         90:fd:5f:37:e3:1b:4e:d3:57:50:09:9e:da:46:53:4c:eb:04:
         d0:47:36:14:68:66:7e:15:87:92:4f:17:b9:ca:20:fa:a8:e0:
         28:2e:50:1a:d4:9f:93:79:8c:13:56:af:c3:d2:33:f1:7e:b1:
         a2:3b:bb:10:98:2a:26:9d:0b:ba:f7:96:38:9b:4b:df:d0:1d:
         3f:24:ac:07:58:78:e1:39:a0:3e:62:e0:3f:fc:f6:ad:e2:f1:
         e8:97:2f:ec:07:28:1d:6c:74:01:0b:9f:b9:c9:34:7b:bc:ce:
         a0:94:5d:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCu/665I+BUAimgPSSWApgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MjY0MTljN2E3Y2JiNWEyOTVhNjAzZTFlMjBhYjU4ODA0
NmE4ZDUwHhcNMjYwOTE3MTA1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2Y1NDRlYzhkNzFmMzRlODRjMjg1MTc4OTUyMWFkMGQ2ZTYyOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCjTgQkUjRXK86urrLyTIoBhYAVj
Oz6+aA4zd6LiqWrztW5b2frog83V5rb7UP3pz5UYHDC5ifZqSHt6yew00jBG0zWs
tsr0HnduZ0p/MlsvBa1Ooxgr8feo9ubybXj7jwzTSDYBvmvWVZr2WDNUMiRP/+fQ
7+dELuI/kPDsmi6E6FawKsprsTDC2cmIeI3no3H3+XnkDWjxWnjJr2eE6y5VjXeQ
zs/tJDSiWn889+qGJgVJ0RwNsA+yKsGB540yH9Ns6i5ACcYKct52xmNq/U48/8kL
kNVOQSDAsW6qKXG29gIl0qc5i74VjLcMj4AZSVtiZIKfz0JpOXwKJAT0ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEf1ROyNcfNOhMKFF4lSGtDW5inBMB8GA1UdIwQY
MBaAFOYmQZx6fLtaKVpgPh4gq1iARqjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlaQm5IcDh1MW9wV21BLUhpQ3JXSUJHcU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMTJiYzgtZTRjYS00ODhmLTgwZWMt
MGM2ZDZjNjZlYjc0LzEvUl9WRTdJMXg4MDZFd29VWGlWSWEwTmJtS2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMTJiYzgtZTRjYS00ODhmLTgwZWMtMGM2ZDZjNjZlYjc0
LzEvNWlaQm5IcDh1MW9wV21BLUhpQ3JXSUJHcU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5zMA0G
CSqGSIb3DQEBCwUAA4IBAQAB6LoOojOfTsRqqxDEz+N81L9hoGH87Sxly0FZ5xMm
YN+500isfj9MKfr5JJANDLHA0j6brMV32rxoEvOo2+3KZUty9xcQmweaUpmtVQn8
wQU3fFEDBOLm0eqUz6wppzgv/jJg7grCW9aRRFT5wxDfeV4dX2W/Peni+lErmC4s
UOYCjKvKSRVAptcOO3hfvPeQ/V834xtO01dQCZ7aRlNM6wTQRzYUaGZ+FYeSTxe5
yiD6qOAoLlAa1J+TeYwTVq/D0jPxfrGiO7sQmComnQu695Y4m0vf0B0/JKwHWHjh
OaA+YuA//Pat4vHoly/sBygdbHQBC5+5yTR7vM6glF0G
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:35 2026 by rpki-client