Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/nOLrCsdhrfTTZS23B83VQlL1lGQ.roa
File:                     nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (raw, json)
Hash identifier:          8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=
Subject key identifier:   9C:E2:EB:0A:C7:61:AD:F4:D3:65:2D:B7:07:CD:D5:42:52:F5:94:64
Certificate issuer:       /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial:       019F7491B5C6D58FBE8F382772983B75E1A6
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/nOLrCsdhrfTTZS23B83VQlL1lGQ.roa
Signing time:             Sat 18 Jul 2026 09:32:14 +0000
ROA not before:           Sat 18 Jul 2026 09:32:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203757
IP address blocks:        2001:67c:7d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:74:91:b5:c6:d5:8f:be:8f:38:27:72:98:3b:75:e1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
        Validity
            Not Before: Jul 18 09:32:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9ce2eb0ac761adf4d3652db707cdd54252f59464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:08:6e:1b:03:c8:08:22:2d:31:93:68:aa:
                    7c:6f:a3:c6:2a:37:f7:08:99:fc:62:ac:72:44:fd:
                    4f:92:9b:b7:f2:f2:91:a8:79:ed:42:c5:7f:16:95:
                    f0:24:8c:e8:ab:22:66:c8:f5:bd:29:33:19:94:a3:
                    a2:2d:76:dd:6e:39:ee:37:41:92:3a:17:c4:3b:3d:
                    cf:93:22:92:18:7c:21:bd:c8:3d:2c:37:c8:fe:21:
                    46:11:da:49:a7:03:6a:47:2c:38:5d:4a:e5:fd:a0:
                    bb:7b:73:62:84:3b:e4:76:42:1c:7c:c7:29:03:42:
                    58:20:8e:7b:f9:c9:fb:1f:d1:fc:80:7a:57:6f:71:
                    20:43:19:02:d0:4f:70:8a:6a:cc:4c:48:51:fb:f7:
                    ec:c2:3f:d1:56:99:fe:99:98:cb:bd:95:3d:fd:f7:
                    0a:b8:41:f7:80:a0:a3:23:87:40:ff:63:f1:10:1f:
                    99:8c:41:3a:ec:a0:8e:c9:72:da:8e:83:ed:8f:30:
                    2b:5b:36:81:dd:73:d3:08:16:bb:f8:e9:2a:fe:19:
                    d2:67:ee:dc:96:fd:34:f9:42:a0:19:57:12:bd:3a:
                    e1:e7:c2:5f:2e:66:d5:e1:42:fd:df:86:a4:0f:72:
                    0b:90:04:42:41:b5:e3:e2:07:63:aa:1f:f5:a4:66:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:EB:0A:C7:61:AD:F4:D3:65:2D:B7:07:CD:D5:42:52:F5:94:64
            X509v3 Authority Key Identifier:
                keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/nOLrCsdhrfTTZS23B83VQlL1lGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:7d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:e7:f4:84:11:b3:e1:24:e7:5b:e4:91:cf:7b:75:83:9a:
         77:37:42:ee:25:0c:a4:7f:67:c2:8f:ae:fe:3a:2d:f8:b8:6a:
         53:18:27:86:68:e5:bd:10:78:d1:17:52:0f:c7:c7:f7:8f:e3:
         52:0f:a9:c2:c7:33:65:48:8e:64:95:5a:d3:3c:47:8c:3c:7a:
         f4:19:59:a1:3c:1a:a5:b6:27:3c:e3:00:44:ee:bd:56:d0:b0:
         46:3c:6e:70:e5:2b:dc:eb:1c:27:80:c4:5b:71:82:9a:e8:26:
         8e:99:3b:53:0b:29:0e:51:fa:c4:42:55:a1:98:cb:9f:11:db:
         6f:2f:79:bb:e1:1f:17:5d:a8:a3:46:95:ed:c2:10:d7:a6:89:
         3f:a1:9e:45:61:b9:6c:b1:d5:49:b3:00:04:c0:26:94:f1:0b:
         3c:ae:7d:d7:12:bf:ae:16:a9:9b:81:fa:c7:b5:0e:d1:53:8d:
         22:16:f6:c2:48:2c:f2:26:80:33:af:2e:2e:40:50:2e:ed:1f:
         ab:ca:5d:c4:45:69:26:03:80:7d:29:06:8d:f3:f8:7c:30:10:
         f2:d9:ed:a6:47:e5:b7:76:93:a3:8c:ba:08:0b:f6:14:93:52:
         43:9a:61:6a:18:94:ef:b3:6f:12:bb:f9:50:a3:15:90:14:7b:
         78:8a:a4:7e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ90kbXG1Y++jzgncpg7deGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZWRhMjAyZmYxZDdmMzUxMjdiMTFkZWExZDUwZjM2N2Vh
MmU5OWEwHhcNMjYwNzE4MDkzMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2UyZWIwYWM3NjFhZGY0ZDM2NTJkYjcwN2NkZDU0MjUyZjU5NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt54IbhsDyAgiLTGTaKp8b6PGKjf3
CJn8YqxyRP1Pkpu38vKRqHntQsV/FpXwJIzoqyJmyPW9KTMZlKOiLXbdbjnuN0GS
OhfEOz3PkyKSGHwhvcg9LDfI/iFGEdpJpwNqRyw4XUrl/aC7e3NihDvkdkIcfMcp
A0JYII57+cn7H9H8gHpXb3EgQxkC0E9wimrMTEhR+/fswj/RVpn+mZjLvZU9/fcK
uEH3gKCjI4dA/2PxEB+ZjEE67KCOyXLajoPtjzArWzaB3XPTCBa7+Okq/hnSZ+7c
lv00+UKgGVcSvTrh58JfLmbV4UL934akD3ILkARCQbXj4gdjqh/1pGbiBwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJzi6wrHYa3002UttwfN1UJS9ZRkMB8GA1UdIwQY
MBaAFLftogL/HX81EnsR3qHVDzZ+oumaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdC0yaUF2OGRmelVTZXhIZW9kVVBObjZpNlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82YWU3NmQtYjU5OS00MzllLWIxN2Et
MmJmZjFhNzAwMGE5LzEvbk9MckNzZGhyZlRUWlMyM0I4M1ZRbEwxbEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82YWU3NmQtYjU5OS00MzllLWIxN2EtMmJmZjFhNzAwMGE5
LzEvdC0yaUF2OGRmelVTZXhIZW9kVVBObjZpNlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAfQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBOgef0hBGz4STnW+SRz3t1g5p3N0LuJQykf2fC
j67+Oi34uGpTGCeGaOW9EHjRF1IPx8f3j+NSD6nCxzNlSI5klVrTPEeMPHr0GVmh
PBqltic84wBE7r1W0LBGPG5w5Svc6xwngMRbcYKa6CaOmTtTCykOUfrEQlWhmMuf
EdtvL3m74R8XXaijRpXtwhDXpok/oZ5FYblssdVJswAEwCaU8Qs8rn3XEr+uFqmb
gfrHtQ7RU40iFvbCSCzyJoAzry4uQFAu7R+ryl3ERWkmA4B9KQaN8/h8MBDy2e2m
R+W3dpOjjLoIC/YUk1JDmmFqGJTvs28Su/lQoxWQFHt4iqR+
-----END CERTIFICATE-----