Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa
File:                     pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa (raw, json)
Hash identifier:          nLlZJFuKRcHnPRrTWYdH+coSN27tpwhU2HPjFKfGC1o=
Subject key identifier:   A4:D8:C6:5C:9F:92:79:AE:0D:8B:6A:55:CB:55:88:46:20:D8:10:31
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019965EAB0F59EDF6C68756303AE7AEFA9AC
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa
Signing time:             Sat 20 Sep 2025 06:58:23 +0000
ROA not before:           Sat 20 Sep 2025 06:58:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48011
IP address blocks:        5.172.177.0/24 maxlen: 24
                          45.89.236.0/22 maxlen: 24
                          45.93.168.0/22 maxlen: 24
                          45.93.168.0/24 maxlen: 24
                          45.252.180.0/23 maxlen: 23
                          45.252.180.0/24 maxlen: 24
                          45.252.181.0/24 maxlen: 24
                          45.252.182.0/23 maxlen: 23
                          45.252.182.0/24 maxlen: 24
                          45.252.183.0/24 maxlen: 24
                          62.204.58.0/24 maxlen: 24
                          77.87.122.0/24 maxlen: 24
                          87.236.161.0/24 maxlen: 24
                          91.247.188.0/24 maxlen: 24
                          103.5.203.0/24 maxlen: 24
                          103.92.118.0/23 maxlen: 24
                          103.130.145.0/24 maxlen: 24
                          103.130.147.0/24 maxlen: 24
                          103.215.238.0/23 maxlen: 24
                          110.172.145.0/24 maxlen: 24
                          185.104.189.0/24 maxlen: 24
                          185.182.105.0/24 maxlen: 24
                          185.211.79.0/24 maxlen: 24
                          185.217.143.0/24 maxlen: 24
                          185.227.136.0/24 maxlen: 24
                          185.227.137.0/24 maxlen: 24
                          185.227.138.0/24 maxlen: 24
                          185.227.139.0/24 maxlen: 24
                          193.163.72.0/24 maxlen: 24
                          213.217.31.0/24 maxlen: 24
                          213.232.203.0/24 maxlen: 24
                          2a0c:6600::/48 maxlen: 48
                          2a0c:6600:1::/48 maxlen: 48
                          2a0c:6600:2::/48 maxlen: 48
                          2a0c:6600:3::/48 maxlen: 48
                          2a0c:6600:4::/48 maxlen: 48
                          2a0c:6600:5::/48 maxlen: 48
                          2a0c:6600:6::/48 maxlen: 48
                          2a0c:6600:7::/48 maxlen: 48
                          2a0c:6600:8::/48 maxlen: 48
                          2a0c:6600:9::/48 maxlen: 48
                          2a0c:6600:10::/48 maxlen: 48
                          2a0c:6600:11::/48 maxlen: 48
                          2a0c:6600:12::/48 maxlen: 48
                          2a0c:6600:1000::/48 maxlen: 48
                          2a0c:6600:2000::/48 maxlen: 48
                          2a0c:6600:3000::/48 maxlen: 48
                          2a0c:6600:4000::/48 maxlen: 48
                          2a0c:6600:6000::/48 maxlen: 48
                          2a0c:6600:6600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:65:ea:b0:f5:9e:df:6c:68:75:63:03:ae:7a:ef:a9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Sep 20 06:58:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a4d8c65c9f9279ae0d8b6a55cb55884620d81031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:59:b8:60:38:0b:f0:81:93:2c:78:ec:46:
                    43:f1:0f:2d:5f:ff:bf:90:1f:b6:3f:95:12:c5:b3:
                    b4:3d:84:57:b7:7c:7f:8c:11:c3:11:3e:4f:ec:d5:
                    9e:59:47:36:7b:c0:1e:d0:d6:8f:a4:e1:29:04:14:
                    a6:8b:e2:d3:a9:b0:58:c6:e3:a8:e6:a4:46:5f:ca:
                    ea:64:6f:0e:90:9a:74:c0:29:63:7e:5e:c2:a1:d3:
                    f2:74:55:74:ff:01:a9:6f:e0:0f:25:56:52:b0:ec:
                    fe:73:32:d7:13:7d:d4:2e:25:4b:da:5e:ff:eb:25:
                    1a:d8:b4:18:f5:98:9c:68:79:ce:a5:04:55:d4:a1:
                    10:58:e1:48:76:f7:61:d1:54:02:95:8b:ca:e6:4f:
                    b7:94:2b:be:c6:93:01:d1:84:32:7c:be:2f:77:9e:
                    31:32:7a:31:93:74:5a:06:06:8e:1e:fc:9c:bb:2e:
                    c6:4e:13:18:34:be:ea:aa:30:cf:16:95:45:18:cb:
                    bc:58:48:78:72:ae:15:19:bc:fa:ad:86:f2:9c:db:
                    8b:7f:97:bb:da:04:7f:a5:bb:22:70:be:cc:9b:f7:
                    e9:b1:b3:e1:aa:ec:b6:9d:a9:97:6c:df:9c:f1:09:
                    98:18:2a:39:ee:54:a7:8e:36:f3:da:7e:92:89:6a:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D8:C6:5C:9F:92:79:AE:0D:8B:6A:55:CB:55:88:46:20:D8:10:31
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.177.0/24
                  45.89.236.0/22
                  45.93.168.0/22
                  45.252.180.0/22
                  62.204.58.0/24
                  77.87.122.0/24
                  87.236.161.0/24
                  91.247.188.0/24
                  103.5.203.0/24
                  103.92.118.0/23
                  103.130.145.0/24
                  103.130.147.0/24
                  103.215.238.0/23
                  110.172.145.0/24
                  185.104.189.0/24
                  185.182.105.0/24
                  185.211.79.0/24
                  185.217.143.0/24
                  185.227.136.0/22
                  193.163.72.0/24
                  213.217.31.0/24
                  213.232.203.0/24
                IPv6:
                  2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff
                  2a0c:6600:10::-2a0c:6600:12:ffff:ffff:ffff:ffff:ffff
                  2a0c:6600:1000::/48
                  2a0c:6600:2000::/48
                  2a0c:6600:3000::/48
                  2a0c:6600:4000::/48
                  2a0c:6600:6000::/48
                  2a0c:6600:6600::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:13:f4:20:86:9d:ea:2e:ab:4e:3d:59:b8:db:14:46:fe:de:
         71:1d:80:1f:2f:01:6f:c1:59:d8:57:80:5d:d9:17:44:3c:5e:
         f6:52:12:d4:27:62:d2:35:12:aa:f1:5b:50:1c:b0:e1:6b:fd:
         69:69:c3:86:46:3b:47:0f:44:fc:62:1c:54:ef:c7:f1:e1:fc:
         00:72:83:2c:42:a6:51:5e:14:33:64:05:df:f6:8d:6a:d3:c7:
         94:78:4d:9f:8a:dd:ca:f8:88:77:73:94:ca:5c:9d:5d:63:cf:
         2c:ce:f3:f8:34:9d:d6:f8:b7:f8:bc:d6:d3:c5:31:71:7a:8e:
         a2:61:50:07:38:01:92:0b:54:bd:dc:39:0e:77:8a:c9:1a:c3:
         de:3e:87:10:ce:ff:dc:45:8f:42:4a:22:3f:11:98:5d:c1:7e:
         5f:db:33:fa:f6:e1:aa:9a:76:1a:3e:3f:bd:0e:f2:df:df:0f:
         66:76:9b:3d:00:d4:75:ef:c4:4a:f8:c4:81:f1:23:31:4c:c7:
         d1:b2:56:43:46:bf:db:5c:cc:a4:ce:74:3f:3a:9e:78:e9:a4:
         ba:44:42:f7:5d:47:c2:6a:b0:ab:68:52:c7:d6:18:a8:4f:bc:
         fc:3b:55:a3:a9:64:08:23:ab:5a:47:2f:09:74:d5:27:ec:49:
         ac:6a:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:01 2025 by rpki-client