Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/paVOpGcb1H0GxwnvFjCm56xxVdc.roa
File:                     paVOpGcb1H0GxwnvFjCm56xxVdc.roa (raw, json)
Hash identifier:          9QOqOZ/+HYoyFH3uyR9vue8YKnF7n4M307q1TSOtzck=
Subject key identifier:   A5:A5:4E:A4:67:1B:D4:7D:06:C7:09:EF:16:30:A6:E7:AC:71:55:D7
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       0199B997D955E771AC7CA514A5E64ED96073
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/paVOpGcb1H0GxwnvFjCm56xxVdc.roa
Signing time:             Mon 06 Oct 2025 12:56:00 +0000
ROA not before:           Mon 06 Oct 2025 12:56:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     719
IP address blocks:        31.7.16.0/20 maxlen: 20
                          46.182.112.0/21 maxlen: 21
                          62.142.0.0/16 maxlen: 16
                          62.148.192.0/19 maxlen: 19
                          62.216.96.0/19 maxlen: 19
                          62.240.64.0/19 maxlen: 19
                          62.248.128.0/17 maxlen: 17
                          77.109.192.0/18 maxlen: 18
                          80.81.160.0/19 maxlen: 19
                          80.88.176.0/20 maxlen: 20
                          80.186.0.0/16 maxlen: 16
                          80.248.96.0/19 maxlen: 19
                          81.197.0.0/16 maxlen: 16
                          81.209.0.0/17 maxlen: 17
                          82.103.192.0/18 maxlen: 18
                          82.118.192.0/19 maxlen: 19
                          82.141.64.0/18 maxlen: 18
                          82.215.192.0/18 maxlen: 18
                          83.245.128.0/17 maxlen: 17
                          84.230.0.0/15 maxlen: 15
                          85.76.0.0/14 maxlen: 14
                          85.156.0.0/16 maxlen: 16
                          85.157.0.0/16 maxlen: 16
                          85.217.0.0/17 maxlen: 17
                          88.112.0.0/14 maxlen: 14
                          91.152.0.0/13 maxlen: 13
                          94.22.0.0/16 maxlen: 16
                          109.232.80.0/21 maxlen: 21
                          139.97.0.0/16 maxlen: 16
                          178.251.56.0/21 maxlen: 21
                          192.77.120.0/22 maxlen: 22
                          192.102.32.0/24 maxlen: 24
                          192.102.36.0/24 maxlen: 24
                          192.102.37.0/24 maxlen: 24
                          192.102.38.0/24 maxlen: 24
                          192.102.39.0/24 maxlen: 24
                          192.102.40.0/24 maxlen: 24
                          192.102.41.0/24 maxlen: 24
                          192.102.42.0/24 maxlen: 24
                          192.102.49.0/24 maxlen: 24
                          192.102.50.0/24 maxlen: 24
                          192.126.1.0/24 maxlen: 24
                          192.126.23.0/24 maxlen: 24
                          192.126.24.0/24 maxlen: 24
                          192.126.35.0/24 maxlen: 24
                          192.126.44.0/24 maxlen: 24
                          192.126.46.0/24 maxlen: 24
                          192.163.32.0/19 maxlen: 19
                          192.163.64.0/18 maxlen: 18
                          192.163.128.0/19 maxlen: 19
                          192.175.45.0/24 maxlen: 24
                          193.64.0.0/15 maxlen: 15
                          193.66.0.0/16 maxlen: 16
                          193.94.0.0/16 maxlen: 16
                          193.184.0.0/15 maxlen: 15
                          193.199.0.0/16 maxlen: 16
                          193.229.0.0/16 maxlen: 16
                          194.86.0.0/16 maxlen: 16
                          194.136.0.0/16 maxlen: 16
                          194.157.0.0/16 maxlen: 16
                          194.188.0.0/16 maxlen: 16
                          194.211.0.0/16 maxlen: 16
                          194.240.0.0/15 maxlen: 15
                          195.16.192.0/19 maxlen: 19
                          195.74.0.0/19 maxlen: 19
                          195.170.128.0/19 maxlen: 19
                          195.197.0.0/16 maxlen: 16
                          195.218.64.0/19 maxlen: 19
                          195.236.0.0/15 maxlen: 15
                          195.238.192.0/19 maxlen: 19
                          195.255.0.0/16 maxlen: 16
                          212.38.224.0/20 maxlen: 20
                          212.38.240.0/24 maxlen: 24
                          212.38.241.0/24 maxlen: 24
                          212.38.242.0/24 maxlen: 24
                          212.38.243.0/24 maxlen: 24
                          212.38.244.0/24 maxlen: 24
                          212.50.192.0/19 maxlen: 19
                          212.54.0.0/19 maxlen: 19
                          212.63.0.0/19 maxlen: 19
                          212.226.0.0/16 maxlen: 16
                          212.246.0.0/16 maxlen: 16
                          213.130.224.0/19 maxlen: 19
                          213.161.32.0/19 maxlen: 19
                          213.169.0.0/19 maxlen: 19
                          213.192.128.0/18 maxlen: 18
                          213.250.64.0/18 maxlen: 18
                          217.24.96.0/20 maxlen: 20
                          217.25.96.0/20 maxlen: 20
                          217.77.192.0/20 maxlen: 20
                          217.152.0.0/16 maxlen: 16
                          2001:671::/48 maxlen: 48
                          2001:671:fc00::/40 maxlen: 40
                          2001:671:fd00::/40 maxlen: 40
                          2001:671:fe00::/40 maxlen: 40
                          2001:671:ff00::/40 maxlen: 40
                          2001:998::/29 maxlen: 32
                          2001:9f0::/29 maxlen: 29
                          2001:1658::/29 maxlen: 29
                          2a00:1dd0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:b9:97:d9:55:e7:71:ac:7c:a5:14:a5:e6:4e:d9:60:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Oct  6 12:56:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a5a54ea4671bd47d06c709ef1630a6e7ac7155d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:79:b6:99:04:cf:1e:69:44:13:19:78:39:
                    94:74:64:0f:be:06:a4:04:ba:26:33:39:72:4a:ca:
                    43:2e:06:39:2b:d4:f6:6e:49:12:5b:b1:51:2e:78:
                    a4:63:aa:24:64:2d:89:fd:80:93:f8:c2:fc:a9:ac:
                    72:39:fc:b6:e0:d6:d4:83:f4:36:8e:19:89:2f:d6:
                    50:2e:a2:3f:d9:c1:61:97:78:28:93:18:8b:3d:46:
                    84:bd:f6:41:9f:c5:b7:e8:4f:41:a8:96:01:87:0b:
                    71:f5:2e:6c:c0:cb:98:b0:28:d1:b6:4b:44:b5:c1:
                    1b:bd:87:54:08:b0:15:63:de:d8:20:d4:ac:98:7d:
                    53:ee:8d:c8:18:2d:6a:f3:91:a6:38:02:34:79:6d:
                    37:ec:35:92:97:cb:62:0d:fa:80:40:17:80:9e:83:
                    5f:8e:04:e0:d9:7b:d0:b1:64:b6:7b:cb:79:f8:f5:
                    f7:3e:83:79:1b:74:0a:a5:e9:50:c3:b6:5b:0c:df:
                    2b:30:dd:1e:62:e9:79:89:66:a5:e3:1b:4e:71:f4:
                    d7:40:32:cc:bf:b2:2d:1d:19:11:48:9d:b1:60:a9:
                    2b:ac:65:27:44:07:19:c6:67:ad:0f:91:0d:3e:1e:
                    27:c3:64:89:c3:bc:fa:8e:b4:d9:01:a1:73:7b:69:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A5:4E:A4:67:1B:D4:7D:06:C7:09:EF:16:30:A6:E7:AC:71:55:D7
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/paVOpGcb1H0GxwnvFjCm56xxVdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.7.16.0/20
                  46.182.112.0/21
                  62.142.0.0/16
                  62.148.192.0/19
                  62.216.96.0/19
                  62.240.64.0/19
                  62.248.128.0/17
                  77.109.192.0/18
                  80.81.160.0/19
                  80.88.176.0/20
                  80.186.0.0/16
                  80.248.96.0/19
                  81.197.0.0/16
                  81.209.0.0/17
                  82.103.192.0/18
                  82.118.192.0/19
                  82.141.64.0/18
                  82.215.192.0/18
                  83.245.128.0/17
                  84.230.0.0/15
                  85.76.0.0/14
                  85.156.0.0/15
                  85.217.0.0/17
                  88.112.0.0/14
                  91.152.0.0/13
                  94.22.0.0/16
                  109.232.80.0/21
                  139.97.0.0/16
                  178.251.56.0/21
                  192.77.120.0/22
                  192.102.32.0/24
                  192.102.36.0-192.102.42.255
                  192.102.49.0-192.102.50.255
                  192.126.1.0/24
                  192.126.23.0-192.126.24.255
                  192.126.35.0/24
                  192.126.44.0/24
                  192.126.46.0/24
                  192.163.32.0-192.163.159.255
                  192.175.45.0/24
                  193.64.0.0-193.66.255.255
                  193.94.0.0/16
                  193.184.0.0/15
                  193.199.0.0/16
                  193.229.0.0/16
                  194.86.0.0/16
                  194.136.0.0/16
                  194.157.0.0/16
                  194.188.0.0/16
                  194.211.0.0/16
                  194.240.0.0/15
                  195.16.192.0/19
                  195.74.0.0/19
                  195.170.128.0/19
                  195.197.0.0/16
                  195.218.64.0/19
                  195.236.0.0/15
                  195.238.192.0/19
                  195.255.0.0/16
                  212.38.224.0-212.38.244.255
                  212.50.192.0/19
                  212.54.0.0/19
                  212.63.0.0/19
                  212.226.0.0/16
                  212.246.0.0/16
                  213.130.224.0/19
                  213.161.32.0/19
                  213.169.0.0/19
                  213.192.128.0/18
                  213.250.64.0/18
                  217.24.96.0/20
                  217.25.96.0/20
                  217.77.192.0/20
                  217.152.0.0/16
                IPv6:
                  2001:671::/48
                  2001:671:fc00::/38
                  2001:998::/29
                  2001:9f0::/29
                  2001:1658::/29
                  2a00:1dd0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:24:12:e5:b7:b6:c8:95:99:0d:95:b5:94:a7:ae:7c:40:
         45:23:4d:a5:19:36:c9:19:d3:e4:e6:0f:85:39:59:0e:15:0a:
         a9:ee:df:2a:e2:84:91:f9:b1:37:c4:c4:5a:f3:be:d0:82:a1:
         05:64:10:7a:2e:3e:d2:fe:43:f9:75:55:6f:62:92:7e:d6:6a:
         de:80:bc:e4:7c:1a:bd:37:ae:26:24:6e:c5:19:eb:52:c3:a3:
         f3:1f:7c:b6:3a:ab:c5:f8:7f:ba:86:80:6a:88:d2:6f:cd:83:
         e9:ce:95:ae:16:39:86:f6:7b:92:c5:35:86:f1:f2:8e:b6:5c:
         29:9f:b8:e3:10:1d:57:f0:cb:dd:2b:68:71:57:b4:07:d9:8a:
         29:59:df:f8:ca:79:d0:be:25:eb:f4:2c:89:85:30:31:7e:a4:
         17:34:be:8e:c5:03:4e:60:5c:97:84:49:9c:c7:29:b2:bb:2e:
         2b:4d:11:0b:d0:ad:04:ce:55:a0:3a:fe:09:31:76:3c:52:e7:
         ff:2c:88:e9:93:fa:50:b3:7a:2d:69:8f:87:23:6e:4a:a1:76:
         e6:a0:54:7e:49:cb:11:02:e3:38:38:ab:01:13:6b:72:df:59:
         81:4c:62:e5:a4:bc:22:6d:b5:6b:77:1a:88:f4:cc:17:02:ca:
         2a:6d:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:48 2025 by rpki-client