Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/c-WOef2J1gYxhjkPJhdxchNJqfc.roa
File:                     c-WOef2J1gYxhjkPJhdxchNJqfc.roa (raw, json)
Hash identifier:          gL/NmEuRbJ4dajNjds4WbgkHc63sLpqhiEjzdUd6JZo=
Subject key identifier:   73:E5:8E:79:FD:89:D6:06:31:86:39:0F:26:17:71:72:13:49:A9:F7
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019DFBCD5C7A1CBD9783B025E1ED760F6E8E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/c-WOef2J1gYxhjkPJhdxchNJqfc.roa
Signing time:             Wed 06 May 2026 05:40:32 +0000
ROA not before:           Wed 06 May 2026 05:40:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60068
IP address blocks:        188.255.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fb:cd:5c:7a:1c:bd:97:83:b0:25:e1:ed:76:0f:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: May  6 05:40:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73e58e79fd89d6063186390f261771721349a9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:ea:b3:65:bf:8b:44:21:00:3f:84:dc:39:
                    73:45:12:5d:02:a4:99:a3:25:c9:1f:c3:4f:9a:61:
                    7f:94:b3:5c:eb:15:4f:67:c4:16:59:b4:02:c0:c1:
                    ef:74:e6:28:7d:6a:22:16:ad:f8:57:83:9d:28:e5:
                    56:f6:04:c0:fd:37:b0:32:23:ca:35:da:10:0a:c2:
                    d1:80:6d:3c:06:f0:a0:91:82:44:9e:c2:3b:43:7e:
                    9f:96:42:88:32:4b:62:6d:d2:6e:18:fb:c5:03:30:
                    d0:7d:ec:06:c7:6d:c6:86:3b:f9:d9:86:df:ba:e2:
                    8f:d2:ad:93:58:33:62:17:18:15:8d:01:0c:34:4f:
                    a5:65:2c:70:ca:b1:e1:54:df:b3:fc:67:f9:23:25:
                    39:3b:9c:a2:cd:33:c2:73:f0:5a:b2:09:07:cd:2d:
                    e1:7c:3f:00:fe:35:a9:6e:a0:b3:26:59:d6:51:fd:
                    c4:1c:5e:f9:f3:86:91:8c:20:a6:69:3a:54:e6:3d:
                    06:77:8c:9e:fd:b0:7b:bf:53:ea:e1:18:3a:bc:1c:
                    e0:c7:01:3b:4e:bf:ed:c1:a7:75:73:ce:88:af:0a:
                    53:81:e4:89:f1:30:88:c8:40:23:06:9c:75:63:1b:
                    11:b8:c7:b8:8a:ee:f8:6e:30:84:b7:a9:59:eb:49:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:8E:79:FD:89:D6:06:31:86:39:0F:26:17:71:72:13:49:A9:F7
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/c-WOef2J1gYxhjkPJhdxchNJqfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.255.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:4c:5a:57:e0:b3:7b:83:c7:8d:9c:cd:63:a8:07:e5:b5:
         be:ee:53:95:d1:56:ec:28:b3:be:c6:06:5c:36:55:e7:5e:d9:
         eb:52:12:8a:27:18:c7:30:5b:48:a3:e2:d2:36:88:bc:99:f8:
         2c:4f:a3:7c:98:37:f2:25:e9:2d:4f:5b:e5:f1:67:24:ee:88:
         96:2a:64:e8:58:09:2c:93:7f:f5:69:20:f0:7c:6e:93:78:ae:
         c3:41:d5:48:30:a8:49:ee:bd:6e:13:45:7c:ad:d6:84:2b:e2:
         d6:0a:96:61:29:05:50:2e:df:bd:19:ff:34:f5:d8:fe:d9:ce:
         4a:32:4d:ae:01:14:ae:9d:f0:4c:ec:e7:45:4b:dc:c4:88:75:
         ff:b9:ff:f9:1c:32:4a:25:ad:7e:2e:46:8f:ff:b0:10:89:ce:
         54:d9:75:75:49:17:2c:62:8f:f9:8e:f8:51:6c:5d:f2:a6:c2:
         bd:1b:07:22:1f:c6:70:ac:1b:2e:e4:14:b7:18:9a:8f:0a:c3:
         8e:8b:78:35:49:4a:c3:0b:1d:f7:64:e6:22:ef:de:f7:b1:34:
         c3:bb:59:fc:35:8b:39:8e:bd:a8:1f:29:f5:d9:0b:5a:17:c0:
         32:42:c9:d4:06:4f:34:9d:02:1e:d3:5e:3f:10:45:37:ad:e8:
         68:cb:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:49 2026 by rpki-client