Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Ip8huaIK21qXcV1uFM12bMRhsAc.roa
File:                     Ip8huaIK21qXcV1uFM12bMRhsAc.roa (raw, json)
Hash identifier:          +deXUeKbtAB4FcOD/Fpx9fIrQPH8oKg+/d89Ce9TGGY=
Subject key identifier:   22:9F:21:B9:A2:0A:DB:5A:97:71:5D:6E:14:CD:76:6C:C4:61:B0:07
Certificate issuer:       /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial:       01999538F8CD6FC3B4A701C7E486ECAACE3A
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Ip8huaIK21qXcV1uFM12bMRhsAc.roa
Signing time:             Mon 29 Sep 2025 11:26:02 +0000
ROA not before:           Mon 29 Sep 2025 11:26:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204964
IP address blocks:        185.233.156.0/22 maxlen: 22
                          185.233.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:95:38:f8:cd:6f:c3:b4:a7:01:c7:e4:86:ec:aa:ce:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
        Validity
            Not Before: Sep 29 11:26:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=229f21b9a20adb5a97715d6e14cd766cc461b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:71:e9:e1:18:77:0e:a3:95:c2:aa:fd:be:d4:
                    98:6b:01:85:84:f1:96:01:38:97:2b:f5:b1:5b:36:
                    23:69:3f:7d:f7:bf:8b:5e:de:a9:31:31:e0:19:c5:
                    12:f9:3a:21:42:f1:ee:65:10:2b:7a:ce:7b:31:09:
                    be:4d:3e:b4:c3:bb:c4:f2:06:98:d9:1f:50:a3:f9:
                    20:c0:7a:ce:e2:96:04:f0:8f:f5:b4:96:dd:b0:4b:
                    b0:cb:65:57:eb:b3:d4:c5:64:2b:ba:54:61:ab:78:
                    2d:0f:61:34:5f:fe:7b:35:e5:7a:8e:89:f5:15:1f:
                    de:26:b1:31:76:d2:91:fe:27:a4:4b:14:a6:ab:98:
                    49:28:f7:db:4c:94:cd:e7:ab:3f:ce:eb:46:91:42:
                    e5:4a:be:de:e8:ec:a1:d8:1c:79:ee:d4:b3:98:f3:
                    58:a7:1d:b4:8f:c5:9c:95:a7:74:d0:a8:1b:55:41:
                    51:6e:8e:af:19:e9:f9:d9:b5:cc:8e:cf:e4:ea:1c:
                    d9:9c:6a:59:9c:40:82:12:22:a3:79:49:ea:86:55:
                    85:f3:e7:0a:f5:38:5c:18:2d:30:70:12:82:a4:71:
                    f3:a6:95:6a:bf:d6:1f:60:30:68:bd:29:d9:ff:60:
                    c5:9e:72:60:75:b5:6c:a2:fd:fc:ac:de:4e:e2:ec:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9F:21:B9:A2:0A:DB:5A:97:71:5D:6E:14:CD:76:6C:C4:61:B0:07
            X509v3 Authority Key Identifier:
                keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Ip8huaIK21qXcV1uFM12bMRhsAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.156.0-185.233.163.255

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:80:c2:e2:85:e6:3c:c9:d5:86:f5:fe:eb:8a:0c:31:a0:
         2c:a5:1b:a7:44:68:d3:34:45:a4:88:b9:a2:90:5a:45:bf:cf:
         8f:87:80:82:8e:fe:62:72:6a:2d:47:60:e7:f7:d9:b3:61:6f:
         ca:b7:cf:41:a2:e6:27:dc:fa:94:7d:3a:56:90:80:a2:ac:78:
         94:76:fb:cc:83:a6:70:ae:1f:f1:6d:e3:72:a0:7c:a0:db:30:
         09:ee:ad:32:e0:05:2e:fd:3c:55:79:c8:43:b7:6e:8e:5e:2f:
         c7:42:ab:80:b7:d8:b5:f1:36:ae:cd:60:77:cd:8f:d3:48:c2:
         a2:0d:86:d0:c7:df:8d:46:7e:86:9a:40:67:47:87:18:8e:d7:
         53:3c:f8:3b:25:2f:4f:99:21:72:ee:b0:59:bb:46:fd:5c:fa:
         5e:b4:63:ce:f4:c7:49:36:12:92:42:3f:d1:dc:78:64:d8:dd:
         ba:7f:9a:6e:ab:78:60:e1:81:49:1a:e9:e0:e7:23:ed:37:6f:
         91:b9:40:d9:7a:20:a9:af:42:81:df:61:e0:b1:1b:fd:15:d5:
         37:84:11:19:b8:18:74:02:e4:16:7c:87:5c:50:7d:af:30:bc:
         c2:3c:bc:78:d3:f4:fa:21:49:c9:ec:d3:94:83:eb:22:6a:d8:
         26:21:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:58 2025 by rpki-client