Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa
File:                     ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (raw, json)
Hash identifier:          LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=
Subject key identifier:   CA:C6:6A:60:EC:D8:D6:43:45:87:5B:08:3A:97:98:B1:BC:53:D0:5B
Certificate issuer:       /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial:       0199963FBB6091ACC44A62C222E0FAAE8E01
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa
Signing time:             Mon 29 Sep 2025 16:13:02 +0000
ROA not before:           Mon 29 Sep 2025 16:13:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25181
IP address blocks:        195.2.32.0/19 maxlen: 24
                          195.2.32.0/22 maxlen: 24
                          195.2.36.0/22 maxlen: 24
                          195.2.36.0/23 maxlen: 23
                          195.2.38.0/23 maxlen: 23
                          195.2.40.0/23 maxlen: 24
                          195.2.41.0/24 maxlen: 24
                          2a00:1310::/32 maxlen: 48
                          2a00:1310:110::/48 maxlen: 48
                          2a00:1310:301::/48 maxlen: 48
                          2a00:1310:802::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:96:3f:bb:60:91:ac:c4:4a:62:c2:22:e0:fa:ae:8e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
        Validity
            Not Before: Sep 29 16:13:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cac66a60ecd8d64345875b083a9798b1bc53d05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:9a:d1:b0:57:fa:a3:7b:da:eb:19:57:b1:
                    a3:08:74:7e:43:fc:6f:0b:3e:ae:39:d3:d7:53:63:
                    9a:a5:43:52:7a:fa:6c:a6:dd:6b:4f:3f:65:c6:34:
                    3a:98:27:d7:84:89:73:9e:0d:6c:69:a7:01:49:a2:
                    d6:9a:7b:ba:39:32:e1:d7:5c:42:57:e4:2e:6c:f7:
                    3d:1c:47:d7:1d:b9:49:52:04:7b:b3:27:2e:78:ab:
                    3e:2d:44:6d:7b:00:f8:6a:19:fe:ce:3e:65:0c:df:
                    a5:00:ac:a8:17:87:ed:75:48:69:15:76:8b:ae:20:
                    94:12:6a:72:33:3a:60:64:ff:e6:cc:1f:36:8f:da:
                    d6:fd:8d:ac:dc:90:74:5b:d6:ba:01:38:22:d2:a8:
                    d4:6b:5a:0b:44:00:de:48:77:e7:0a:78:d7:ac:3a:
                    10:51:81:2d:7b:1c:7b:21:ef:13:96:ac:f4:ca:21:
                    a8:a2:1c:6f:c4:33:b6:73:98:c3:2a:2b:29:14:c5:
                    6f:b2:10:7b:12:16:1d:01:b1:a0:ec:7f:58:ba:bf:
                    35:6b:35:0c:8e:43:69:a5:5f:c7:6b:53:8b:05:88:
                    45:da:cc:81:61:1c:95:59:e6:39:c7:73:a2:64:f9:
                    72:fa:a7:42:b3:2b:94:35:ae:1d:fe:c8:37:1d:92:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C6:6A:60:EC:D8:D6:43:45:87:5B:08:3A:97:98:B1:BC:53:D0:5B
            X509v3 Authority Key Identifier:
                keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.2.32.0/19
                IPv6:
                  2a00:1310::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:00:cc:9a:ab:e3:a5:f5:f2:bf:5f:37:fc:98:26:be:af:89:
         32:3a:4a:0b:3c:0f:8d:8c:86:af:84:3e:30:b4:fa:fe:45:12:
         86:59:a9:c1:db:86:7d:e0:12:d0:b1:bc:b9:e0:ad:30:6a:3e:
         c0:a3:f8:70:00:b6:da:23:f2:d7:b0:78:af:4e:08:93:d7:b9:
         1c:a8:53:87:e5:0e:bf:7f:61:ed:11:ad:be:00:d3:29:10:5c:
         f8:fc:06:5c:2c:7d:a3:84:42:58:cb:fc:aa:04:5e:fc:26:c8:
         1d:e7:67:13:09:c6:10:91:f9:86:bb:f3:86:c3:8e:c1:37:18:
         51:83:fc:bf:06:50:f9:21:95:47:fc:37:84:c7:94:64:dc:0f:
         aa:fe:b6:45:dc:f7:44:70:91:b5:56:f6:74:67:46:e1:d7:9c:
         2e:b0:c2:b0:b3:a5:73:dc:07:fb:6f:2a:21:de:db:de:a2:cb:
         3a:3e:a1:e2:b8:dd:12:0c:7c:fb:b7:bd:15:ac:9c:04:a3:50:
         00:0d:4a:78:71:0c:d8:f9:de:e9:5a:b9:2e:cd:9c:8f:20:ec:
         84:80:5c:bb:6a:98:dd:fe:b6:6f:16:71:e2:e9:ea:b1:ec:49:
         ff:40:97:5c:f1:8f:ed:c9:37:0f:e7:a6:26:be:50:fd:e0:1d:
         b9:9a:b8:66
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZmWP7tgkazESmLCIuD6ro4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi
ODljOTUwHhcNMjUwOTI5MTYxMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWM2NmE2MGVjZDhkNjQzNDU4NzViMDgzYTk3OThiMWJjNTNkMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIGa0bBX+qN72usZV7GjCHR+Q/xv
Cz6uOdPXU2OapUNSevpspt1rTz9lxjQ6mCfXhIlzng1saacBSaLWmnu6OTLh11xC
V+QubPc9HEfXHblJUgR7sycueKs+LURtewD4ahn+zj5lDN+lAKyoF4ftdUhpFXaL
riCUEmpyMzpgZP/mzB82j9rW/Y2s3JB0W9a6ATgi0qjUa1oLRADeSHfnCnjXrDoQ
UYEtexx7Ie8Tlqz0yiGoohxvxDO2c5jDKispFMVvshB7EhYdAbGg7H9Yur81azUM
jkNppV/Ha1OLBYhF2syBYRyVWeY5x3OiZPly+qdCsyuUNa4d/sg3HZKsbwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMrGamDs2NZDRYdbCDqXmLG8U9BbMB8GA1UdIwQY
MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt
Mjc1NTBiMjE5NTA3LzEveXNacVlPelkxa05GaDFzSU9wZVlzYnhUMEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3
LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwwIgMA0E
AgACMAcDBQAqABMQMA0GCSqGSIb3DQEBCwUAA4IBAQA4AMyaq+Ol9fK/Xzf8mCa+
r4kyOkoLPA+NjIavhD4wtPr+RRKGWanB24Z94BLQsby54K0waj7Ao/hwALbaI/LX
sHivTgiT17kcqFOH5Q6/f2HtEa2+ANMpEFz4/AZcLH2jhEJYy/yqBF78Jsgd52cT
CcYQkfmGu/OGw47BNxhRg/y/BlD5IZVH/DeEx5Rk3A+q/rZF3PdEcJG1VvZ0Z0bh
15wusMKws6Vz3Af7byoh3tveoss6PqHiuN0SDHz7t70VrJwEo1AADUp4cQzY+d7p
WrkuzZyPIOyEgFy7apjd/rZvFnHi6eqx7En/QJdc8Y/tyTcP56YmvlD94B25mrhm
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:13 2025 by rpki-client