Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/wBQJvFifdoJgqtUNKdp3wlo8l_8.roa
File:                     wBQJvFifdoJgqtUNKdp3wlo8l_8.roa (raw, json)
Hash identifier:          5Lsfd9g+UNfdFLBlgH3vEAe0fksX3TCnFsgxtR55Zwk=
Subject key identifier:   C0:14:09:BC:58:9F:76:82:60:AA:D5:0D:29:DA:77:C2:5A:3C:97:FF
Certificate issuer:       /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial:       0199341E20A598653CF32E57E29C57F1EE25
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/wBQJvFifdoJgqtUNKdp3wlo8l_8.roa
Signing time:             Wed 10 Sep 2025 14:53:33 +0000
ROA not before:           Wed 10 Sep 2025 14:53:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209847
IP address blocks:        185.119.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:1e:20:a5:98:65:3c:f3:2e:57:e2:9c:57:f1:ee:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
        Validity
            Not Before: Sep 10 14:53:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c01409bc589f768260aad50d29da77c25a3c97ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:a5:d2:4c:b9:56:b1:0b:b8:a4:dd:d9:ed:
                    c7:0a:6d:1a:f9:ce:b7:02:48:40:83:d6:d9:c0:32:
                    01:0c:a3:96:02:e0:43:5b:48:ab:37:4a:e9:1b:89:
                    d3:7b:1d:fe:50:23:bf:18:f8:70:05:64:b5:4a:68:
                    4e:60:bd:cd:06:c8:71:62:35:40:04:82:95:9f:e7:
                    24:d7:38:ff:e2:d4:42:96:fe:33:66:6c:4e:e0:bd:
                    78:22:2e:15:89:2c:32:98:e8:86:04:0d:93:1f:5c:
                    36:d4:cb:f2:5a:3e:bb:24:89:c1:c3:7b:14:56:dc:
                    9c:1e:0e:7f:43:37:ac:72:f4:76:0f:4e:54:82:34:
                    7c:6d:93:c9:b3:70:0e:a2:35:95:96:f6:df:19:ff:
                    b6:de:72:0b:49:8e:29:d4:bd:8f:1d:47:b6:46:e7:
                    6c:b0:74:6c:00:a4:f7:48:a7:36:7c:32:c7:4d:3b:
                    b1:8d:bd:0f:e4:3f:32:07:83:8a:57:9e:fa:06:22:
                    b0:4b:8e:56:23:a5:d8:52:f4:96:8e:47:0e:44:8c:
                    04:cf:ee:50:3c:18:c3:e5:37:1b:ff:fa:70:0c:b9:
                    aa:e1:93:82:00:0f:88:c9:16:11:63:fb:42:01:10:
                    e2:17:b1:b4:bc:0e:4a:e9:5d:b0:2d:6d:c7:d9:8e:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:09:BC:58:9F:76:82:60:AA:D5:0D:29:DA:77:C2:5A:3C:97:FF
            X509v3 Authority Key Identifier:
                keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/wBQJvFifdoJgqtUNKdp3wlo8l_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.119.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:09:91:e0:52:b0:78:0d:0b:8b:2b:06:ce:52:7f:ce:57:c7:
         35:c3:97:e7:e8:8c:4c:cb:a3:72:5c:8f:9d:03:15:76:9f:df:
         65:a7:f9:c2:33:8e:6a:15:10:28:bd:51:4d:19:62:3e:8a:b5:
         05:c1:a0:e7:75:5c:51:e9:1e:49:db:6c:8e:21:d3:1c:02:52:
         f7:9e:34:fb:1b:98:96:a8:0e:c9:96:55:38:13:02:b3:4e:ae:
         3b:7e:ef:53:61:27:3f:82:a4:ee:ed:ce:9b:c0:3b:e9:a1:ed:
         fe:07:d2:5d:2a:a1:a3:40:36:ee:1a:a6:7f:69:ea:33:79:7e:
         5d:bd:9c:84:c5:15:e8:32:59:63:88:30:c2:a8:db:74:0a:b2:
         18:bf:eb:80:eb:4f:36:0a:9a:d4:65:93:4f:e3:26:d8:d1:bf:
         51:63:66:5c:c1:51:b0:b7:c6:74:3d:f5:9d:43:4b:86:35:c6:
         46:0d:2b:58:36:f5:ae:23:40:cb:9b:ba:8e:eb:45:41:5a:22:
         56:29:1f:5d:85:f2:9f:4a:4d:af:a0:44:88:a0:82:7f:97:61:
         eb:f3:a9:50:ee:50:73:32:c8:99:80:f4:e3:93:33:7a:6c:df:
         be:85:16:dc:7e:2b:ac:bb:3b:92:22:de:93:fd:8f:36:40:b8:
         ad:be:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:48 2025 by rpki-client