Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/HFh_eeQijygIePsUO7KzM5bNq6k.roa
File:                     HFh_eeQijygIePsUO7KzM5bNq6k.roa (raw, json)
Hash identifier:          f2J1YRSlfTR9F+Nhq15QjxHIC1sqOM+BN59BVcBlUfo=
Subject key identifier:   1C:58:7F:79:E4:22:8F:28:08:78:FB:14:3B:B2:B3:33:96:CD:AB:A9
Certificate issuer:       /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial:       01999E797223D1DDB553F59814B7679CBC90
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/HFh_eeQijygIePsUO7KzM5bNq6k.roa
Signing time:             Wed 01 Oct 2025 06:33:02 +0000
ROA not before:           Wed 01 Oct 2025 06:33:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42961
IP address blocks:        31.203.0.0/18 maxlen: 19
                          31.203.0.0/19 maxlen: 19
                          31.203.32.0/19 maxlen: 19
                          31.203.64.0/18 maxlen: 18
                          31.203.64.0/19 maxlen: 19
                          31.203.96.0/19 maxlen: 19
                          31.203.128.0/18 maxlen: 18
                          31.203.128.0/19 maxlen: 19
                          31.203.160.0/19 maxlen: 19
                          31.203.192.0/18 maxlen: 19
                          31.203.192.0/19 maxlen: 19
                          31.203.224.0/19 maxlen: 19
                          31.214.0.0/17 maxlen: 17
                          31.214.0.0/18 maxlen: 18
                          31.214.0.0/19 maxlen: 19
                          31.214.0.0/20 maxlen: 20
                          31.214.16.0/20 maxlen: 20
                          31.214.32.0/19 maxlen: 19
                          31.214.64.0/18 maxlen: 18
                          31.214.64.0/19 maxlen: 19
                          31.214.96.0/19 maxlen: 19
                          37.34.128.0/18 maxlen: 18
                          37.34.128.0/19 maxlen: 19
                          37.34.128.0/20 maxlen: 20
                          37.34.144.0/20 maxlen: 20
                          37.34.145.0/24 maxlen: 24
                          37.34.152.0/22 maxlen: 22
                          37.34.160.0/19 maxlen: 19
                          37.34.160.0/20 maxlen: 20
                          37.34.166.0/24 maxlen: 24
                          37.34.167.0/24 maxlen: 24
                          37.34.168.0/22 maxlen: 22
                          37.34.168.0/24 maxlen: 24
                          37.34.176.0/20 maxlen: 20
                          37.34.192.0/18 maxlen: 22
                          37.34.192.0/20 maxlen: 22
                          37.34.208.0/20 maxlen: 20
                          37.34.224.0/20 maxlen: 20
                          37.34.240.0/20 maxlen: 20
                          37.36.0.0/18 maxlen: 18
                          37.36.0.0/20 maxlen: 20
                          37.36.16.0/20 maxlen: 20
                          37.36.32.0/20 maxlen: 20
                          37.36.48.0/20 maxlen: 20
                          37.36.64.0/18 maxlen: 18
                          37.36.64.0/20 maxlen: 20
                          37.36.80.0/20 maxlen: 20
                          37.36.96.0/20 maxlen: 20
                          37.36.112.0/20 maxlen: 20
                          37.36.128.0/18 maxlen: 18
                          37.36.128.0/20 maxlen: 20
                          37.36.144.0/20 maxlen: 20
                          37.36.160.0/20 maxlen: 20
                          37.36.176.0/20 maxlen: 20
                          37.36.192.0/18 maxlen: 18
                          37.36.192.0/20 maxlen: 20
                          37.36.208.0/20 maxlen: 20
                          37.36.224.0/20 maxlen: 20
                          37.36.240.0/20 maxlen: 20
                          37.37.0.0/18 maxlen: 18
                          37.37.0.0/20 maxlen: 20
                          37.37.16.0/20 maxlen: 20
                          37.37.32.0/20 maxlen: 20
                          37.37.48.0/20 maxlen: 20
                          37.37.64.0/18 maxlen: 18
                          37.37.64.0/20 maxlen: 20
                          37.37.80.0/20 maxlen: 20
                          37.37.96.0/20 maxlen: 20
                          37.37.112.0/20 maxlen: 20
                          37.37.128.0/18 maxlen: 18
                          37.37.128.0/20 maxlen: 20
                          37.37.144.0/20 maxlen: 20
                          37.37.160.0/20 maxlen: 20
                          37.37.176.0/20 maxlen: 20
                          37.37.192.0/18 maxlen: 18
                          37.37.192.0/20 maxlen: 20
                          37.37.208.0/20 maxlen: 20
                          37.37.224.0/20 maxlen: 20
                          37.37.240.0/20 maxlen: 20
                          37.38.0.0/18 maxlen: 18
                          37.38.0.0/20 maxlen: 20
                          37.38.16.0/20 maxlen: 20
                          37.38.32.0/20 maxlen: 20
                          37.38.48.0/20 maxlen: 20
                          37.38.64.0/18 maxlen: 18
                          37.38.64.0/20 maxlen: 20
                          37.38.80.0/20 maxlen: 20
                          37.38.96.0/20 maxlen: 20
                          37.38.112.0/20 maxlen: 20
                          37.38.128.0/18 maxlen: 18
                          37.38.128.0/20 maxlen: 20
                          37.38.144.0/20 maxlen: 20
                          37.38.160.0/20 maxlen: 20
                          37.38.176.0/20 maxlen: 20
                          37.38.192.0/18 maxlen: 18
                          37.38.192.0/20 maxlen: 20
                          37.38.208.0/20 maxlen: 20
                          37.38.224.0/20 maxlen: 20
                          37.38.240.0/20 maxlen: 20
                          37.39.0.0/18 maxlen: 18
                          37.39.0.0/20 maxlen: 20
                          37.39.16.0/20 maxlen: 20
                          37.39.32.0/20 maxlen: 20
                          37.39.48.0/20 maxlen: 20
                          37.39.64.0/18 maxlen: 18
                          37.39.64.0/20 maxlen: 20
                          37.39.80.0/20 maxlen: 20
                          37.39.96.0/20 maxlen: 20
                          37.39.112.0/20 maxlen: 20
                          37.39.128.0/18 maxlen: 18
                          37.39.128.0/20 maxlen: 20
                          37.39.144.0/20 maxlen: 20
                          37.39.160.0/20 maxlen: 20
                          37.39.176.0/20 maxlen: 20
                          37.39.192.0/18 maxlen: 18
                          37.39.192.0/20 maxlen: 20
                          37.39.208.0/20 maxlen: 20
                          37.39.224.0/20 maxlen: 20
                          37.39.240.0/20 maxlen: 20
                          46.186.128.0/18 maxlen: 18
                          46.186.128.0/19 maxlen: 19
                          46.186.160.0/19 maxlen: 19
                          46.186.192.0/18 maxlen: 18
                          46.186.192.0/19 maxlen: 19
                          46.186.224.0/19 maxlen: 19
                          95.66.0.0/18 maxlen: 19
                          95.66.0.0/19 maxlen: 19
                          95.66.17.0/24 maxlen: 24
                          95.66.32.0/19 maxlen: 19
                          95.66.64.0/18 maxlen: 23
                          95.66.64.0/19 maxlen: 19
                          95.66.78.0/23 maxlen: 23
                          95.66.96.0/19 maxlen: 19
                          95.66.122.0/23 maxlen: 23
                          95.66.124.0/22 maxlen: 22
                          95.66.124.0/23 maxlen: 23
                          95.66.126.0/23 maxlen: 23
                          149.147.0.0/18 maxlen: 18
                          149.147.0.0/20 maxlen: 20
                          149.147.16.0/20 maxlen: 20
                          149.147.32.0/20 maxlen: 20
                          149.147.48.0/20 maxlen: 20
                          149.147.64.0/18 maxlen: 20
                          149.147.64.0/20 maxlen: 20
                          149.147.80.0/20 maxlen: 20
                          149.147.96.0/20 maxlen: 20
                          149.147.112.0/20 maxlen: 20
                          149.147.128.0/18 maxlen: 18
                          149.147.128.0/20 maxlen: 20
                          149.147.144.0/20 maxlen: 20
                          149.147.160.0/20 maxlen: 20
                          149.147.176.0/20 maxlen: 20
                          149.147.192.0/18 maxlen: 18
                          149.147.192.0/20 maxlen: 20
                          149.147.208.0/20 maxlen: 20
                          149.147.224.0/20 maxlen: 20
                          149.147.240.0/20 maxlen: 20
                          178.161.0.0/17 maxlen: 18
                          178.161.0.0/18 maxlen: 18
                          178.161.0.0/19 maxlen: 19
                          178.161.32.0/19 maxlen: 19
                          178.161.64.0/18 maxlen: 18
                          178.161.64.0/19 maxlen: 19
                          178.161.96.0/19 maxlen: 19
                          185.19.76.0/22 maxlen: 22
                          185.19.76.0/23 maxlen: 23
                          185.19.78.0/23 maxlen: 23
                          188.236.0.0/18 maxlen: 18
                          188.236.0.0/20 maxlen: 20
                          188.236.16.0/20 maxlen: 20
                          188.236.32.0/20 maxlen: 20
                          188.236.48.0/20 maxlen: 20
                          188.236.64.0/18 maxlen: 18
                          188.236.64.0/20 maxlen: 20
                          188.236.80.0/20 maxlen: 20
                          188.236.96.0/20 maxlen: 20
                          188.236.112.0/20 maxlen: 20
                          188.236.128.0/18 maxlen: 18
                          188.236.128.0/20 maxlen: 20
                          188.236.144.0/20 maxlen: 20
                          188.236.160.0/20 maxlen: 20
                          188.236.176.0/20 maxlen: 20
                          188.236.192.0/18 maxlen: 18
                          188.236.192.0/20 maxlen: 20
                          188.236.208.0/20 maxlen: 20
                          188.236.224.0/20 maxlen: 20
                          188.236.240.0/20 maxlen: 20
                          188.236.240.0/24 maxlen: 24
                          188.236.241.0/24 maxlen: 24
                          212.43.0.0/19 maxlen: 19
                          212.43.0.0/20 maxlen: 20
                          212.43.0.0/21 maxlen: 21
                          212.43.8.0/21 maxlen: 21
                          212.43.16.0/21 maxlen: 21
                          2a00:4520::/32 maxlen: 32
                          2a00:4520:1::/48 maxlen: 48
                          2a00:4520:2::/48 maxlen: 48
                          2a00:4520:3::/48 maxlen: 48
                          2a00:4520:4::/48 maxlen: 48
                          2a00:4520:8::/48 maxlen: 48
                          2a00:4522::/32 maxlen: 32
                          2a00:4522::/34 maxlen: 34
                          2a00:4522:4000::/34 maxlen: 34
                          2a00:4522:8000::/34 maxlen: 34
                          2a00:4522:c000::/34 maxlen: 34
                          2a00:4523::/32 maxlen: 32
                          2a00:4523::/33 maxlen: 33
                          2a00:4523:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:9e:79:72:23:d1:dd:b5:53:f5:98:14:b7:67:9c:bc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
        Validity
            Not Before: Oct  1 06:33:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c587f79e4228f280878fb143bb2b33396cdaba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:52:d0:5c:b8:90:bc:0b:5e:13:7f:a5:02:
                    7e:f0:e2:e3:7f:00:65:d2:19:3f:36:2a:b5:42:64:
                    02:c3:f1:21:a9:f2:05:fe:bb:23:ef:31:6a:82:d5:
                    cf:cc:38:a9:dd:3a:58:66:3e:a6:3e:3d:59:5d:ab:
                    6f:bb:1c:31:a4:e4:3e:c8:05:79:1d:70:70:01:ea:
                    9e:73:36:2f:70:af:a0:ef:de:23:6f:6f:da:a9:27:
                    80:09:0e:55:a8:02:1b:3a:55:66:6e:11:66:e6:97:
                    08:8e:cb:01:32:de:0b:63:13:b7:61:5b:6f:65:33:
                    f9:b4:37:f1:c6:90:78:24:93:21:d7:fb:64:9e:ea:
                    f5:ab:55:2c:12:4e:d4:68:4c:21:48:27:de:a6:73:
                    68:e1:37:ac:a1:85:7b:01:cf:10:00:39:87:1d:fb:
                    ab:a4:f4:f5:c9:fa:ed:50:4a:70:6f:6d:5e:09:41:
                    4d:67:ee:61:a1:4f:9f:ff:bc:31:b1:80:cf:81:34:
                    c2:eb:a3:0e:22:14:12:94:35:46:84:31:08:ba:e1:
                    95:ce:de:04:45:e8:6b:59:fb:4a:32:9a:f4:cf:30:
                    13:d1:92:a3:b7:9f:7a:a7:2a:61:c7:8e:b6:dc:31:
                    de:c4:ce:0c:1e:65:2a:e6:23:50:11:37:8c:d3:a6:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:7F:79:E4:22:8F:28:08:78:FB:14:3B:B2:B3:33:96:CD:AB:A9
            X509v3 Authority Key Identifier:
                keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/HFh_eeQijygIePsUO7KzM5bNq6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.203.0.0/16
                  31.214.0.0/17
                  37.34.128.0/17
                  37.36.0.0/14
                  46.186.128.0/17
                  95.66.0.0/17
                  149.147.0.0/16
                  178.161.0.0/17
                  185.19.76.0/22
                  188.236.0.0/16
                  212.43.0.0/19
                IPv6:
                  2a00:4520::/32
                  2a00:4522::/31

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:23:68:4c:5a:ca:21:af:dd:cb:74:d8:07:04:9e:21:33:
         8c:54:da:b2:23:d8:ac:33:8b:f1:54:c2:6d:fd:88:d9:5a:f5:
         cc:c4:ea:f5:22:8c:e6:1a:c9:b1:ad:01:80:6b:4a:63:13:bf:
         a2:82:e4:be:3b:9a:3f:a7:a4:5f:f0:6e:38:75:f3:d7:9b:c2:
         11:42:6f:b2:e4:05:cb:d6:f8:6a:27:2d:34:30:9e:36:98:53:
         13:56:c0:b4:36:65:06:cc:67:21:8f:b4:c1:2e:6d:a2:b6:7d:
         6c:59:35:fa:b3:44:9e:0a:4d:e0:0d:32:71:4b:46:ad:e1:ec:
         68:f0:04:98:b4:c1:b2:b5:a9:97:46:a7:a5:5f:c5:02:22:47:
         21:08:f3:00:ef:fb:fa:7a:ad:98:c2:12:c9:4f:cc:82:7e:e7:
         88:d0:91:3b:fa:ea:f7:39:63:fe:f6:ac:38:9d:c7:d9:10:d1:
         11:2c:26:49:09:d2:17:4c:ca:4e:77:38:fa:b8:7a:64:73:a9:
         1a:b3:40:56:dc:1c:d6:8c:16:70:4c:cc:99:84:36:6d:ca:2e:
         96:b1:7b:7b:7d:30:05:ed:c8:4b:f0:8f:a2:30:ce:f4:c5:98:
         69:f1:30:af:80:53:9e:29:a2:8b:1c:10:19:c9:f3:79:6d:23:
         b9:03:6e:1e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZmeeXIj0d21U/WYFLdnnLyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk
NDcwMzcwHhcNMjUxMDAxMDYzMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzU4N2Y3OWU0MjI4ZjI4MDg3OGZiMTQzYmIyYjMzMzk2Y2RhYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOJS0Fy4kLwLXhN/pQJ+8OLjfwBl
0hk/Niq1QmQCw/EhqfIF/rsj7zFqgtXPzDip3TpYZj6mPj1ZXatvuxwxpOQ+yAV5
HXBwAeqeczYvcK+g794jb2/aqSeACQ5VqAIbOlVmbhFm5pcIjssBMt4LYxO3YVtv
ZTP5tDfxxpB4JJMh1/tknur1q1UsEk7UaEwhSCfepnNo4TesoYV7Ac8QADmHHfur
pPT1yfrtUEpwb21eCUFNZ+5hoU+f/7wxsYDPgTTC66MOIhQSlDVGhDEIuuGVzt4E
RehrWftKMpr0zzAT0ZKjt596pyphx4623DHexM4MHmUq5iNQETeM06Z+8wIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFBxYf3nkIo8oCHj7FDuyszOWzaupMB8GA1UdIwQY
MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt
Zjk1OWQ0ZTFmMjg5LzEvSEZoX2VlUWlqeWdJZVBzVU83S3pNNWJOcTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5
LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwMAH8sDBAcf
1gADBAclIoADAwIlJAMEBy66gAMEB19CAAMDAJWTAwQHsqEAAwQCuRNMAwMAvOwD
BAXUKwAwFAQCAAIwDgMFACoARSADBQEqAEUiMA0GCSqGSIb3DQEBCwUAA4IBAQBN
iyNoTFrKIa/dy3TYBwSeITOMVNqyI9isM4vxVMJt/YjZWvXMxOr1IozmGsmxrQGA
a0pjE7+iguS+O5o/p6Rf8G44dfPXm8IRQm+y5AXL1vhqJy00MJ42mFMTVsC0NmUG
zGchj7TBLm2itn1sWTX6s0SeCk3gDTJxS0at4exo8ASYtMGytamXRqelX8UCIkch
CPMA7/v6eq2YwhLJT8yCfueI0JE7+ur3OWP+9qw4ncfZENERLCZJCdIXTMpOdzj6
uHpkc6kas0BW3BzWjBZwTMyZhDZtyi6WsXt7fTAF7chL8I+iMM70xZhp8TCvgFOe
KaKLHBAZyfN5bSO5A24e
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:43 2025 by rpki-client