Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/WuNwyHiSPueathH5Kd2vVKpD_dk.roa
File:                     WuNwyHiSPueathH5Kd2vVKpD_dk.roa (raw, json)
Hash identifier:          wNWKra4pe5jNOazl6wi0InnHrRPvEdY7h8GcVMV8IH8=
Subject key identifier:   5A:E3:70:C8:78:92:3E:E7:9A:B6:11:F9:29:DD:AF:54:AA:43:FD:D9
Certificate issuer:       /CN=f960dd6d81819dffea74e89860d79140e992a6b3
Certificate serial:       01A193B1317B67E4D2037964AE440121E276
Authority key identifier: F9:60:DD:6D:81:81:9D:FF:EA:74:E8:98:60:D7:91:40:E9:92:A6:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WDdbYGBnf_qdOiYYNeRQOmSprM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/WuNwyHiSPueathH5Kd2vVKpD_dk.roa
Signing time:             Sat 31 Oct 2026 20:40:25 +0000
ROA not before:           Sat 31 Oct 2026 20:40:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49102
IP address blocks:        91.230.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/1-WDdbYGBnf_qdOiYYNeRQOmSprM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/1-WDdbYGBnf_qdOiYYNeRQOmSprM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WDdbYGBnf_qdOiYYNeRQOmSprM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:b1:31:7b:67:e4:d2:03:79:64:ae:44:01:21:e2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f960dd6d81819dffea74e89860d79140e992a6b3
        Validity
            Not Before: Oct 31 20:40:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ae370c878923ee79ab611f929ddaf54aa43fdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:12:9d:e6:8b:66:27:ed:8a:c1:15:ef:1c:
                    3f:0c:57:c8:65:c3:84:15:0c:4c:16:80:b4:22:b9:
                    9f:3f:5f:0c:31:67:f6:72:a0:e3:1d:4d:fe:6a:94:
                    06:f8:e1:e3:51:cd:a5:04:6b:94:e1:c3:6d:d2:15:
                    23:e0:1a:bb:56:57:57:07:8d:78:fe:96:b0:7e:db:
                    85:90:f0:30:6b:6a:7b:fb:ed:11:24:5e:9a:47:fa:
                    dd:ce:1f:ea:2a:81:06:70:9d:2e:86:81:60:3c:48:
                    1c:47:0f:e2:c7:b4:b7:44:a3:33:5a:e1:40:96:95:
                    d0:e3:08:68:ec:8a:4a:8d:b5:70:fc:42:5c:d1:63:
                    b6:3a:a1:eb:45:05:6c:6a:d1:94:55:98:49:f5:ed:
                    9b:40:b0:cb:17:9d:af:45:3d:e3:df:5b:0e:d9:24:
                    3e:a4:be:b5:5a:a2:b6:ef:bc:7c:65:44:34:48:b0:
                    51:22:0a:1f:6e:db:72:87:74:f4:e9:44:a0:f4:a0:
                    76:42:c9:7b:73:3b:a1:aa:77:3c:2e:0e:c7:04:87:
                    3a:a7:40:c8:5b:48:a0:4a:da:8e:40:74:21:fa:96:
                    da:7b:07:db:3a:a6:26:69:05:58:03:b5:2f:53:0e:
                    45:12:64:e2:78:2a:66:f2:cf:f3:5b:e7:29:43:ed:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:70:C8:78:92:3E:E7:9A:B6:11:F9:29:DD:AF:54:AA:43:FD:D9
            X509v3 Authority Key Identifier:
                keyid:F9:60:DD:6D:81:81:9D:FF:EA:74:E8:98:60:D7:91:40:E9:92:A6:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDdbYGBnf_qdOiYYNeRQOmSprM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/WuNwyHiSPueathH5Kd2vVKpD_dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d561c-f93d-4b27-9a4a-b67cc4a4a705/1/1-WDdbYGBnf_qdOiYYNeRQOmSprM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:0a:f3:da:19:9b:a5:c8:5d:ac:ee:37:cd:06:27:94:d9:
         f1:98:39:9a:0c:9c:60:bb:e8:74:3a:73:b3:1a:54:91:6b:3c:
         ff:5a:4a:4f:75:db:8a:2e:03:15:98:c1:3f:1c:45:49:66:ad:
         ef:da:6c:19:30:bb:ee:28:fc:55:7c:63:96:03:b9:02:2f:a0:
         1d:99:86:7a:d1:54:b9:60:b8:16:66:a4:01:7c:e2:f0:aa:21:
         61:e5:2f:fe:b2:21:48:1e:bc:cc:2e:2b:67:2e:a6:7c:c7:6b:
         d0:e0:6e:a2:47:91:c9:ac:4e:79:88:b6:b5:72:29:45:67:7d:
         72:fe:e7:05:c7:35:13:7b:ba:92:69:ae:af:0e:f4:ae:fc:a2:
         a8:b7:ff:b2:79:66:b4:62:ff:ae:fb:43:dc:e1:b3:e0:2a:99:
         ba:7f:52:19:30:aa:5b:6e:fb:79:cd:1d:17:bf:e9:bd:6c:af:
         a2:30:8e:28:11:f8:80:54:cf:81:d7:f0:49:05:31:c7:5c:95:
         7f:18:4a:03:35:dd:14:89:d4:dd:95:85:6a:7e:06:88:a3:4f:
         7d:46:28:d9:cd:59:fc:2c:1f:25:35:1a:65:ac:21:18:f2:4b:
         db:4d:00:8a:5b:88:be:de:7a:49:c5:42:97:85:3b:fa:77:76:
         42:c1:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:40 2026 by rpki-client