Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/fpUwXfAgUBxrbqQRgDosd7bTaxM.roa
File:                     fpUwXfAgUBxrbqQRgDosd7bTaxM.roa (raw, json)
Hash identifier:          D8WXslLADktltVbZR14vPLCLn/dZ8Hhfo0kBWQpIFkk=
Subject key identifier:   7E:95:30:5D:F0:20:50:1C:6B:6E:A4:11:80:3A:2C:77:B6:D3:6B:13
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019DDD86C123BE515D4656D4E5FAE9E5119E
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/fpUwXfAgUBxrbqQRgDosd7bTaxM.roa
Signing time:             Thu 30 Apr 2026 08:34:49 +0000
ROA not before:           Thu 30 Apr 2026 08:34:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201202
IP address blocks:        194.92.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:86:c1:23:be:51:5d:46:56:d4:e5:fa:e9:e5:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Apr 30 08:34:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e95305df020501c6b6ea411803a2c77b6d36b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:4b:d1:ea:7b:8e:3e:73:ba:71:6f:b6:6d:
                    4d:91:08:71:fb:fb:9e:db:4d:d4:12:9c:5c:1c:ee:
                    b4:7f:23:85:35:ec:e7:0b:ad:00:e8:71:4f:31:b0:
                    a7:fc:32:17:9b:29:76:ab:b7:32:ac:14:6c:bb:65:
                    43:35:b3:6a:82:80:ac:5c:3f:2b:4c:1e:f0:e8:bb:
                    68:43:91:dc:28:e1:68:74:0f:e3:d7:8b:09:2b:8e:
                    7a:5a:e0:b0:c0:8a:ac:ec:72:17:0b:f9:0d:15:5b:
                    ee:0b:be:52:c2:c7:b3:4b:b8:85:19:84:ab:f6:b4:
                    3a:c5:4b:75:e3:c6:bc:95:cb:d0:3e:3e:fd:ce:5b:
                    30:2a:51:72:24:a5:a4:a4:f4:3d:83:e6:4b:10:50:
                    68:ea:b2:e7:03:61:8a:5c:a9:63:06:ec:f9:f7:53:
                    ba:80:98:7b:2c:71:64:6c:98:13:a5:47:fe:ef:01:
                    f6:21:6c:13:0a:47:23:b8:6d:e2:e2:6f:36:35:05:
                    91:bb:b2:ac:07:f5:7c:1a:6d:95:df:62:0d:84:ad:
                    2f:ab:fa:c7:8a:44:05:67:05:f6:0d:3a:41:25:ec:
                    ad:25:0d:9e:ed:73:c1:90:c6:21:bf:ec:f2:a6:c6:
                    5b:59:e7:a5:a0:aa:1b:ab:36:a4:ab:35:d8:ff:7e:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:30:5D:F0:20:50:1C:6B:6E:A4:11:80:3A:2C:77:B6:D3:6B:13
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/fpUwXfAgUBxrbqQRgDosd7bTaxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.92.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:98:8d:7f:7c:b8:e7:1d:b7:e4:50:5a:25:4a:f5:f8:1f:
         1a:fb:10:f5:b3:44:f0:a2:35:62:ff:94:96:2e:06:5b:07:96:
         31:2c:7d:c8:0c:c4:a4:aa:f7:57:a0:75:5b:91:cf:c1:26:c3:
         29:93:19:92:63:f5:c3:49:bf:35:53:aa:6f:67:9d:86:7f:bf:
         8a:36:55:aa:f0:56:65:cf:f1:2b:1e:ba:fb:2f:06:b5:a9:18:
         6c:63:cb:bf:27:35:35:d3:ad:84:65:5a:0e:31:64:d5:04:4d:
         45:ff:22:d4:9d:88:91:a5:40:d4:9c:f5:0c:d6:54:c2:ff:8c:
         e8:a4:76:19:80:09:71:96:82:2b:43:b2:90:23:bc:ea:a8:85:
         64:e5:d6:10:5a:25:1a:cc:c3:3d:2b:9d:7e:e7:92:21:93:1e:
         20:6a:69:da:77:aa:09:b4:bd:fb:c2:dd:eb:85:ab:8e:4a:a0:
         9a:60:57:67:cb:3b:e5:16:c2:ce:5f:67:71:6a:74:5b:ec:3f:
         f1:1f:f5:b5:81:8a:81:47:fa:7e:a7:72:9d:09:ce:09:8d:9e:
         19:18:95:df:7c:8d:d7:9d:03:98:80:74:6d:fe:40:12:ae:fd:
         33:56:75:b2:57:f8:22:10:4d:4b:7f:64:05:6e:d8:49:d3:db:
         10:56:df:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3dhsEjvlFdRlbU5frp5RGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm
NjA3MzkwHhcNMjYwNDMwMDgzNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk1MzA1ZGYwMjA1MDFjNmI2ZWE0MTE4MDNhMmM3N2I2ZDM2YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lZL0ep7jj5zunFvtm1NkQhx+/ue
203UEpxcHO60fyOFNeznC60A6HFPMbCn/DIXmyl2q7cyrBRsu2VDNbNqgoCsXD8r
TB7w6LtoQ5HcKOFodA/j14sJK456WuCwwIqs7HIXC/kNFVvuC75SwsezS7iFGYSr
9rQ6xUt148a8lcvQPj79zlswKlFyJKWkpPQ9g+ZLEFBo6rLnA2GKXKljBuz591O6
gJh7LHFkbJgTpUf+7wH2IWwTCkcjuG3i4m82NQWRu7KsB/V8Gm2V32INhK0vq/rH
ikQFZwX2DTpBJeytJQ2e7XPBkMYhv+zypsZbWeeloKobqzakqzXY/36npwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6VMF3wIFAca26kEYA6LHe202sTMB8GA1UdIwQY
MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt
YmFmNGUwYjRhNjllLzEvZnBVd1hmQWdVQnhyYnFRUmdEb3NkN2JUYXhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll
LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlx6MA0G
CSqGSIb3DQEBCwUAA4IBAQCW4ZiNf3y45x235FBaJUr1+B8a+xD1s0TwojVi/5SW
LgZbB5YxLH3IDMSkqvdXoHVbkc/BJsMpkxmSY/XDSb81U6pvZ52Gf7+KNlWq8FZl
z/ErHrr7Lwa1qRhsY8u/JzU1062EZVoOMWTVBE1F/yLUnYiRpUDUnPUM1lTC/4zo
pHYZgAlxloIrQ7KQI7zqqIVk5dYQWiUazMM9K51+55Ihkx4gamnad6oJtL37wt3r
hauOSqCaYFdnyzvlFsLOX2dxanRb7D/xH/W1gYqBR/p+p3KdCc4JjZ4ZGJXffI3X
nQOYgHRt/kASrv0zVnWyV/giEE1Lf2QFbthJ09sQVt8D
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:37 2026 by rpki-client