Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa
File:                     t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (raw, json)
Hash identifier:          /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=
Subject key identifier:   B7:F1:3D:82:E7:26:69:5B:50:0F:B1:C7:7F:2C:C5:5A:C6:77:1F:7A
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       01996C40180ECB79C3BA584C2C25AA207C3D
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa
Signing time:             Sun 21 Sep 2025 12:29:23 +0000
ROA not before:           Sun 21 Sep 2025 12:29:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        92.61.228.0/24 maxlen: 24
                          92.61.230.0/24 maxlen: 24
                          92.61.231.0/24 maxlen: 24
                          92.61.232.0/24 maxlen: 24
                          92.61.236.0/24 maxlen: 24
                          92.61.237.0/24 maxlen: 24
                          92.61.238.0/24 maxlen: 24
                          94.188.135.0/24 maxlen: 24
                          94.188.137.0/24 maxlen: 24
                          94.188.194.0/24 maxlen: 24
                          94.188.201.0/24 maxlen: 24
                          94.188.202.0/24 maxlen: 24
                          94.188.203.0/24 maxlen: 24
                          94.188.205.0/24 maxlen: 24
                          94.188.206.0/24 maxlen: 24
                          94.188.207.0/24 maxlen: 24
                          94.188.208.0/24 maxlen: 24
                          94.188.209.0/24 maxlen: 24
                          94.188.210.0/24 maxlen: 24
                          94.188.211.0/24 maxlen: 24
                          94.188.212.0/24 maxlen: 24
                          94.188.214.0/24 maxlen: 24
                          94.188.215.0/24 maxlen: 24
                          94.188.216.0/24 maxlen: 24
                          94.188.222.0/24 maxlen: 24
                          94.188.223.0/24 maxlen: 24
                          94.188.224.0/24 maxlen: 24
                          94.188.225.0/24 maxlen: 24
                          94.188.226.0/24 maxlen: 24
                          94.188.227.0/24 maxlen: 24
                          94.188.228.0/24 maxlen: 24
                          94.188.229.0/24 maxlen: 24
                          94.188.230.0/24 maxlen: 24
                          94.188.231.0/24 maxlen: 24
                          94.188.232.0/24 maxlen: 24
                          94.188.233.0/24 maxlen: 24
                          94.188.234.0/24 maxlen: 24
                          94.188.235.0/24 maxlen: 24
                          94.188.236.0/24 maxlen: 24
                          94.188.237.0/24 maxlen: 24
                          94.188.239.0/24 maxlen: 24
                          94.188.240.0/24 maxlen: 24
                          94.188.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:6c:40:18:0e:cb:79:c3:ba:58:4c:2c:25:aa:20:7c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Sep 21 12:29:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b7f13d82e726695b500fb1c77f2cc55ac6771f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:0e:82:95:53:bb:1f:c4:42:73:b0:bd:67:
                    a3:74:09:f4:69:ad:39:ce:27:43:be:81:8e:a2:38:
                    2c:67:59:0e:c2:b8:43:14:72:60:38:90:cd:6a:f6:
                    be:d5:04:37:75:10:fa:af:9d:d6:c0:24:dc:ae:4c:
                    d1:1d:54:03:ee:3e:b3:b5:88:22:9b:70:19:ea:32:
                    f6:24:0a:36:75:0d:71:43:d3:b0:cd:08:7f:70:2a:
                    01:fe:09:67:53:3c:c0:e4:27:60:d8:ef:9b:9c:e2:
                    3f:31:ab:74:81:9a:5b:c3:74:53:32:34:a7:7e:de:
                    51:43:3d:76:a9:88:b5:57:6b:33:c8:35:a3:f4:d3:
                    22:99:ff:65:1b:3a:61:43:23:20:2e:1d:b5:e8:26:
                    c4:1f:96:d8:45:ef:2b:86:a8:a6:c4:e5:9c:30:8a:
                    2c:86:10:59:bf:5d:b5:dd:33:a1:cf:57:4f:11:63:
                    45:99:a1:39:2c:02:95:82:cb:0c:1f:82:d7:b1:91:
                    3e:88:65:2c:fa:b2:11:4d:26:6e:03:91:f2:9e:44:
                    c9:77:3e:56:8f:8b:65:d4:2c:21:a6:d1:a4:5e:a9:
                    76:be:35:2b:c2:51:29:cf:ac:0f:a0:0b:f1:f1:f3:
                    46:48:60:f1:3f:86:27:68:a8:56:73:a2:62:1d:11:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:3D:82:E7:26:69:5B:50:0F:B1:C7:7F:2C:C5:5A:C6:77:1F:7A
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.228.0/24
                  92.61.230.0-92.61.232.255
                  92.61.236.0-92.61.238.255
                  94.188.135.0/24
                  94.188.137.0/24
                  94.188.194.0/24
                  94.188.201.0-94.188.203.255
                  94.188.205.0-94.188.212.255
                  94.188.214.0-94.188.216.255
                  94.188.222.0-94.188.237.255
                  94.188.239.0-94.188.241.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:5c:b0:b0:d2:74:33:6f:af:ad:b4:7d:01:cf:32:1c:7e:1a:
         f3:14:97:97:ab:87:50:20:16:07:94:7c:b7:91:34:cb:a8:cc:
         8f:dc:a8:88:5b:ef:d1:22:61:c6:ca:ec:89:b9:79:bc:5b:d0:
         a1:d3:a2:f1:2b:c9:f4:9f:53:cb:52:db:54:65:23:3e:7d:cf:
         46:15:f4:30:d8:d6:b0:9b:ab:08:71:3a:36:bc:b6:80:c1:2a:
         dc:77:c7:05:dd:d2:61:0b:42:92:74:8e:92:27:c3:69:8f:f1:
         58:e3:63:19:56:f4:9e:3e:b4:05:e7:41:3f:24:1f:ad:05:6f:
         bd:3b:79:52:4f:82:5d:39:5d:37:5b:f3:90:35:39:d4:35:92:
         27:dd:a0:b9:84:1e:3c:17:4a:92:42:6d:f5:50:ea:0d:78:1a:
         ac:40:ed:93:a6:3e:27:68:d3:24:af:d3:bd:b0:8d:0b:b8:08:
         ce:75:c3:89:97:d2:0e:cc:d8:21:f3:71:36:76:44:9c:f1:3b:
         69:f3:12:74:ab:25:61:63:d0:2c:68:e1:63:ea:ef:85:20:e7:
         3d:aa:2b:0d:28:dd:c0:61:6e:c1:d5:57:c7:38:b9:fd:4d:ef:
         3f:f2:20:82:a3:bd:e0:6a:79:4f:ec:b0:15:00:b3:9c:40:98:
         ba:c9:2e:c7
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZlsQBgOy3nDulhMLCWqIHw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5
YTBkODYwHhcNMjUwOTIxMTIyOTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2YxM2Q4MmU3MjY2OTViNTAwZmIxYzc3ZjJjYzU1YWM2NzcxZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUOgpVTux/EQnOwvWejdAn0aa05
zidDvoGOojgsZ1kOwrhDFHJgOJDNava+1QQ3dRD6r53WwCTcrkzRHVQD7j6ztYgi
m3AZ6jL2JAo2dQ1xQ9OwzQh/cCoB/glnUzzA5Cdg2O+bnOI/Mat0gZpbw3RTMjSn
ft5RQz12qYi1V2szyDWj9NMimf9lGzphQyMgLh216CbEH5bYRe8rhqimxOWcMIos
hhBZv1213TOhz1dPEWNFmaE5LAKVgssMH4LXsZE+iGUs+rIRTSZuA5HynkTJdz5W
j4tl1CwhptGkXql2vjUrwlEpz6wPoAvx8fNGSGDxP4YnaKhWc6JiHRHylQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFLfxPYLnJmlbUA+xx38sxVrGdx96MB8GA1UdIwQY
MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt
NDIxZTZiYzdlMmU4LzEvdF9FOWd1Y21hVnRRRDdISGZ5ekZXc1ozSDNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4
LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAFw9
5DAMAwQBXD3mAwQAXD3oMAwDBAJcPewDBABcPe4DBABevIcDBABevIkDBABevMIw
DAMEAF68yQMEAl68yDAMAwQAXrzNAwQAXrzUMAwDBAFevNYDBABevNgwDAMEAV68
3gMEAV687DAMAwQAXrzvAwQBXrzwMA0GCSqGSIb3DQEBCwUAA4IBAQA9XLCw0nQz
b6+ttH0BzzIcfhrzFJeXq4dQIBYHlHy3kTTLqMyP3KiIW+/RImHGyuyJuXm8W9Ch
06LxK8n0n1PLUttUZSM+fc9GFfQw2Nawm6sIcTo2vLaAwSrcd8cF3dJhC0KSdI6S
J8Npj/FY42MZVvSePrQF50E/JB+tBW+9O3lST4JdOV03W/OQNTnUNZIn3aC5hB48
F0qSQm31UOoNeBqsQO2Tpj4naNMkr9O9sI0LuAjOdcOJl9IOzNgh83E2dkSc8Ttp
8xJ0qyVhY9AsaOFj6u+FIOc9qisNKN3AYW7B1VfHOLn9Te8/8iCCo73ganlP7LAV
ALOcQJi6yS7H
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:48 2025 by rpki-client