Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CpD1TJOkdQQJq5IslPhiZHlyG74.roa
File:                     CpD1TJOkdQQJq5IslPhiZHlyG74.roa (raw, json)
Hash identifier:          Q7j7z8t1/Qi/HQ1Lxqq8yKSxewU1z/88XvZc3GMwEYY=
Subject key identifier:   0A:90:F5:4C:93:A4:75:04:09:AB:92:2C:94:F8:62:64:79:72:1B:BE
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019F3BA5B7E2289B719A63D1F10EFF092E6C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CpD1TJOkdQQJq5IslPhiZHlyG74.roa
Signing time:             Tue 07 Jul 2026 08:15:44 +0000
ROA not before:           Tue 07 Jul 2026 08:15:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     274062
IP address blocks:        92.118.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:a5:b7:e2:28:9b:71:9a:63:d1:f1:0e:ff:09:2e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jul  7 08:15:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a90f54c93a4750409ab922c94f8626479721bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:8c:93:a1:a4:d3:2d:e0:eb:5f:13:41:67:
                    1b:b7:53:2c:36:55:af:de:c9:a6:c8:02:15:69:0e:
                    39:e5:8f:82:d3:a5:50:69:d0:1f:9f:b1:f4:48:85:
                    32:8c:6f:e2:e2:30:d3:cc:14:8c:75:53:99:15:7f:
                    05:3b:3d:2c:f1:27:31:82:58:86:3c:53:71:69:19:
                    bf:1e:b2:69:9d:3a:4f:7a:87:d7:de:26:87:29:ce:
                    9a:cb:55:1d:0f:3b:90:af:13:d3:13:bf:cc:68:fc:
                    76:71:fe:36:b2:64:43:10:31:24:c3:c5:93:9d:3b:
                    b7:25:56:b4:e1:93:c3:3d:a8:2e:65:38:77:e9:a6:
                    5b:54:99:c2:34:a8:ed:90:2e:e0:2f:68:0c:b4:a4:
                    36:72:e8:8e:84:05:ba:fa:ac:64:29:c6:ca:54:25:
                    bc:74:88:f5:30:c7:26:76:9c:c3:6a:81:06:a3:2f:
                    68:b7:7d:13:16:d6:fd:6d:12:ac:2f:54:c6:00:a5:
                    8d:d8:82:55:4e:50:d6:58:6f:1d:a0:8f:a4:c8:1b:
                    5e:53:1e:6e:c3:3a:06:fb:0c:c2:61:00:52:a4:3f:
                    78:73:e4:f5:fe:ff:be:7d:2e:f6:b8:33:ec:7a:08:
                    8f:44:ca:59:84:8b:a3:55:11:f3:d6:0a:46:59:9e:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:90:F5:4C:93:A4:75:04:09:AB:92:2C:94:F8:62:64:79:72:1B:BE
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CpD1TJOkdQQJq5IslPhiZHlyG74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:02:fa:68:58:bb:d3:e5:f6:e4:92:2b:ba:e9:4c:2b:54:80:
         36:78:ad:d5:87:26:b6:11:14:27:57:68:b4:d4:50:14:9a:e7:
         c7:64:23:65:ff:75:5a:9e:31:82:d6:10:8d:b2:ac:60:90:06:
         fe:62:19:85:13:4f:bf:f8:38:b2:b1:30:77:a5:84:25:ad:4d:
         19:13:ec:ec:09:b4:ef:34:57:b1:8e:61:13:74:c1:dd:f9:1c:
         cf:7e:45:b8:36:37:10:b2:61:a4:c8:b4:95:c8:69:c8:2a:69:
         bc:fb:e0:21:9f:b7:9a:3e:e8:5e:bb:4b:6c:4e:e4:06:f6:67:
         8e:a8:2e:b8:51:1e:84:84:bd:04:0f:3b:9e:e6:26:68:ad:3c:
         50:02:f0:aa:cd:04:11:0e:7d:79:92:a0:2a:e4:fc:f9:ea:bb:
         ee:d7:3c:63:74:af:87:3e:fc:6b:79:4c:17:0c:4b:db:67:41:
         7d:6e:a8:7a:ce:67:b6:12:d1:c0:5e:0a:5b:34:8b:e8:30:c5:
         70:8f:95:9a:06:d1:1f:26:1d:b4:52:d6:96:16:4d:9c:00:f7:
         c6:b9:19:8d:e8:67:88:fd:fd:5b:28:87:f3:5c:47:38:58:d5:
         71:0b:9d:7d:b0:f5:6d:b9:27:3d:04:c4:a5:27:b7:aa:aa:2d:
         8d:78:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:48 2026 by rpki-client