Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hcffGX3Guy5VrxAfkJ7ARZZ0cTU.roa
File:                     hcffGX3Guy5VrxAfkJ7ARZZ0cTU.roa (raw, json)
Hash identifier:          gx/9mb1UeYCsIObsXj93LKqbcCIqek4CAAx+kSMRQx4=
Subject key identifier:   85:C7:DF:19:7D:C6:BB:2E:55:AF:10:1F:90:9E:C0:45:96:74:71:35
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019985CD388F3A7738158C46DE6D67CC3E1B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hcffGX3Guy5VrxAfkJ7ARZZ0cTU.roa
Signing time:             Fri 26 Sep 2025 11:34:02 +0000
ROA not before:           Fri 26 Sep 2025 11:34:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        45.144.172.0/24 maxlen: 24
                          45.144.174.0/24 maxlen: 24
                          77.81.101.0/24 maxlen: 24
                          86.107.50.0/24 maxlen: 24
                          86.107.100.0/24 maxlen: 24
                          89.37.185.0/24 maxlen: 24
                          92.114.54.0/24 maxlen: 24
                          93.113.171.0/24 maxlen: 24
                          93.119.154.0/24 maxlen: 24
                          93.119.195.0/24 maxlen: 24
                          94.177.13.0/24 maxlen: 24
                          103.56.84.0/24 maxlen: 24
                          167.17.178.0/24 maxlen: 24
                          167.17.179.0/24 maxlen: 24
                          167.17.180.0/24 maxlen: 24
                          167.17.181.0/24 maxlen: 24
                          167.17.183.0/24 maxlen: 24
                          167.17.184.0/24 maxlen: 24
                          167.17.185.0/24 maxlen: 24
                          167.17.186.0/24 maxlen: 24
                          167.17.187.0/24 maxlen: 24
                          167.17.188.0/24 maxlen: 24
                          167.17.189.0/24 maxlen: 24
                          167.17.190.0/24 maxlen: 24
                          185.72.8.0/24 maxlen: 24
                          185.141.219.0/24 maxlen: 24
                          185.193.102.0/24 maxlen: 24
                          185.198.235.0/24 maxlen: 24
                          188.64.142.0/24 maxlen: 24
                          188.212.121.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          194.58.34.0/24 maxlen: 24
                          194.58.44.0/24 maxlen: 24
                          194.58.45.0/24 maxlen: 24
                          194.58.46.0/24 maxlen: 24
                          195.88.89.0/24 maxlen: 24
                          195.133.192.0/24 maxlen: 24
                          195.133.193.0/24 maxlen: 24
                          202.71.15.0/24 maxlen: 24
                          204.77.0.0/24 maxlen: 24
                          204.77.2.0/24 maxlen: 24
                          204.77.3.0/24 maxlen: 24
                          206.245.128.0/24 maxlen: 24
                          206.245.130.0/24 maxlen: 24
                          206.245.131.0/24 maxlen: 24
                          206.245.133.0/24 maxlen: 24
                          206.245.134.0/24 maxlen: 24
                          206.245.157.0/24 maxlen: 24
                          212.192.6.0/24 maxlen: 24
                          212.192.12.0/24 maxlen: 24
                          212.192.13.0/24 maxlen: 24
                          212.192.15.0/24 maxlen: 24
                          212.192.20.0/24 maxlen: 24
                          212.192.21.0/24 maxlen: 24
                          212.192.23.0/24 maxlen: 24
                          212.192.214.0/24 maxlen: 24
                          212.192.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:85:cd:38:8f:3a:77:38:15:8c:46:de:6d:67:cc:3e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Sep 26 11:34:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=85c7df197dc6bb2e55af101f909ec04596747135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:35:0c:20:de:4c:c8:a6:21:df:44:77:f0:
                    4f:e8:d6:e4:cc:e4:e0:26:4e:41:fa:ff:47:af:43:
                    a8:7a:6a:23:70:dd:7d:ac:88:16:26:0a:e5:16:3c:
                    27:9d:58:94:0d:f4:c6:b1:dc:68:8b:3b:50:0d:31:
                    1b:10:f1:b4:ca:5a:26:0e:5e:46:37:25:9a:7d:88:
                    57:41:66:f6:7f:c1:fe:53:72:27:54:07:09:1a:c7:
                    1c:48:01:ce:45:2b:bd:d6:71:fd:ae:38:08:e9:10:
                    20:11:14:08:b0:4f:2c:3f:52:39:f2:b5:b6:11:03:
                    e4:b9:61:2e:d9:6e:b3:b8:19:c4:81:a8:55:b6:91:
                    6e:ce:67:c2:62:de:fc:c7:27:9a:8e:a5:04:62:c6:
                    b5:df:aa:67:60:c9:d7:ce:df:50:6a:ad:52:f0:4c:
                    15:f9:17:9d:9b:60:cc:76:72:07:59:07:36:e8:d6:
                    0c:30:00:95:e9:68:2f:3c:78:47:cf:08:b4:71:86:
                    57:d9:6a:80:63:8b:7e:8c:74:84:09:af:f0:b6:00:
                    e2:07:2d:fd:cd:70:37:23:7d:b1:13:b4:35:23:28:
                    25:e4:39:10:49:fc:f3:02:9d:c4:31:12:e7:ad:bb:
                    ae:35:e9:45:9c:68:15:a9:a7:3c:c0:27:e5:2e:17:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:DF:19:7D:C6:BB:2E:55:AF:10:1F:90:9E:C0:45:96:74:71:35
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hcffGX3Guy5VrxAfkJ7ARZZ0cTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.172.0/24
                  45.144.174.0/24
                  77.81.101.0/24
                  86.107.50.0/24
                  86.107.100.0/24
                  89.37.185.0/24
                  92.114.54.0/24
                  93.113.171.0/24
                  93.119.154.0/24
                  93.119.195.0/24
                  94.177.13.0/24
                  103.56.84.0/24
                  167.17.178.0-167.17.181.255
                  167.17.183.0-167.17.190.255
                  185.72.8.0/24
                  185.141.219.0/24
                  185.193.102.0/24
                  185.198.235.0/24
                  188.64.142.0/24
                  188.212.121.0/24
                  193.124.49.0/24
                  194.58.34.0/24
                  194.58.44.0-194.58.46.255
                  195.88.89.0/24
                  195.133.192.0/23
                  202.71.15.0/24
                  204.77.0.0/24
                  204.77.2.0/23
                  206.245.128.0/24
                  206.245.130.0/23
                  206.245.133.0-206.245.134.255
                  206.245.157.0/24
                  212.192.6.0/24
                  212.192.12.0/23
                  212.192.15.0/24
                  212.192.20.0/23
                  212.192.23.0/24
                  212.192.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:05:1e:ad:67:02:44:80:f4:64:4d:c9:a8:93:bb:f5:3f:
         1c:70:a1:f7:70:66:31:52:4a:31:d4:54:f1:d2:88:9e:1e:c1:
         89:be:ca:33:80:a4:ae:25:82:28:1b:b7:18:6b:5a:d3:0d:32:
         a1:b1:45:5e:aa:96:a9:f2:70:2b:7b:47:98:e0:c9:40:4d:ed:
         b6:1f:89:3e:7f:c9:74:49:cc:62:dc:dc:b2:2b:0e:94:cf:3e:
         ec:e6:c7:73:72:2d:a1:83:8a:1b:0e:eb:a4:ae:ea:8d:a2:d3:
         0b:f2:65:7a:d1:6d:0a:e0:cc:6e:1f:a4:17:a5:95:a4:4d:f0:
         d9:87:1f:b6:bc:28:ba:0f:37:c6:5a:bc:fa:f3:9f:f2:50:4d:
         c0:c9:50:81:3e:61:77:2d:1a:51:ec:6a:1c:59:33:6f:96:0e:
         89:e1:4d:5a:85:6c:3a:ad:c4:f5:11:b8:66:e8:33:93:de:b5:
         0d:b2:98:1d:d1:01:98:19:61:8f:f2:c0:0c:f1:d5:fc:44:81:
         ec:76:1c:dc:45:18:97:d8:fe:2d:36:8b:0e:6c:b7:73:a7:a7:
         d7:95:3d:0a:94:b0:d7:86:5a:11:a4:49:45:4a:df:5b:cc:f6:
         8b:43:3e:68:2f:fa:e9:5b:de:66:80:06:2c:d2:bf:9b:a2:3c:
         94:58:16:ac
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISAZmFzTiPOnc4FYxG3m1nzD4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwOTI2MTEzNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWM3ZGYxOTdkYzZiYjJlNTVhZjEwMWY5MDllYzA0NTk2NzQ3MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Q1DCDeTMimId9Ed/BP6NbkzOTg
Jk5B+v9Hr0OoemojcN19rIgWJgrlFjwnnViUDfTGsdxoiztQDTEbEPG0ylomDl5G
NyWafYhXQWb2f8H+U3InVAcJGsccSAHORSu91nH9rjgI6RAgERQIsE8sP1I58rW2
EQPkuWEu2W6zuBnEgahVtpFuzmfCYt78xyeajqUEYsa136pnYMnXzt9Qaq1S8EwV
+Redm2DMdnIHWQc26NYMMACV6WgvPHhHzwi0cYZX2WqAY4t+jHSECa/wtgDiBy39
zXA3I32xE7Q1Iygl5DkQSfzzAp3EMRLnrbuuNelFnGgVqac8wCflLhd5WQIDAQAB
o4IDETCCAw0wHQYDVR0OBBYEFIXH3xl9xrsuVa8QH5CewEWWdHE1MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaGNmZkdYM0d1eTVWcnhBZmtKN0FSWlowY1RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCCAQwEAgABMIIB
BAMEAC2QrAMEAC2QrgMEAE1RZQMEAFZrMgMEAFZrZAMEAFkluQMEAFxyNgMEAF1x
qwMEAF13mgMEAF13wwMEAF6xDQMEAGc4VDAMAwQBpxGyAwQBpxG0MAwDBACnEbcD
BACnEb4DBAC5SAgDBAC5jdsDBAC5wWYDBAC5xusDBAC8QI4DBAC81HkDBADBfDED
BADCOiIwDAMEAsI6LAMEAMI6LgMEAMNYWQMEAcOFwAMEAMpHDwMEAMxNAAMEAcxN
AgMEAM71gAMEAc71gjAMAwQAzvWFAwQAzvWGAwQAzvWdAwQA1MAGAwQB1MAMAwQA
1MAPAwQB1MAUAwQA1MAXAwQB1MDWMA0GCSqGSIb3DQEBCwUAA4IBAQBCXAUerWcC
RID0ZE3JqJO79T8ccKH3cGYxUkox1FTx0oieHsGJvsozgKSuJYIoG7cYa1rTDTKh
sUVeqpap8nAre0eY4MlATe22H4k+f8l0Scxi3NyyKw6Uzz7s5sdzci2hg4obDuuk
ruqNotML8mV60W0K4MxuH6QXpZWkTfDZhx+2vCi6DzfGWrz685/yUE3AyVCBPmF3
LRpR7GocWTNvlg6J4U1ahWw6rcT1Ebhm6DOT3rUNspgd0QGYGWGP8sAM8dX8RIHs
dhzcRRiX2P4tNosObLdzp6fXlT0KlLDXhloRpElFSt9bzPaLQz5oL/rpW95mgAYs
0r+bojyUWBas
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:47 2025 by rpki-client