Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/VPyEZw62iC49LD_5e5811s6wJGQ.roa
File:                     VPyEZw62iC49LD_5e5811s6wJGQ.roa (raw, json)
Hash identifier:          xhs4eQrpcQQYW6uWdzxRkc2CnF3GQ4mfH9rJz7FgU2I=
Subject key identifier:   54:FC:84:67:0E:B6:88:2E:3D:2C:3F:F9:7B:9F:35:D6:CE:B0:24:64
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       019DBB15E2E1BFBB6D7AE06190D090A553C1
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/VPyEZw62iC49LD_5e5811s6wJGQ.roa
Signing time:             Thu 23 Apr 2026 16:04:26 +0000
ROA not before:           Thu 23 Apr 2026 16:04:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214357
IP address blocks:        185.166.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:bb:15:e2:e1:bf:bb:6d:7a:e0:61:90:d0:90:a5:53:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Apr 23 16:04:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54fc84670eb6882e3d2c3ff97b9f35d6ceb02464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:14:67:60:a9:4c:83:d8:9b:03:1e:1f:ec:
                    c8:e9:ef:0a:ef:bd:d8:78:ec:26:0f:68:e8:fc:c4:
                    a2:c4:e2:cf:a2:5a:e2:91:95:f1:91:e6:31:9e:e4:
                    fb:96:1a:d9:21:48:39:31:12:40:51:10:1c:4a:78:
                    c6:c3:42:90:f3:11:d6:39:9b:2f:36:25:ef:30:1a:
                    43:78:60:e2:d2:7d:59:06:83:57:47:77:61:01:fb:
                    d6:0a:02:d7:f8:81:e4:bc:c7:50:54:b5:91:1c:06:
                    ca:9d:fd:90:2e:b2:7b:58:41:35:2a:02:35:d5:02:
                    17:4c:66:ca:dd:bf:ff:1b:7b:57:1b:7f:3f:8d:fc:
                    01:3e:1c:25:f0:24:a8:90:64:33:7c:d2:2d:ed:c0:
                    21:13:e3:89:ad:e3:59:d3:fb:c4:a8:e4:bc:fe:a0:
                    98:5c:99:56:b1:b9:3c:8b:46:99:57:fa:31:2e:4b:
                    10:61:4d:8a:f0:84:8f:65:94:92:0f:48:8a:a2:89:
                    00:ac:69:d8:80:14:2c:5b:c6:1f:41:4f:0f:0d:63:
                    ce:b4:f2:e6:a6:8d:b3:32:79:d2:ce:fe:f9:a9:50:
                    ba:f9:3f:fd:d6:29:c0:6d:fb:2f:de:e3:7d:63:69:
                    85:dd:47:cc:67:40:ee:96:f8:b7:21:e3:67:14:df:
                    5b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:84:67:0E:B6:88:2E:3D:2C:3F:F9:7B:9F:35:D6:CE:B0:24:64
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/VPyEZw62iC49LD_5e5811s6wJGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6d:de:02:3c:9a:f4:cf:d0:76:5b:9c:de:8e:d4:25:ff:fb:
         21:11:6b:90:3c:22:91:2b:2a:51:b3:da:96:4f:74:ad:57:06:
         ad:58:1e:77:53:0f:4b:61:10:49:99:56:e2:0c:46:43:55:26:
         44:11:ec:36:23:a2:2e:44:4e:74:7a:c7:6f:78:8b:7d:65:5b:
         8b:e2:f0:1a:d2:00:6d:f1:29:7e:55:f9:9d:b5:b3:c6:10:85:
         b1:e5:3b:02:9e:72:35:54:9e:ee:28:a2:66:02:2f:12:b8:f6:
         6d:31:cc:78:af:43:71:c0:a7:fb:39:e8:97:c7:4b:d6:74:a7:
         aa:07:ef:06:43:16:0f:78:e7:06:de:ba:a1:54:f2:56:94:4a:
         93:39:9c:0c:31:9a:57:b7:45:94:4e:fd:af:80:b7:06:55:df:
         41:a8:09:66:d6:71:9a:91:67:42:d6:93:56:a4:2d:80:20:13:
         4a:ea:a8:25:50:ac:08:db:5a:18:c6:ba:e0:ca:b2:d0:95:47:
         d5:6a:7a:5f:63:2f:c2:cc:04:10:40:2d:85:a4:5e:53:a4:f0:
         ca:ee:c9:47:c0:c7:12:10:28:73:f9:f5:0b:a8:f6:d4:67:8c:
         92:3c:29:c7:c4:66:7a:d9:a8:34:63:d6:41:92:59:44:dc:3b:
         e8:77:f2:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ27FeLhv7tteuBhkNCQpVPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx
ZjVmNmUwHhcNMjYwNDIzMTYwNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGZjODQ2NzBlYjY4ODJlM2QyYzNmZjk3YjlmMzVkNmNlYjAyNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWoUZ2CpTIPYmwMeH+zI6e8K773Y
eOwmD2jo/MSixOLPolrikZXxkeYxnuT7lhrZIUg5MRJAURAcSnjGw0KQ8xHWOZsv
NiXvMBpDeGDi0n1ZBoNXR3dhAfvWCgLX+IHkvMdQVLWRHAbKnf2QLrJ7WEE1KgI1
1QIXTGbK3b//G3tXG38/jfwBPhwl8CSokGQzfNIt7cAhE+OJreNZ0/vEqOS8/qCY
XJlWsbk8i0aZV/oxLksQYU2K8ISPZZSSD0iKookArGnYgBQsW8YfQU8PDWPOtPLm
po2zMnnSzv75qVC6+T/91inAbfsv3uN9Y2mF3UfMZ0Dulvi3IeNnFN9bsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFT8hGcOtoguPSw/+XufNdbOsCRkMB8GA1UdIwQY
MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt
MGY3OTY0MzIxY2UxLzEvVlB5RVp3NjJpQzQ5TERfNWU1ODExczZ3SkdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux
LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaZcMA0G
CSqGSIb3DQEBCwUAA4IBAQAEbd4CPJr0z9B2W5zejtQl//shEWuQPCKRKypRs9qW
T3StVwatWB53Uw9LYRBJmVbiDEZDVSZEEew2I6IuRE50esdveIt9ZVuL4vAa0gBt
8Sl+VfmdtbPGEIWx5TsCnnI1VJ7uKKJmAi8SuPZtMcx4r0NxwKf7OeiXx0vWdKeq
B+8GQxYPeOcG3rqhVPJWlEqTOZwMMZpXt0WUTv2vgLcGVd9BqAlm1nGakWdC1pNW
pC2AIBNK6qglUKwI21oYxrrgyrLQlUfVanpfYy/CzAQQQC2FpF5TpPDK7slHwMcS
EChz+fULqPbUZ4ySPCnHxGZ62ag0Y9ZBkllE3Dvod/LC
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:26 2026 by rpki-client