Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jyE_NYdirOGaX1MTTwN_euOSJ30.roa
File:                     jyE_NYdirOGaX1MTTwN_euOSJ30.roa (raw, json)
Hash identifier:          l92JiB4AF0ZlKiGDxVb1defpHFhxbwiRHIIwg+1AQjY=
Subject key identifier:   8F:21:3F:35:87:62:AC:E1:9A:5F:53:13:4F:03:7F:7A:E3:92:27:7D
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019FAD3C3EC640527D1DD30A8F9B2A495F16
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jyE_NYdirOGaX1MTTwN_euOSJ30.roa
Signing time:             Wed 29 Jul 2026 09:37:14 +0000
ROA not before:           Wed 29 Jul 2026 09:37:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34672
IP address blocks:        46.151.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:3c:3e:c6:40:52:7d:1d:d3:0a:8f:9b:2a:49:5f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jul 29 09:37:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f213f358762ace19a5f53134f037f7ae392277d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:27:31:0d:b5:de:a6:ae:18:7b:0e:c1:87:
                    f5:a0:8d:33:f7:ac:c7:3a:60:c2:bb:bf:31:a1:49:
                    6d:1a:1e:90:d2:6f:69:92:c3:34:af:f8:ee:c9:5a:
                    2b:34:f9:66:0d:53:73:92:4c:99:47:a6:2c:7c:a6:
                    0f:5c:06:1a:eb:f5:01:1f:54:84:58:ee:0b:08:0a:
                    f0:a6:a3:80:72:bb:b1:40:28:d3:ea:9f:7f:f8:a9:
                    5c:76:93:8c:9e:83:df:d2:4f:7b:6d:e8:dc:f6:b6:
                    1b:8c:9f:7b:94:27:d6:70:9a:c4:8c:dc:8b:24:ed:
                    21:ea:05:a3:8a:b5:14:c1:ad:81:2d:0c:61:d0:97:
                    29:89:f7:ec:08:9e:f9:ee:22:cb:b2:8c:77:01:ed:
                    41:cd:c4:0e:99:65:6a:a6:ea:21:44:74:87:e5:e3:
                    ff:a1:f5:e0:91:8e:c9:6e:21:c3:be:23:75:57:8e:
                    8e:da:cc:ae:61:56:1f:00:6e:b7:0f:67:3b:d9:78:
                    35:42:6a:22:43:8e:58:a1:ca:b9:29:e5:ce:e0:69:
                    c3:03:55:76:88:ae:20:90:90:10:29:c6:2d:d8:2a:
                    65:34:7e:52:4f:db:f6:99:94:41:80:3b:d7:e1:42:
                    8b:8c:de:7e:68:79:35:da:dd:19:eb:60:6a:20:c9:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:3F:35:87:62:AC:E1:9A:5F:53:13:4F:03:7F:7A:E3:92:27:7D
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jyE_NYdirOGaX1MTTwN_euOSJ30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:b0:38:c3:99:82:64:b3:13:e0:e0:1b:07:f8:6f:36:c9:
         53:ff:3e:80:63:37:95:f2:9f:66:3b:ee:0a:18:20:7f:20:e0:
         4d:8e:8b:91:27:d3:df:46:0a:f6:8f:74:97:74:9b:57:a5:19:
         61:a9:22:07:66:08:31:c1:d9:9e:70:13:5a:c0:8f:17:ef:e3:
         1e:e9:47:45:bc:89:55:21:88:5d:2d:45:08:c9:f4:d9:c0:7f:
         46:5e:89:68:c8:a1:52:96:c9:ee:19:2d:5b:55:83:a4:ea:7e:
         46:5e:4d:4d:24:ce:91:cb:2f:ca:e8:9f:d3:82:cf:f7:62:75:
         48:b4:29:ed:65:c6:37:f3:0c:b9:43:81:d1:71:5b:db:8e:37:
         76:26:68:24:fa:ee:7e:58:b3:9f:2d:c2:75:22:8a:c6:af:dd:
         c9:30:fd:8b:01:ec:da:d7:b9:03:32:34:76:2e:61:d0:c1:44:
         76:ee:d6:50:bb:c7:ee:30:0d:90:83:20:da:6b:48:33:5a:a8:
         15:b4:46:e3:c1:37:2d:af:8f:9f:38:ef:1d:f0:a3:f7:8c:ea:
         61:be:46:db:8d:21:aa:48:df:04:e9:17:b3:52:f8:b2:25:94:
         e4:6a:ff:af:26:7b:f5:6e:69:0c:61:3b:ff:03:6e:d9:ff:ac:
         21:ba:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:05:20 2026 by rpki-client