Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/5QX4P1GCXL_XBZuEy60oKnfNQ3M.roa
File:                     5QX4P1GCXL_XBZuEy60oKnfNQ3M.roa (raw, json)
Hash identifier:          klhIfOMnlwbdBfIFIqjvgnFnVWAnrb3GGw6MUJLvm7A=
Subject key identifier:   E5:05:F8:3F:51:82:5C:BF:D7:05:9B:84:CB:AD:28:2A:77:CD:43:73
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       019DB8FE4D440B79B6421C033A3F9ABC3FED
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/5QX4P1GCXL_XBZuEy60oKnfNQ3M.roa
Signing time:             Thu 23 Apr 2026 06:19:26 +0000
ROA not before:           Thu 23 Apr 2026 06:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29256
IP address blocks:        46.57.128.0/21 maxlen: 21
                          46.57.136.0/21 maxlen: 21
                          46.57.144.0/20 maxlen: 20
                          46.57.144.0/21 maxlen: 21
                          46.57.144.0/22 maxlen: 22
                          46.57.148.0/22 maxlen: 22
                          46.57.152.0/21 maxlen: 21
                          46.57.160.0/20 maxlen: 20
                          46.57.160.0/21 maxlen: 21
                          46.57.168.0/21 maxlen: 21
                          46.57.168.0/22 maxlen: 22
                          46.57.172.0/22 maxlen: 22
                          46.57.176.0/20 maxlen: 20
                          46.57.176.0/21 maxlen: 21
                          46.57.184.0/21 maxlen: 21
                          46.57.192.0/20 maxlen: 20
                          46.57.192.0/21 maxlen: 21
                          46.57.200.0/21 maxlen: 21
                          46.57.208.0/20 maxlen: 20
                          46.57.208.0/21 maxlen: 21
                          46.57.216.0/21 maxlen: 21
                          46.57.224.0/20 maxlen: 20
                          46.57.224.0/21 maxlen: 21
                          46.57.232.0/21 maxlen: 21
                          46.57.240.0/20 maxlen: 20
                          46.57.240.0/21 maxlen: 21
                          46.57.248.0/21 maxlen: 21
                          46.213.0.0/21 maxlen: 21
                          46.213.0.0/22 maxlen: 22
                          46.213.4.0/22 maxlen: 22
                          46.213.8.0/21 maxlen: 21
                          46.213.16.0/21 maxlen: 21
                          46.213.24.0/21 maxlen: 21
                          46.213.32.0/21 maxlen: 21
                          46.213.40.0/21 maxlen: 21
                          46.213.48.0/21 maxlen: 21
                          46.213.56.0/21 maxlen: 21
                          46.213.64.0/21 maxlen: 21
                          46.213.72.0/21 maxlen: 21
                          46.213.80.0/21 maxlen: 21
                          46.213.88.0/21 maxlen: 21
                          46.213.96.0/21 maxlen: 21
                          46.213.104.0/21 maxlen: 21
                          46.213.104.0/22 maxlen: 22
                          46.213.108.0/22 maxlen: 22
                          46.213.112.0/21 maxlen: 21
                          46.213.112.0/22 maxlen: 22
                          46.213.116.0/22 maxlen: 22
                          46.213.120.0/21 maxlen: 21
                          46.213.120.0/22 maxlen: 22
                          46.213.124.0/22 maxlen: 22
                          46.213.128.0/21 maxlen: 21
                          46.213.136.0/21 maxlen: 21
                          46.213.144.0/21 maxlen: 21
                          46.213.152.0/21 maxlen: 21
                          46.213.160.0/21 maxlen: 21
                          46.213.168.0/21 maxlen: 21
                          46.213.168.0/22 maxlen: 22
                          46.213.172.0/22 maxlen: 22
                          46.213.176.0/21 maxlen: 21
                          46.213.184.0/21 maxlen: 21
                          46.213.184.0/22 maxlen: 22
                          46.213.188.0/22 maxlen: 22
                          46.213.192.0/21 maxlen: 21
                          46.213.200.0/21 maxlen: 21
                          46.213.208.0/21 maxlen: 21
                          46.213.216.0/21 maxlen: 21
                          46.213.224.0/21 maxlen: 21
                          46.213.224.0/22 maxlen: 22
                          46.213.228.0/22 maxlen: 22
                          46.213.232.0/21 maxlen: 21
                          46.213.240.0/21 maxlen: 21
                          46.213.248.0/21 maxlen: 21
                          94.252.128.0/22 maxlen: 22
                          94.252.132.0/22 maxlen: 22
                          94.252.136.0/21 maxlen: 21
                          94.252.144.0/20 maxlen: 20
                          94.252.144.0/21 maxlen: 21
                          94.252.152.0/21 maxlen: 21
                          94.252.160.0/20 maxlen: 20
                          94.252.176.0/22 maxlen: 22
                          94.252.180.0/24 maxlen: 24
                          94.252.181.0/24 maxlen: 24
                          94.252.182.0/24 maxlen: 24
                          94.252.183.0/24 maxlen: 24
                          94.252.184.0/24 maxlen: 24
                          94.252.185.0/24 maxlen: 24
                          94.252.186.0/24 maxlen: 24
                          94.252.187.0/24 maxlen: 24
                          94.252.188.0/24 maxlen: 24
                          94.252.189.0/24 maxlen: 24
                          94.252.190.0/24 maxlen: 24
                          94.252.191.0/24 maxlen: 24
                          94.252.192.0/21 maxlen: 21
                          94.252.200.0/21 maxlen: 21
                          94.252.208.0/21 maxlen: 21
                          94.252.216.0/21 maxlen: 21
                          94.252.224.0/21 maxlen: 21
                          94.252.240.0/21 maxlen: 21
                          94.252.248.0/21 maxlen: 21
                          178.52.0.0/20 maxlen: 20
                          178.52.0.0/21 maxlen: 21
                          178.52.0.0/22 maxlen: 22
                          178.52.4.0/22 maxlen: 22
                          178.52.8.0/21 maxlen: 21
                          178.52.8.0/22 maxlen: 22
                          178.52.12.0/22 maxlen: 22
                          178.52.16.0/20 maxlen: 20
                          178.52.16.0/21 maxlen: 21
                          178.52.24.0/21 maxlen: 21
                          178.52.32.0/20 maxlen: 20
                          178.52.32.0/21 maxlen: 21
                          178.52.40.0/21 maxlen: 21
                          178.52.48.0/20 maxlen: 20
                          178.52.48.0/21 maxlen: 21
                          178.52.56.0/21 maxlen: 21
                          178.52.64.0/20 maxlen: 20
                          178.52.64.0/21 maxlen: 21
                          178.52.72.0/21 maxlen: 21
                          178.52.80.0/20 maxlen: 20
                          178.52.80.0/21 maxlen: 21
                          178.52.88.0/21 maxlen: 21
                          178.52.96.0/20 maxlen: 20
                          178.52.96.0/21 maxlen: 21
                          178.52.104.0/21 maxlen: 21
                          178.52.104.0/22 maxlen: 22
                          178.52.108.0/22 maxlen: 22
                          178.52.112.0/20 maxlen: 20
                          178.52.112.0/21 maxlen: 21
                          178.52.120.0/21 maxlen: 21
                          178.52.128.0/20 maxlen: 20
                          178.52.128.0/21 maxlen: 21
                          178.52.136.0/21 maxlen: 21
                          178.52.144.0/20 maxlen: 20
                          178.52.144.0/21 maxlen: 21
                          178.52.152.0/21 maxlen: 21
                          178.52.160.0/20 maxlen: 20
                          178.52.160.0/21 maxlen: 21
                          178.52.168.0/21 maxlen: 21
                          178.52.176.0/20 maxlen: 20
                          178.52.176.0/21 maxlen: 21
                          178.52.176.0/22 maxlen: 22
                          178.52.180.0/22 maxlen: 22
                          178.52.184.0/21 maxlen: 21
                          178.52.192.0/20 maxlen: 20
                          178.52.192.0/21 maxlen: 21
                          178.52.200.0/21 maxlen: 21
                          178.52.208.0/20 maxlen: 20
                          178.52.208.0/21 maxlen: 21
                          178.52.216.0/21 maxlen: 21
                          178.52.224.0/20 maxlen: 20
                          178.52.224.0/21 maxlen: 21
                          178.52.232.0/21 maxlen: 21
                          178.52.240.0/20 maxlen: 20
                          178.52.240.0/21 maxlen: 21
                          178.52.248.0/21 maxlen: 21
                          178.52.248.0/22 maxlen: 22
                          178.52.252.0/22 maxlen: 22
                          185.136.144.0/22 maxlen: 22
                          188.139.128.0/20 maxlen: 20
                          188.139.128.0/21 maxlen: 21
                          188.139.136.0/21 maxlen: 21
                          188.139.144.0/20 maxlen: 20
                          188.139.144.0/21 maxlen: 21
                          188.139.152.0/21 maxlen: 21
                          188.139.160.0/20 maxlen: 20
                          188.139.160.0/21 maxlen: 21
                          188.139.168.0/21 maxlen: 21
                          188.139.176.0/20 maxlen: 20
                          188.139.176.0/21 maxlen: 21
                          188.139.184.0/21 maxlen: 21
                          188.139.192.0/20 maxlen: 20
                          188.139.192.0/21 maxlen: 21
                          188.139.200.0/21 maxlen: 21
                          188.139.208.0/20 maxlen: 20
                          188.139.208.0/21 maxlen: 21
                          188.139.216.0/21 maxlen: 21
                          188.139.224.0/20 maxlen: 20
                          188.139.224.0/21 maxlen: 21
                          188.139.232.0/21 maxlen: 21
                          188.139.240.0/20 maxlen: 20
                          188.139.240.0/21 maxlen: 21
                          188.139.248.0/21 maxlen: 21
                          2a00:b800::/32 maxlen: 32
                          2a00:b800:3000::/55 maxlen: 55
                          2a00:b800:3000:200::/55 maxlen: 55
                          2a00:b800:3000:400::/55 maxlen: 55
                          2a00:b800:3000:600::/55 maxlen: 55
                          2a00:b800:3200::/55 maxlen: 55
                          2a00:b800:3200:200::/55 maxlen: 55
                          2a00:b800:3200:400::/55 maxlen: 55
                          2a00:b800:3200:600::/55 maxlen: 55
                          2a00:b800:3400::/55 maxlen: 55
                          2a00:b800:3400:200::/55 maxlen: 55
                          2a00:b800:3400:400::/55 maxlen: 55
                          2a00:b800:3400:600::/55 maxlen: 55
                          2a00:b800:3600::/55 maxlen: 55
                          2a00:b800:3600:200::/55 maxlen: 55
                          2a00:b800:3600:400::/55 maxlen: 55
                          2a00:b800:3600:600::/55 maxlen: 55
                          2a00:b800:3a00::/55 maxlen: 55
                          2a00:b800:3a00:200::/55 maxlen: 55
                          2a00:b800:3a00:400::/55 maxlen: 55
                          2a00:b800:3a00:600::/55 maxlen: 55
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b8:fe:4d:44:0b:79:b6:42:1c:03:3a:3f:9a:bc:3f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Apr 23 06:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e505f83f51825cbfd7059b84cbad282a77cd4373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:ce:2e:3f:be:f7:b7:55:52:96:27:69:94:
                    f9:4f:f4:76:de:da:6d:69:d1:77:f6:64:f4:40:e7:
                    ff:c0:88:9c:cd:6e:0e:89:dd:9f:97:de:5d:bf:fc:
                    2a:14:97:86:e7:c7:7f:78:93:7b:c9:69:09:91:68:
                    2e:11:f0:96:8e:0d:b8:63:da:7d:21:5e:e5:5c:be:
                    d9:31:52:b5:c2:6a:cc:90:90:5c:84:05:e5:3b:0e:
                    d5:07:5f:f4:d5:ef:4b:f4:ba:88:47:cd:5a:3c:02:
                    87:83:76:31:e9:60:8e:99:2f:47:4d:35:fb:2a:80:
                    0b:1d:d1:24:8f:eb:22:c9:76:87:f9:0b:80:01:d6:
                    0e:3e:3a:a6:ed:26:2e:d6:34:3b:29:8e:b2:1a:52:
                    3c:42:93:38:ef:17:20:1a:78:54:46:c4:a5:44:29:
                    c6:7f:47:85:09:ed:83:df:23:06:f0:5e:95:3f:8c:
                    a5:34:94:32:c4:c1:a7:3c:aa:1f:13:d2:87:46:7b:
                    c3:b9:31:6f:4e:43:33:71:6c:3d:2e:5a:3f:c9:d3:
                    ef:bf:e0:81:d4:9d:f0:8a:bb:3f:d9:81:6f:68:a5:
                    82:5c:7c:d1:ea:c9:b5:ae:29:1a:3d:c1:05:a6:86:
                    74:66:63:cb:e4:18:42:c9:c6:93:9e:15:c6:fa:91:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:F8:3F:51:82:5C:BF:D7:05:9B:84:CB:AD:28:2A:77:CD:43:73
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/5QX4P1GCXL_XBZuEy60oKnfNQ3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.57.128.0/17
                  46.213.0.0/16
                  94.252.128.0-94.252.231.255
                  94.252.240.0/20
                  178.52.0.0/16
                  185.136.144.0/22
                  188.139.128.0/17
                IPv6:
                  2a00:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:11:a0:91:c4:99:a6:53:66:ef:26:d8:c8:96:37:46:39:bb:
         d1:99:76:80:06:d1:6d:5e:32:36:8c:c2:8c:33:0b:72:65:54:
         2c:88:b7:b5:8e:71:8b:b4:04:74:d9:8d:1a:85:43:0b:17:e1:
         20:f2:e8:29:56:d2:61:d6:00:4a:27:40:d8:cf:c9:5a:20:be:
         cb:23:c8:5d:d6:4d:ff:3c:6c:f7:19:dd:2d:6f:b5:5a:97:e2:
         73:f7:9b:0f:3c:56:8b:78:3e:e2:00:78:e4:a2:75:06:27:fd:
         81:16:fc:42:9f:3d:28:77:88:72:b5:9d:40:03:29:0c:c4:36:
         4d:fd:82:9e:2c:0e:bf:ea:95:52:57:7b:50:78:c5:03:2f:ef:
         6b:51:6a:c9:20:a6:d9:fe:87:4f:f3:27:9c:98:31:77:6f:13:
         d4:ca:14:5d:64:c4:a5:29:fb:bb:7e:e3:ea:a3:c6:f6:29:e6:
         f5:dd:bb:e6:cc:1f:9a:7a:9c:8f:e4:78:6b:43:ed:1f:1c:2d:
         e9:df:53:54:34:02:5f:a4:1d:bf:f6:95:db:97:4f:6e:ca:be:
         9b:c7:e7:6d:c7:87:c4:ff:e8:e0:55:92:c7:06:51:ce:eb:08:
         01:1f:b7:be:e8:52:23:36:bb:49:d9:f4:7e:0b:a6:a1:21:e1:
         43:14:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:44 2026 by rpki-client