Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AnR5k2cIIg8CUPdX9VVqUxdlijc.roa
File:                     AnR5k2cIIg8CUPdX9VVqUxdlijc.roa (raw, json)
Hash identifier:          UeubnGbTG+EkFf/Y3M9iGHeiIz+Wmb5tZt6NT7u1AKY=
Subject key identifier:   02:74:79:93:67:08:22:0F:02:50:F7:57:F5:55:6A:53:17:65:8A:37
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       01A18FCAED335FCE22B275488E65FB221AF1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AnR5k2cIIg8CUPdX9VVqUxdlijc.roa
Signing time:             Sat 31 Oct 2026 02:30:03 +0000
ROA not before:           Sat 31 Oct 2026 02:30:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197196
IP address blocks:        87.86.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:ca:ed:33:5f:ce:22:b2:75:48:8e:65:fb:22:1a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Oct 31 02:30:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=027479936708220f0250f757f5556a5317658a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:c6:78:06:93:f7:8b:e9:f8:18:6a:fd:b5:
                    ff:8d:d3:1f:fb:0a:c0:e9:15:24:f1:71:0e:7d:42:
                    74:a9:17:94:e7:97:6c:6b:cc:47:9e:60:72:84:85:
                    6a:71:8a:7d:d8:c2:2c:0b:92:1f:a1:86:9b:e5:97:
                    f5:a1:15:e0:2b:27:94:9c:58:e5:19:50:ec:50:8f:
                    a0:c5:59:c2:f0:9b:70:ca:eb:3d:35:6d:cb:b4:75:
                    ad:4c:cf:11:2c:54:90:5b:85:2b:1a:5e:ec:bb:10:
                    f8:a0:aa:70:14:e2:54:e4:87:c7:dc:32:ba:21:26:
                    31:18:7a:03:68:30:d1:29:b8:54:0e:74:c4:8b:aa:
                    90:4e:b6:cb:14:17:ad:b7:eb:ab:7d:00:4c:48:2d:
                    ad:ce:96:ee:89:30:62:fb:67:32:de:e5:fa:50:39:
                    d5:fa:09:f0:d3:32:b3:32:56:e8:d2:55:6c:54:de:
                    5d:1b:d2:23:19:ca:c8:5d:18:13:51:59:ca:63:a3:
                    ff:73:8e:ac:4e:f2:56:d2:9e:91:e4:26:15:99:23:
                    e1:59:1f:96:85:61:9e:cb:0d:97:88:a1:5c:be:ea:
                    aa:58:f1:7f:4f:07:86:b8:6a:98:2d:27:46:2d:bd:
                    fe:0f:e0:ed:af:80:10:7d:ee:56:5d:f7:d5:a4:a8:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:79:93:67:08:22:0F:02:50:F7:57:F5:55:6A:53:17:65:8A:37
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AnR5k2cIIg8CUPdX9VVqUxdlijc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.86.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:c8:14:08:51:f9:20:50:82:53:8e:3d:1d:e9:5d:90:51:11:
         ff:0b:23:62:dc:e9:53:90:c6:0d:3e:81:80:5c:9d:0e:f6:5b:
         58:e2:08:4e:e1:9a:94:d9:a7:cc:49:5b:13:3c:a5:ac:38:53:
         c7:cb:94:7e:b6:75:aa:06:6f:f4:de:2b:2c:fe:6f:5e:3f:e7:
         e8:40:1f:2c:03:4b:4d:b4:c1:8f:d8:72:ea:bf:5c:35:fc:c1:
         dc:6a:75:93:53:80:09:6b:fa:f9:04:1f:cb:ee:63:f1:04:45:
         e1:e0:9f:38:ad:e6:5a:bb:08:76:8d:e3:4d:11:7a:7e:8f:8c:
         92:fb:81:8a:ff:07:3e:da:ad:f3:6f:b6:30:01:3f:51:b5:8e:
         f8:ff:e8:b0:1f:87:c2:a3:e3:aa:c0:f7:ed:1f:8a:fb:12:1f:
         25:68:fb:d9:ae:48:e1:4c:42:44:0f:fb:93:83:d8:db:11:70:
         2c:05:90:61:67:da:43:d8:b3:24:3f:47:07:41:96:98:f8:67:
         1a:27:fb:04:df:2d:28:58:77:68:40:7a:08:da:08:92:37:dd:
         ec:d9:f9:08:c7:47:9b:f0:d3:ae:63:b2:6b:e1:ef:e9:a5:90:
         c5:c2:c2:bc:2e:ac:32:a6:4a:83:ed:7e:60:b1:b6:e3:9a:ac:
         08:de:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:07 2026 by rpki-client