Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nv0W74lBIloxniJtqsjxJDrCYc4.roa
File:                     nv0W74lBIloxniJtqsjxJDrCYc4.roa (raw, json)
Hash identifier:          1jnQIqwzzz2Mf6YUDGBptXQoafmJ908O1C0VxnVF4q0=
Subject key identifier:   9E:FD:16:EF:89:41:22:5A:31:9E:22:6D:AA:C8:F1:24:3A:C2:61:CE
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       0199CD695C4030FEB5D51DEAD17529878344
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nv0W74lBIloxniJtqsjxJDrCYc4.roa
Signing time:             Fri 10 Oct 2025 09:17:38 +0000
ROA not before:           Fri 10 Oct 2025 09:17:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        212.134.36.0/24 maxlen: 24
                          212.134.58.0/24 maxlen: 24
                          212.134.86.0/24 maxlen: 24
                          212.134.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:cd:69:5c:40:30:fe:b5:d5:1d:ea:d1:75:29:87:83:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Oct 10 09:17:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9efd16ef8941225a319e226daac8f1243ac261ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:61:d3:47:b5:8c:96:91:56:7f:96:9c:36:
                    a8:09:63:21:b3:8f:b6:1f:43:18:f7:9c:52:4c:d6:
                    95:fc:d4:13:c5:9f:43:a6:7f:19:ef:92:e4:c9:b2:
                    5b:81:81:f9:a4:04:b0:95:d2:21:50:36:88:61:3c:
                    a0:ca:74:da:4f:ee:b0:f8:a8:e2:78:52:f5:23:c3:
                    ff:ce:92:aa:8a:22:b9:86:b5:80:7e:90:77:28:f3:
                    81:9d:56:fb:46:6a:49:8f:ab:16:d9:1a:12:ac:d1:
                    6d:83:51:d3:17:f9:fa:94:a6:c0:d9:56:12:0f:a0:
                    01:8a:e0:86:ee:9b:c8:10:df:e1:02:05:e2:f4:9c:
                    db:0d:bd:7d:18:03:a4:9f:d3:f1:c3:cd:0d:65:80:
                    40:ca:99:a3:b6:18:7e:24:5a:b5:52:6b:c2:51:80:
                    43:c0:b2:93:34:31:ae:34:40:82:81:42:79:23:2b:
                    99:5c:1c:9e:c5:38:5a:ef:d9:7e:b7:f9:aa:49:2a:
                    e7:cf:1d:22:43:2c:39:5c:1e:14:68:fb:34:38:8d:
                    ae:49:49:fa:e3:0d:87:d0:f5:4b:19:be:21:83:80:
                    a0:fb:1d:fa:7e:c4:fb:37:47:44:12:0a:21:35:56:
                    e6:03:01:9a:cc:75:5e:40:fe:97:36:41:d5:63:79:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FD:16:EF:89:41:22:5A:31:9E:22:6D:AA:C8:F1:24:3A:C2:61:CE
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nv0W74lBIloxniJtqsjxJDrCYc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.36.0/24
                  212.134.58.0/24
                  212.134.86.0/24
                  212.134.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:8a:07:21:9f:b4:36:a0:83:c1:16:33:b8:2b:cf:1a:e0:d3:
         f0:ca:89:a0:85:c0:a6:92:d5:dc:f5:c1:a0:19:c3:2b:92:41:
         5f:c3:ba:18:fb:4e:57:a3:49:7a:88:47:d8:4b:63:61:f3:3b:
         bb:55:fc:d4:2d:f7:ed:a0:5b:b8:c5:51:d4:f2:6c:53:31:00:
         96:c4:0a:95:b1:58:17:a5:e3:76:f5:f2:b6:c3:08:c0:57:18:
         46:0d:18:65:e7:49:ef:fb:1b:ac:e7:af:36:d6:a0:d1:09:b6:
         47:c0:2d:1e:af:82:ce:19:c4:28:10:61:e3:f6:52:8c:28:43:
         c7:8a:71:54:dc:f8:3c:01:17:9b:22:38:a2:e5:ac:2d:40:69:
         e2:b7:a5:e5:20:6a:f9:71:d8:5b:a8:11:a7:15:c9:70:a4:e4:
         80:bd:6e:76:13:39:db:f9:90:19:3a:1a:7e:cc:c1:a1:c0:81:
         7b:f5:70:21:d7:d8:d8:4f:23:cf:90:af:cb:0b:e7:94:dd:a8:
         43:4e:98:23:92:be:62:4b:39:4f:f7:21:03:3e:79:74:81:52:
         af:65:b8:f0:ce:cd:64:1f:18:03:28:e5:d7:89:19:1b:18:11:
         5a:7b:96:4b:50:24:fd:80:a7:f3:05:8b:15:fc:f5:51:1e:06:
         47:22:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:11 2025 by rpki-client