Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Jk6d4_pQgLVQrlHXcUGpFfe5RjM.roa
File:                     Jk6d4_pQgLVQrlHXcUGpFfe5RjM.roa (raw, json)
Hash identifier:          xRVcV2FvhTw3ySWFoNX/ofNl5ILqXr6SoENms1JzD+o=
Subject key identifier:   26:4E:9D:E3:FA:50:80:B5:50:AE:51:D7:71:41:A9:15:F7:B9:46:33
Certificate issuer:       /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial:       01A184A21EEDB4F1BC0F8CD755A2B7A9D03A
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Jk6d4_pQgLVQrlHXcUGpFfe5RjM.roa
Signing time:             Wed 28 Oct 2026 22:29:39 +0000
ROA not before:           Wed 28 Oct 2026 22:29:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210537
IP address blocks:        187.7.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:a2:1e:ed:b4:f1:bc:0f:8c:d7:55:a2:b7:a9:d0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
        Validity
            Not Before: Oct 28 22:29:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=264e9de3fa5080b550ae51d77141a915f7b94633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:b6:17:10:29:2c:f1:6f:0b:b2:54:fc:87:
                    9d:6a:9e:a9:55:90:4d:f1:32:95:a0:21:ef:9a:dc:
                    25:37:9a:f9:16:c2:35:00:5f:08:36:f6:0d:c7:66:
                    25:2f:b8:06:2d:b7:15:35:59:21:78:58:fd:b1:3f:
                    b6:01:83:5d:39:16:42:f7:b5:7c:7a:1d:85:a3:52:
                    e4:d0:e1:32:24:4e:1d:bc:6b:99:bc:1a:4b:00:91:
                    62:e4:a4:3b:6c:55:3a:d2:29:72:7d:5e:6c:38:ed:
                    7a:30:ef:60:60:9d:02:43:2f:de:58:c2:fb:14:45:
                    a5:79:9a:11:a5:90:be:a5:d7:0c:bb:fd:1b:cb:8f:
                    36:43:a7:b6:2c:8d:1e:f9:77:be:a4:3c:92:d5:7e:
                    f1:bd:a6:c3:22:d2:e6:1f:3f:6c:3c:9b:eb:c9:2e:
                    5c:d2:d9:da:0e:c3:45:e1:85:e8:6d:15:9a:b5:60:
                    eb:1d:8d:11:64:1c:a2:72:ad:3e:bf:f3:c0:a9:e8:
                    78:66:7a:ab:71:45:a3:b4:94:b0:d4:06:bd:87:c2:
                    70:7d:0a:cb:f5:93:16:5a:5e:3f:7e:db:a5:ec:20:
                    df:5d:5c:cb:40:6d:0d:64:cc:45:f9:ba:f4:95:4b:
                    72:8c:34:a1:f2:16:39:6b:75:43:08:97:be:e8:17:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:9D:E3:FA:50:80:B5:50:AE:51:D7:71:41:A9:15:F7:B9:46:33
            X509v3 Authority Key Identifier:
                keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Jk6d4_pQgLVQrlHXcUGpFfe5RjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.7.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:09:b1:61:54:59:8c:36:d8:ea:8c:7f:01:57:26:51:4c:
         a4:5d:ab:cb:6e:00:8e:f6:e6:7d:96:1a:07:e1:7f:be:93:a5:
         24:78:22:f5:e8:c5:41:9a:c3:c0:5a:ea:ef:1a:2e:3b:7b:67:
         f8:09:2d:81:13:d3:df:84:6f:99:48:25:f6:14:7f:31:ba:55:
         8e:d1:a6:a6:40:fb:23:32:19:1d:91:aa:53:3f:4c:2f:35:ec:
         1f:db:bf:07:06:51:da:26:43:84:b7:76:79:12:6a:7f:af:b4:
         47:df:87:95:f5:63:46:ca:65:fc:f6:4b:e9:2b:75:15:fd:df:
         85:2c:3d:8b:bd:8e:42:89:dc:06:ff:50:1e:0c:1c:23:05:38:
         7b:a2:e4:2d:ad:89:29:1a:37:72:77:94:8e:06:77:76:b3:28:
         77:05:34:27:52:ec:c2:08:42:30:b2:1f:8a:3f:4f:c2:3a:fc:
         fb:ad:ff:e9:22:ab:3c:d4:0d:ad:9c:e6:04:ad:4c:35:00:31:
         52:c7:21:09:e9:41:3f:6e:9d:02:8c:35:6e:ec:fd:63:3f:a6:
         41:d4:bb:f8:12:99:27:4c:bc:9d:06:f5:80:f6:03:64:11:00:
         ec:be:02:10:3e:a1:5b:bc:47:45:88:f0:d1:77:2d:b6:e6:fa:
         c6:5e:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:05 2026 by rpki-client