Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/edX_boH5LwBQxREZ5Yd9Q9rdwZA.roa
File:                     edX_boH5LwBQxREZ5Yd9Q9rdwZA.roa (raw, json)
Hash identifier:          Uq4THL9ZfWFz/rodcRv55QUF/2Sqc2zmhQEgoW0B3Zg=
Subject key identifier:   79:D5:FF:6E:81:F9:2F:00:50:C5:11:19:E5:87:7D:43:DA:DD:C1:90
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       01A0D411D97AE89A28B3AE2BEFA5E9D95E85
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/edX_boH5LwBQxREZ5Yd9Q9rdwZA.roa
Signing time:             Thu 24 Sep 2026 15:38:54 +0000
ROA not before:           Thu 24 Sep 2026 15:38:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198969
IP address blocks:        93.118.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:11:d9:7a:e8:9a:28:b3:ae:2b:ef:a5:e9:d9:5e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Sep 24 15:38:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79d5ff6e81f92f0050c51119e5877d43daddc190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:2a:18:cc:23:5a:f9:cf:f6:d5:84:8c:0c:
                    e9:c9:43:85:03:4d:3b:7b:dc:1c:24:d0:e1:6e:f5:
                    1d:48:b2:19:90:09:bc:b9:68:55:56:72:25:67:dc:
                    f2:ff:14:d3:a5:25:3f:97:27:99:42:2b:20:ca:93:
                    76:f6:58:cd:9c:8a:d0:36:9e:79:31:c3:1f:74:db:
                    d1:fd:fe:d4:d6:05:0d:d5:84:22:64:c3:fd:6b:39:
                    eb:a9:03:b1:43:46:b4:9e:aa:13:46:87:50:10:8c:
                    0e:4d:ff:23:4d:bd:11:18:e9:f4:9c:56:56:ae:b4:
                    3e:05:e7:a5:4d:a0:01:73:a0:c1:5e:77:1b:bb:0e:
                    d0:4d:85:c6:c9:ae:a7:fa:76:1f:fd:f3:03:3a:dc:
                    17:00:f5:8a:d8:59:10:04:87:d2:52:0d:e5:12:f3:
                    20:9a:94:0d:e0:75:2c:bf:d2:f6:c6:c2:8e:9e:76:
                    0b:b5:45:b4:a9:45:4b:b1:fa:7a:91:16:f3:95:ee:
                    7f:0e:34:44:de:2b:43:29:31:c3:2a:95:cb:86:af:
                    4a:f6:3f:c2:c3:09:67:8a:cc:19:bf:07:31:09:a3:
                    98:7f:ae:10:0e:0f:d0:99:a2:1b:fd:84:e6:2a:41:
                    47:33:e7:dc:4b:25:d7:e2:b4:34:e8:36:08:d7:8d:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:FF:6E:81:F9:2F:00:50:C5:11:19:E5:87:7D:43:DA:DD:C1:90
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/edX_boH5LwBQxREZ5Yd9Q9rdwZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.118.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:99:5a:00:f0:94:64:58:00:55:b0:d8:e4:03:4e:cb:0e:
         ff:fd:00:91:29:5b:b6:fd:55:db:ce:85:c6:3c:12:c6:b5:a5:
         86:b2:37:d0:c8:02:51:a9:3d:8a:a2:1e:fd:31:12:b1:ca:8f:
         2e:3a:7c:05:0d:c4:12:c4:3c:0d:b1:bd:79:ec:66:ae:e1:49:
         b5:1e:06:76:b6:3b:9b:15:a9:a4:6c:9b:bb:bb:02:10:de:ca:
         b6:68:12:c1:5d:af:a5:b4:a9:1b:d6:03:e5:f2:ff:f1:cb:6b:
         75:bd:05:2a:5e:57:be:cf:50:fb:0f:d2:7a:ee:89:12:7b:ad:
         22:4a:2a:bd:a2:a2:31:45:89:99:c6:2d:b3:bd:e6:28:ab:00:
         46:0c:b6:96:aa:1c:37:84:a0:88:bf:c3:4f:07:3a:c1:19:da:
         d7:d6:aa:51:17:55:4a:8f:4d:66:af:09:8c:ae:ad:cd:07:72:
         29:92:a6:53:bc:5b:93:c5:80:e9:8e:a6:31:84:f4:54:5c:37:
         14:fb:2a:ce:8b:27:39:16:a2:2a:67:43:9a:29:a9:6d:0b:8e:
         33:97:5e:f7:61:e5:2a:ed:5b:ff:ba:26:11:15:ed:d9:49:6e:
         17:a8:a8:11:b5:90:cc:6f:8c:62:98:a9:83:11:a6:1a:f4:8e:
         ff:76:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:49 2026 by rpki-client