Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/M2wL5rCeB0jM50mB6flrsbDhDMc.roa
File:                     M2wL5rCeB0jM50mB6flrsbDhDMc.roa (raw, json)
Hash identifier:          p59jmbhrBjOY9sTN6aHGji7dUq9dBGCvUhr+mV9L6Uk=
Subject key identifier:   33:6C:0B:E6:B0:9E:07:48:CC:E7:49:81:E9:F9:6B:B1:B0:E1:0C:C7
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       019F7E78CE4C937E9E017FA5625492FA2C57
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/M2wL5rCeB0jM50mB6flrsbDhDMc.roa
Signing time:             Mon 20 Jul 2026 07:41:14 +0000
ROA not before:           Mon 20 Jul 2026 07:41:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15924
IP address blocks:        185.233.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:7e:78:ce:4c:93:7e:9e:01:7f:a5:62:54:92:fa:2c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Jul 20 07:41:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=336c0be6b09e0748cce74981e9f96bb1b0e10cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:f8:72:5b:db:36:40:d5:e3:5b:b6:a0:d9:
                    47:62:de:dd:db:34:9a:04:74:b9:93:51:5b:15:60:
                    e2:f6:48:87:b2:a7:f1:02:35:d7:45:a2:70:97:13:
                    0c:5a:de:df:40:53:35:42:4e:b7:fb:72:e3:9c:fe:
                    35:6f:61:1b:82:3a:22:be:8c:18:01:0c:db:40:88:
                    98:13:4d:26:43:60:98:ad:16:76:62:9e:c5:f7:35:
                    00:5f:98:58:0e:45:91:a9:e9:d8:c2:3b:f1:8e:82:
                    61:ad:a9:e8:15:b4:70:f9:b0:29:47:e8:9d:22:8d:
                    2c:53:0a:c3:d6:93:28:f9:b9:d0:03:d6:73:05:ea:
                    bd:d3:93:fb:ad:fc:ad:7c:f8:d9:9b:43:cf:8a:56:
                    01:4f:d5:cd:f5:e2:2d:0f:4f:97:84:9f:d1:41:79:
                    29:d4:e8:43:11:01:06:38:d0:af:33:f0:5e:f4:db:
                    6b:8c:06:f3:f3:fb:69:b2:dd:63:dc:ee:f4:be:30:
                    a8:9f:74:3c:1a:bb:e3:ae:14:1a:e7:49:ac:3f:78:
                    d6:bc:4a:3d:78:1d:a4:f7:51:89:34:db:3d:8f:a8:
                    3d:5f:7e:e0:e7:56:53:f6:96:85:cd:71:0a:04:f8:
                    b3:20:9c:ec:2f:47:0e:46:6d:9b:50:ba:d9:03:a0:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6C:0B:E6:B0:9E:07:48:CC:E7:49:81:E9:F9:6B:B1:B0:E1:0C:C7
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/M2wL5rCeB0jM50mB6flrsbDhDMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:58:e3:a5:10:c5:51:4f:3e:07:69:28:02:dc:1b:a5:17:65:
         6b:71:88:44:f8:5a:4e:35:d0:05:5e:77:aa:46:30:82:a3:0a:
         ed:d5:45:3c:04:ef:f8:23:7c:eb:d3:7a:dc:38:ca:e0:16:33:
         8c:ea:98:1b:c4:6c:9d:42:b0:d4:64:89:1c:8b:24:8b:28:a3:
         53:79:bd:a3:b2:ae:b6:0e:3a:2e:27:4b:7a:82:65:9f:5d:e1:
         84:d3:c7:33:71:01:54:31:a3:8a:c2:07:e6:04:6f:be:75:43:
         b8:a5:96:e2:53:cd:32:b4:27:89:df:7a:e8:de:a1:f9:b5:c4:
         fb:64:db:a6:b1:ab:15:40:38:51:8c:7d:c6:c9:3c:0a:9d:fc:
         e9:cc:fe:71:7e:80:f2:26:7c:1c:df:4d:3c:c4:a5:de:12:56:
         04:3c:2b:aa:64:14:62:ca:2a:09:fa:5e:74:ad:72:11:7c:85:
         07:20:8c:b2:7c:14:2e:ba:ed:0c:5b:69:b9:a4:1c:e5:e9:c0:
         87:ac:9f:96:68:d6:bc:dc:ec:1c:68:af:b0:d8:e7:2b:89:54:
         08:fb:0c:22:3b:a1:11:f0:22:f3:e0:83:35:4e:6c:05:be:fa:
         a8:02:01:4e:31:2c:85:68:19:90:91:1e:a7:cc:05:0d:03:64:
         ae:33:2b:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+eM5Mk36eAX+lYlSS+ixXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjYwNzIwMDc0MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzZjMGJlNmIwOWUwNzQ4Y2NlNzQ5ODFlOWY5NmJiMWIwZTEwY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJr4clvbNkDV41u2oNlHYt7d2zSa
BHS5k1FbFWDi9kiHsqfxAjXXRaJwlxMMWt7fQFM1Qk63+3LjnP41b2EbgjoivowY
AQzbQIiYE00mQ2CYrRZ2Yp7F9zUAX5hYDkWRqenYwjvxjoJhranoFbRw+bApR+id
Io0sUwrD1pMo+bnQA9ZzBeq905P7rfytfPjZm0PPilYBT9XN9eItD0+XhJ/RQXkp
1OhDEQEGONCvM/Be9NtrjAbz8/tpst1j3O70vjCon3Q8GrvjrhQa50msP3jWvEo9
eB2k91GJNNs9j6g9X37g51ZT9paFzXEKBPizIJzsL0cORm2bULrZA6CbLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNsC+awngdIzOdJgen5a7Gw4QzHMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvTTJ3TDVyQ2VCMGpNNTBtQjZmbHJzYkRoRE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemkMA0G
CSqGSIb3DQEBCwUAA4IBAQAQWOOlEMVRTz4HaSgC3BulF2VrcYhE+FpONdAFXneq
RjCCowrt1UU8BO/4I3zr03rcOMrgFjOM6pgbxGydQrDUZIkciySLKKNTeb2jsq62
DjouJ0t6gmWfXeGE08czcQFUMaOKwgfmBG++dUO4pZbiU80ytCeJ33ro3qH5tcT7
ZNumsasVQDhRjH3GyTwKnfzpzP5xfoDyJnwc3008xKXeElYEPCuqZBRiyioJ+l50
rXIRfIUHIIyyfBQuuu0MW2m5pBzl6cCHrJ+WaNa83OwcaK+w2OcriVQI+wwiO6ER
8CLz4IM1TmwFvvqoAgFOMSyFaBmQkR6nzAUNA2SuMytH
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:58 2026 by rpki-client