Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/jC5EQ2pE1hoJnWUa8__n2F6U0jU.roa
File:                     jC5EQ2pE1hoJnWUa8__n2F6U0jU.roa (raw, json)
Hash identifier:          VaWxumOUwy/KUDWIkuUcnIO+udOZdz3MVrVO9LN7HhY=
Subject key identifier:   8C:2E:44:43:6A:44:D6:1A:09:9D:65:1A:F3:FF:E7:D8:5E:94:D2:35
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       01993CD154017E9AC3679A6C34FED4872C0F
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/jC5EQ2pE1hoJnWUa8__n2F6U0jU.roa
Signing time:             Fri 12 Sep 2025 07:26:15 +0000
ROA not before:           Fri 12 Sep 2025 07:26:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42313
IP address blocks:        79.106.0.0/16 maxlen: 16
                          79.106.0.0/17 maxlen: 17
                          79.106.0.0/19 maxlen: 19
                          79.106.0.0/24 maxlen: 24
                          79.106.32.0/19 maxlen: 19
                          79.106.37.0/24 maxlen: 24
                          79.106.40.0/24 maxlen: 24
                          79.106.42.0/24 maxlen: 24
                          79.106.48.0/24 maxlen: 24
                          79.106.50.0/24 maxlen: 24
                          79.106.56.0/22 maxlen: 22
                          79.106.64.0/19 maxlen: 19
                          79.106.64.0/24 maxlen: 24
                          79.106.75.0/24 maxlen: 24
                          79.106.77.0/24 maxlen: 24
                          79.106.84.0/24 maxlen: 24
                          79.106.90.0/24 maxlen: 24
                          79.106.94.0/23 maxlen: 23
                          79.106.95.0/24 maxlen: 24
                          79.106.96.0/19 maxlen: 19
                          79.106.101.0/24 maxlen: 24
                          79.106.102.0/24 maxlen: 24
                          79.106.103.0/24 maxlen: 24
                          79.106.104.0/24 maxlen: 24
                          79.106.107.0/24 maxlen: 24
                          79.106.117.0/24 maxlen: 24
                          79.106.118.0/23 maxlen: 23
                          79.106.120.0/24 maxlen: 24
                          79.106.122.0/24 maxlen: 24
                          79.106.123.0/24 maxlen: 24
                          79.106.124.0/24 maxlen: 24
                          79.106.125.0/24 maxlen: 24
                          79.106.126.0/24 maxlen: 24
                          79.106.127.0/24 maxlen: 24
                          79.106.128.0/17 maxlen: 17
                          79.106.128.0/19 maxlen: 19
                          79.106.160.0/19 maxlen: 19
                          79.106.162.0/24 maxlen: 24
                          79.106.173.0/24 maxlen: 24
                          79.106.176.0/21 maxlen: 21
                          79.106.192.0/19 maxlen: 19
                          79.106.194.0/23 maxlen: 23
                          79.106.195.0/24 maxlen: 24
                          79.106.196.0/24 maxlen: 24
                          79.106.204.0/24 maxlen: 24
                          79.106.205.0/24 maxlen: 24
                          79.106.207.0/24 maxlen: 24
                          79.106.209.0/24 maxlen: 24
                          79.106.210.0/24 maxlen: 24
                          79.106.211.0/24 maxlen: 24
                          79.106.214.0/24 maxlen: 24
                          79.106.215.0/24 maxlen: 24
                          79.106.218.0/23 maxlen: 23
                          79.106.220.0/24 maxlen: 24
                          79.106.224.0/19 maxlen: 19
                          79.106.225.0/24 maxlen: 24
                          79.106.226.0/24 maxlen: 24
                          79.106.228.0/24 maxlen: 24
                          79.106.229.0/24 maxlen: 24
                          79.106.230.0/24 maxlen: 24
                          79.106.232.0/22 maxlen: 22
                          79.106.240.0/21 maxlen: 21
                          79.106.240.0/23 maxlen: 23
                          79.106.242.0/23 maxlen: 23
                          79.106.244.0/23 maxlen: 23
                          79.106.246.0/23 maxlen: 23
                          79.106.254.0/24 maxlen: 24
                          79.106.255.0/24 maxlen: 24
                          185.171.144.0/22 maxlen: 22
                          185.171.144.0/23 maxlen: 23
                          185.171.146.0/23 maxlen: 23
                          185.171.146.0/24 maxlen: 24
                          185.171.147.0/24 maxlen: 24
                          217.24.240.0/20 maxlen: 20
                          217.24.240.0/21 maxlen: 21
                          217.24.248.0/21 maxlen: 21
                          217.24.248.0/24 maxlen: 24
                          217.24.254.0/24 maxlen: 24
                          2a05:fdc0::/29 maxlen: 29
                          2a05:fdc0::/32 maxlen: 32
                          2a05:fdc0:1000::/48 maxlen: 48
                          2a05:fdc0:2100::/40 maxlen: 40
                          2a05:fdc0:2200::/40 maxlen: 40
                          2a05:fdc0:2300::/40 maxlen: 40
                          2a05:fdc0:3100::/40 maxlen: 40
                          2a05:fdc0:3200::/40 maxlen: 40
                          2a05:fdc1::/32 maxlen: 32
                          2a05:fdc2::/32 maxlen: 32
                          2a05:fdc2:1000::/36 maxlen: 36
                          2a05:fdc2:2000::/36 maxlen: 36
                          2a05:fdc2:3000::/36 maxlen: 36
                          2a05:fdc2:4000::/36 maxlen: 36
                          2a05:fdc2:5000::/36 maxlen: 36
                          2a05:fdc2:6000::/36 maxlen: 36
                          2a05:fdc2:7000::/36 maxlen: 36
                          2a05:fdc2:8000::/36 maxlen: 36
                          2a05:fdc2:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3c:d1:54:01:7e:9a:c3:67:9a:6c:34:fe:d4:87:2c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Sep 12 07:26:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c2e44436a44d61a099d651af3ffe7d85e94d235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:9c:61:1a:2c:c8:ef:66:a8:d3:91:ac:f2:
                    a3:3d:34:2a:d6:47:f1:0c:7f:25:36:90:b5:99:e0:
                    17:ca:4e:17:32:9b:74:18:23:e3:e5:2a:b1:6f:18:
                    fd:ed:8f:39:52:3a:4e:68:39:e9:e0:64:5b:7a:03:
                    7c:fe:81:67:10:a9:9e:5b:52:d7:67:7e:2b:5c:a4:
                    57:33:ac:7c:9b:24:7e:6e:69:1f:0c:cc:99:b5:52:
                    c4:54:1a:0f:3a:ac:12:d9:39:0e:78:3c:85:ae:a4:
                    60:72:dd:09:78:e9:be:4d:9e:bd:08:b6:a3:c7:d1:
                    b5:8f:53:7d:44:fd:95:5c:95:c0:2d:d6:49:8f:d6:
                    2c:35:c5:a9:eb:79:48:1e:3d:34:29:eb:eb:c6:40:
                    92:46:e9:ed:c2:58:73:70:b7:a8:49:35:1b:37:23:
                    f2:93:55:43:aa:28:c4:13:ca:65:bf:8a:b4:4e:cd:
                    67:b0:d1:ab:67:40:4c:09:b7:33:03:ae:e6:68:5d:
                    d0:bb:a8:73:2a:2f:b4:2c:22:0b:1b:3b:3e:a1:95:
                    4e:be:dc:47:1c:49:2f:1e:75:c1:e8:92:67:3a:e3:
                    ed:ce:2d:47:b8:fa:14:51:46:00:2e:7a:3f:b6:6d:
                    0d:aa:36:76:f6:f2:13:0c:2a:22:3a:3b:f5:cf:fd:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:44:43:6A:44:D6:1A:09:9D:65:1A:F3:FF:E7:D8:5E:94:D2:35
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/jC5EQ2pE1hoJnWUa8__n2F6U0jU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.106.0.0/16
                  185.171.144.0/22
                  217.24.240.0/20
                IPv6:
                  2a05:fdc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:5a:63:82:58:5e:77:0d:3a:06:eb:78:6d:6b:be:1b:a5:
         8d:6e:aa:ed:30:38:62:e9:5a:86:29:d3:2e:a6:5e:48:fe:c5:
         5c:4e:d0:e0:3b:b5:8f:e4:c6:db:24:97:d2:d3:73:2f:63:d7:
         b4:8b:74:24:56:2c:19:60:f7:30:b1:3c:84:a6:de:72:ed:0e:
         64:c3:6e:db:e7:47:0d:0f:a3:dd:32:e4:f8:f6:3d:f5:60:d8:
         fa:cb:fe:d7:31:3c:ae:1f:fe:2a:29:ce:df:ff:8f:4f:3b:3f:
         5a:0a:6b:3c:d9:ae:a5:61:6a:81:07:1b:b8:96:9b:99:20:44:
         07:69:8f:c5:1a:65:35:55:0f:e5:0d:25:42:2d:51:8e:e4:07:
         7d:58:34:17:86:b6:2e:5d:10:fe:8d:7f:17:c1:0f:81:70:d4:
         0b:d3:87:fe:4c:1c:62:fe:71:42:98:90:be:02:f6:e3:dc:9f:
         8b:2a:93:0f:8c:26:5c:61:e9:22:48:b9:2a:75:a7:02:75:4f:
         ea:04:46:0d:9c:15:dc:43:1d:91:5b:3a:e1:78:51:2c:cf:59:
         a3:37:e1:e9:2d:2e:bf:b5:aa:96:e6:7a:d3:da:45:37:92:62:
         08:80:c4:ab:de:c6:46:62:80:f5:54:20:87:60:f0:04:a4:37:
         21:d5:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:17 2025 by rpki-client