Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Qr7svtXdu4SAKyFTQyrTgu6lso8.roa
File:                     Qr7svtXdu4SAKyFTQyrTgu6lso8.roa (raw, json)
Hash identifier:          RRUCiF6ouoqda6PAcUUEKkzFVpGfzpoHZX+h3MFxTCE=
Subject key identifier:   42:BE:EC:BE:D5:DD:BB:84:80:2B:21:53:43:2A:D3:82:EE:A5:B2:8F
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       0197782CE64CE5222C512A465F462AB91069
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Qr7svtXdu4SAKyFTQyrTgu6lso8.roa
Signing time:             Mon 16 Jun 2025 09:58:17 +0000
ROA not before:           Mon 16 Jun 2025 09:58:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48728
IP address blocks:        31.11.48.0/21 maxlen: 21
                          37.186.32.0/24 maxlen: 24
                          37.186.33.0/24 maxlen: 24
                          37.186.34.0/24 maxlen: 24
                          37.186.35.0/24 maxlen: 24
                          37.186.36.0/24 maxlen: 24
                          37.186.37.0/24 maxlen: 24
                          37.186.39.0/24 maxlen: 24
                          37.186.40.0/24 maxlen: 24
                          37.186.41.0/24 maxlen: 24
                          37.186.42.0/24 maxlen: 24
                          37.186.43.0/24 maxlen: 24
                          37.186.44.0/24 maxlen: 24
                          37.186.45.0/24 maxlen: 24
                          37.186.46.0/24 maxlen: 24
                          37.186.47.0/24 maxlen: 24
                          37.186.48.0/24 maxlen: 24
                          37.186.49.0/24 maxlen: 24
                          37.186.50.0/24 maxlen: 24
                          37.186.51.0/24 maxlen: 24
                          37.186.52.0/24 maxlen: 24
                          37.186.53.0/24 maxlen: 24
                          37.186.54.0/24 maxlen: 24
                          37.186.55.0/24 maxlen: 24
                          37.186.58.0/24 maxlen: 24
                          37.186.59.0/24 maxlen: 24
                          80.76.160.0/24 maxlen: 24
                          80.76.161.0/24 maxlen: 24
                          80.76.162.0/24 maxlen: 24
                          80.76.163.0/24 maxlen: 24
                          80.76.164.0/24 maxlen: 24
                          80.76.165.0/24 maxlen: 24
                          80.76.170.0/24 maxlen: 24
                          80.76.171.0/24 maxlen: 24
                          80.76.172.0/24 maxlen: 24
                          80.76.173.0/24 maxlen: 24
                          80.76.174.0/24 maxlen: 24
                          80.76.175.0/24 maxlen: 24
                          103.14.208.0/24 maxlen: 24
                          103.17.0.0/22 maxlen: 22
                          103.17.0.0/24 maxlen: 24
                          103.17.1.0/24 maxlen: 24
                          103.17.2.0/24 maxlen: 24
                          103.17.3.0/24 maxlen: 24
                          103.23.124.0/24 maxlen: 24
                          103.23.125.0/24 maxlen: 24
                          103.199.88.0/22 maxlen: 22
                          103.199.88.0/24 maxlen: 24
                          103.199.89.0/24 maxlen: 24
                          103.199.90.0/24 maxlen: 24
                          103.199.91.0/24 maxlen: 24
                          103.225.72.0/22 maxlen: 22
                          103.225.72.0/24 maxlen: 24
                          103.225.73.0/24 maxlen: 24
                          103.225.74.0/24 maxlen: 24
                          103.225.75.0/24 maxlen: 24
                          212.70.96.0/24 maxlen: 24
                          212.70.97.0/24 maxlen: 24
                          212.70.98.0/24 maxlen: 24
                          212.70.99.0/24 maxlen: 24
                          212.70.102.0/24 maxlen: 24
                          212.70.106.0/24 maxlen: 24
                          212.70.107.0/24 maxlen: 24
                          212.70.108.0/24 maxlen: 24
                          212.70.109.0/24 maxlen: 24
                          212.70.110.0/24 maxlen: 24
                          212.70.111.0/24 maxlen: 24
                          212.70.112.0/24 maxlen: 24
                          212.70.113.0/24 maxlen: 24
                          212.70.114.0/24 maxlen: 24
                          212.70.115.0/24 maxlen: 24
                          212.70.116.0/24 maxlen: 24
                          212.70.117.0/24 maxlen: 24
                          212.70.118.0/24 maxlen: 24
                          212.70.119.0/24 maxlen: 24
                          212.70.122.0/24 maxlen: 24
                          212.70.125.0/24 maxlen: 24
                          212.70.126.0/24 maxlen: 24
                          212.70.127.0/24 maxlen: 24
                          2a04:7f80::/29 maxlen: 29
                          2a04:7f80::/48 maxlen: 48
                          2a04:7f80:0:a::/64 maxlen: 64
                          2a04:7f80:2::/47 maxlen: 47
                          2a04:7f80:2::/48 maxlen: 48
                          2a04:7f80:3::/48 maxlen: 48
                          2a04:7f80:4::/47 maxlen: 47
                          2a04:7f80:4::/48 maxlen: 48
                          2a04:7f80:5::/48 maxlen: 48
                          2a04:7f80:10::/44 maxlen: 44
                          2a04:7f80:10::/48 maxlen: 48
                          2a04:7f80:11::/48 maxlen: 48
                          2a04:7f80:12::/48 maxlen: 48
                          2a04:7f80:13::/48 maxlen: 48
                          2a04:7f80:14::/48 maxlen: 48
                          2a04:7f80:15::/48 maxlen: 48
                          2a04:7f80:16::/48 maxlen: 48
                          2a04:7f80:17::/48 maxlen: 48
                          2a04:7f80:18::/48 maxlen: 48
                          2a04:7f80:19::/48 maxlen: 48
                          2a04:7f80:1a::/48 maxlen: 48
                          2a04:7f80:1b::/48 maxlen: 48
                          2a04:7f80:1c::/48 maxlen: 48
                          2a04:7f80:1d::/48 maxlen: 48
                          2a04:7f80:1e::/48 maxlen: 48
                          2a04:7f80:1f::/48 maxlen: 48
                          2a04:7f80:20::/44 maxlen: 44
                          2a04:7f80:20::/48 maxlen: 48
                          2a04:7f80:21::/48 maxlen: 48
                          2a04:7f80:22::/48 maxlen: 48
                          2a04:7f80:23::/48 maxlen: 48
                          2a04:7f80:24::/48 maxlen: 48
                          2a04:7f80:25::/48 maxlen: 48
                          2a04:7f80:26::/48 maxlen: 48
                          2a04:7f80:27::/48 maxlen: 48
                          2a04:7f80:28::/48 maxlen: 48
                          2a04:7f80:29::/48 maxlen: 48
                          2a04:7f80:2a::/48 maxlen: 48
                          2a04:7f80:2b::/48 maxlen: 48
                          2a04:7f80:2c::/48 maxlen: 48
                          2a04:7f80:2d::/48 maxlen: 48
                          2a04:7f80:2e::/48 maxlen: 48
                          2a04:7f80:2f::/48 maxlen: 48
                          2a04:7f80:30::/44 maxlen: 44
                          2a04:7f80:30::/48 maxlen: 48
                          2a04:7f80:31::/48 maxlen: 48
                          2a04:7f80:32::/48 maxlen: 48
                          2a04:7f80:33::/48 maxlen: 48
                          2a04:7f80:34::/48 maxlen: 48
                          2a04:7f80:35::/48 maxlen: 48
                          2a04:7f80:36::/48 maxlen: 48
                          2a04:7f80:37::/48 maxlen: 48
                          2a04:7f80:38::/48 maxlen: 48
                          2a04:7f80:39::/48 maxlen: 48
                          2a04:7f80:3a::/48 maxlen: 48
                          2a04:7f80:3b::/48 maxlen: 48
                          2a04:7f80:3c::/48 maxlen: 48
                          2a04:7f80:3d::/48 maxlen: 48
                          2a04:7f80:3e::/48 maxlen: 48
                          2a04:7f80:3f::/48 maxlen: 48
                          2a04:7f80:40::/45 maxlen: 45
                          2a04:7f80:40::/48 maxlen: 48
                          2a04:7f80:41::/48 maxlen: 48
                          2a04:7f80:42::/48 maxlen: 48
                          2a04:7f80:43::/48 maxlen: 48
                          2a04:7f80:44::/48 maxlen: 48
                          2a04:7f80:45::/48 maxlen: 48
                          2a04:7f80:46::/48 maxlen: 48
                          2a04:7f80:47::/48 maxlen: 48
                          2a04:7f80:48::/45 maxlen: 45
                          2a04:7f80:48::/48 maxlen: 48
                          2a04:7f80:49::/48 maxlen: 48
                          2a04:7f80:4a::/48 maxlen: 48
                          2a04:7f80:4b::/48 maxlen: 48
                          2a04:7f80:4c::/48 maxlen: 48
                          2a04:7f80:4d::/48 maxlen: 48
                          2a04:7f80:4e::/48 maxlen: 48
                          2a04:7f80:4f::/48 maxlen: 48
                          2a04:7f80:50::/45 maxlen: 45
                          2a04:7f80:50::/48 maxlen: 48
                          2a04:7f80:51::/48 maxlen: 48
                          2a04:7f80:52::/48 maxlen: 48
                          2a04:7f80:53::/48 maxlen: 48
                          2a04:7f80:54::/48 maxlen: 48
                          2a04:7f80:55::/48 maxlen: 48
                          2a04:7f80:56::/48 maxlen: 48
                          2a04:7f80:57::/48 maxlen: 48
                          2a04:7f80:58::/45 maxlen: 45
                          2a04:7f80:58::/48 maxlen: 48
                          2a04:7f80:59::/48 maxlen: 48
                          2a04:7f80:5a::/48 maxlen: 48
                          2a04:7f80:5b::/48 maxlen: 48
                          2a04:7f80:5c::/48 maxlen: 48
                          2a04:7f80:5d::/48 maxlen: 48
                          2a04:7f80:5e::/48 maxlen: 48
                          2a04:7f80:5f::/48 maxlen: 48
                          2a04:7f80:60::/44 maxlen: 44
                          2a04:7f80:60::/48 maxlen: 48
                          2a04:7f80:61::/48 maxlen: 48
                          2a04:7f80:62::/48 maxlen: 48
                          2a04:7f80:63::/48 maxlen: 48
                          2a04:7f80:64::/48 maxlen: 48
                          2a04:7f80:65::/48 maxlen: 48
                          2a04:7f80:66::/48 maxlen: 48
                          2a04:7f80:67::/48 maxlen: 48
                          2a04:7f80:68::/48 maxlen: 48
                          2a04:7f80:69::/48 maxlen: 48
                          2a04:7f80:6a::/48 maxlen: 48
                          2a04:7f80:6b::/48 maxlen: 48
                          2a04:7f80:6c::/48 maxlen: 48
                          2a04:7f80:6d::/48 maxlen: 48
                          2a04:7f80:6e::/48 maxlen: 48
                          2a04:7f80:6f::/48 maxlen: 48
                          2a04:7f80:88::/45 maxlen: 45
                          2a04:7f80:90::/45 maxlen: 45
                          2a04:7f80:99::/48 maxlen: 48
                          2a04:7f80:1000::/40 maxlen: 40
                          2a04:7f80:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:2c:e6:4c:e5:22:2c:51:2a:46:5f:46:2a:b9:10:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Jun 16 09:58:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=42beecbed5ddbb84802b2153432ad382eea5b28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:26:96:67:74:6f:3f:dd:e3:24:0d:7a:1b:
                    9d:56:04:af:26:47:0b:29:73:f2:36:69:98:1e:58:
                    a9:90:dd:39:3a:ac:ca:97:76:a3:6f:89:73:a3:2d:
                    d8:d9:91:5d:a6:a2:1b:1d:da:98:91:71:c0:0c:65:
                    7a:5b:48:46:e6:7f:2d:cc:5f:20:78:c5:7c:6f:8e:
                    e7:f8:0d:30:91:36:00:29:94:62:49:4a:49:7e:82:
                    11:9f:2b:6f:e2:ee:1d:3e:7e:b0:df:5b:da:46:19:
                    5d:71:9d:d1:39:58:d7:66:87:9c:28:15:eb:68:73:
                    56:01:ab:4f:05:dc:61:27:2d:41:ce:bf:cc:60:5e:
                    cf:08:c5:fa:2c:34:dc:bf:4f:c4:c5:65:d0:bf:73:
                    33:2f:df:4f:27:18:aa:19:fa:ca:c8:8b:71:fc:89:
                    58:5e:5a:b0:6a:72:ae:29:47:d5:34:11:dc:a9:aa:
                    1d:f9:f4:0b:c1:28:d7:f4:6d:35:ff:72:09:82:84:
                    fe:43:40:ae:6a:4c:ec:fb:cd:45:68:8b:75:ff:bf:
                    68:d7:c3:b4:d8:03:2a:35:e3:e7:fe:c6:38:d3:cc:
                    a0:cc:09:66:68:9d:3c:db:42:98:7d:9e:5e:f8:9f:
                    ab:f4:7b:c7:9e:24:20:18:fb:71:82:82:80:0f:49:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:EC:BE:D5:DD:BB:84:80:2B:21:53:43:2A:D3:82:EE:A5:B2:8F
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/Qr7svtXdu4SAKyFTQyrTgu6lso8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.48.0/21
                  37.186.32.0-37.186.37.255
                  37.186.39.0-37.186.55.255
                  37.186.58.0/23
                  80.76.160.0-80.76.165.255
                  80.76.170.0-80.76.175.255
                  103.14.208.0/24
                  103.17.0.0/22
                  103.23.124.0/23
                  103.199.88.0/22
                  103.225.72.0/22
                  212.70.96.0/22
                  212.70.102.0/24
                  212.70.106.0-212.70.119.255
                  212.70.122.0/24
                  212.70.125.0-212.70.127.255
                IPv6:
                  2a04:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:91:4f:26:16:12:a7:e8:fb:cd:76:c0:f4:78:0f:ab:73:
         6a:86:35:c7:49:34:6e:bb:80:11:54:f2:fb:1d:92:ae:11:76:
         28:3d:9b:7e:ff:4d:b3:0e:23:af:70:1a:69:eb:de:21:9f:d2:
         00:d0:96:2e:f9:48:08:c9:a8:1b:5f:8f:3a:0e:d4:24:13:4d:
         b3:88:ed:39:1c:98:63:73:f1:f6:1c:98:46:d5:a2:34:e8:0a:
         8c:fb:f4:a4:36:3f:fd:a4:bd:6f:5e:0c:a8:d9:5d:e1:5b:ed:
         2b:4b:86:fe:cf:40:d9:9a:7f:0c:17:62:ae:9b:10:18:8b:cd:
         b3:2e:ac:ad:bf:ca:19:a3:30:19:8a:dc:f2:70:bd:9d:d1:47:
         f7:b6:8a:bd:9e:cf:8a:8e:6b:8f:34:01:31:59:e1:ba:e7:42:
         4b:94:88:ab:b7:e0:39:c6:fb:86:49:5f:31:1c:17:62:cc:1e:
         78:83:1f:50:19:b8:75:63:3c:62:80:ac:7d:f6:f6:21:2d:b5:
         5f:29:1a:9c:6d:9b:15:42:94:16:75:bf:08:34:62:94:c9:6b:
         a4:0e:7d:b5:d1:57:a9:82:fa:ff:14:e0:f3:69:60:1d:4c:e8:
         86:17:ee:58:8c:e3:c9:8f:d7:33:17:67:8e:43:02:08:9e:db:
         3d:fc:cc:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:02:49 2025 by rpki-client