Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ass7xawPAaXBNu3YBiKNKgErlYw.roa
File:                     Ass7xawPAaXBNu3YBiKNKgErlYw.roa (raw, json)
Hash identifier:          S/4qd6BgY5px7eMNl/hw2aUbnhb2FQFDLYVmAFFHc1Q=
Subject key identifier:   02:CB:3B:C5:AC:0F:01:A5:C1:36:ED:D8:06:22:8D:2A:01:2B:95:8C
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0199E8F9A5FE4DF0A80D2CD26BE944D8A175
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ass7xawPAaXBNu3YBiKNKgErlYw.roa
Signing time:             Wed 15 Oct 2025 17:44:59 +0000
ROA not before:           Wed 15 Oct 2025 17:44:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30633
IP address blocks:        45.128.77.0/24 maxlen: 24
                          45.129.127.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          80.253.250.0/24 maxlen: 24
                          103.139.50.0/24 maxlen: 24
                          193.5.125.0/24 maxlen: 24
                          193.27.23.0/24 maxlen: 24
                          193.164.199.0/24 maxlen: 24
                          2a06:1184:33::/48 maxlen: 48
                          2a06:35c2::/32 maxlen: 32
                          2a06:b5c0::/29 maxlen: 29
                          2a0a:2d06:33::/48 maxlen: 48
                          2a0a:2d06:55::/48 maxlen: 48
                          2a0c:7886:b::/48 maxlen: 48
                          2a0c:7886:33::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:1a80:2541::/48 maxlen: 48
                          2a0e:8880::/29 maxlen: 29
                          2a0e:c780::/32 maxlen: 32
                          2a0e:f201::/32 maxlen: 32
                          2a0e:f201:1::/48 maxlen: 48
                          2a0e:f600:14::/48 maxlen: 48
                          2a0f:140::/29 maxlen: 29
                          2a0f:e00::/29 maxlen: 29
                          2a0f:1740::/29 maxlen: 29
                          2a0f:1e00:123::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a0f:1e01:1::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0f:2100::/29 maxlen: 29
                          2a0f:2d81::/32 maxlen: 32
                          2a0f:2e80::/29 maxlen: 29
                          2a0f:3045::/32 maxlen: 32
                          2a0f:3046:320::/48 maxlen: 48
                          2a0f:3240::/29 maxlen: 29
                          2a0f:3d84::/32 maxlen: 32
                          2a0f:7d02:1::/48 maxlen: 48
                          2a0f:7d02:100::/48 maxlen: 48
                          2a0f:8300::/29 maxlen: 29
                          2a0f:b400::/29 maxlen: 29
                          2a0f:c400::/29 maxlen: 29
                          2a0f:e1c6::/32 maxlen: 32
                          2a0f:e4c0::/29 maxlen: 29
                          2a10:32c0::/29 maxlen: 29
                          2a10:32c0::/32 maxlen: 32
                          2a10:32c1::/32 maxlen: 32
                          2a10:32c2::/32 maxlen: 32
                          2a10:32c4::/32 maxlen: 32
                          2a10:32c5::/32 maxlen: 32
                          2a10:32c6::/32 maxlen: 32
                          2a10:32c7::/32 maxlen: 32
                          2a10:3340::/29 maxlen: 29
                          2a10:35c0::/29 maxlen: 29
                          2a10:35c0::/32 maxlen: 32
                          2a10:35c1::/32 maxlen: 32
                          2a10:35c2::/32 maxlen: 32
                          2a10:35c3::/32 maxlen: 32
                          2a10:35c4::/32 maxlen: 32
                          2a10:35c5::/32 maxlen: 32
                          2a10:35c6::/32 maxlen: 32
                          2a10:35c7::/32 maxlen: 32
                          2a10:37c0::/29 maxlen: 29
                          2a10:4a00::/29 maxlen: 29
                          2a10:5400::/29 maxlen: 29
                          2a10:6500::/29 maxlen: 29
                          2a10:6d40::/29 maxlen: 29
                          2a10:7100::/29 maxlen: 29
                          2a10:7300::/29 maxlen: 29
                          2a10:7900::/29 maxlen: 29
                          2a10:7b00::/29 maxlen: 29
                          2a11:4c40::/29 maxlen: 29
                          2a11:5c80::/29 maxlen: 29
                          2a11:6d40::/29 maxlen: 29
                          2a11:fd80::/29 maxlen: 29
                          2a12:ac40::/32 maxlen: 32
                          2a12:ac41::/32 maxlen: 32
                          2a12:ba00::/29 maxlen: 29
                          2a12:f540::/29 maxlen: 29
                          2a13:18c0:1::/48 maxlen: 48
                          2a13:18c6:33::/48 maxlen: 48
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:3080::/29 maxlen: 29
                          2a13:8c82:3::/48 maxlen: 48
                          2a13:df00::/29 maxlen: 29
                          2a13:e100:1312::/48 maxlen: 48
                          2a13:e101:2::/48 maxlen: 48
                          2a13:e102:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e8:f9:a5:fe:4d:f0:a8:0d:2c:d2:6b:e9:44:d8:a1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Oct 15 17:44:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02cb3bc5ac0f01a5c136edd806228d2a012b958c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:f1:43:ca:81:2e:2a:1a:75:69:0f:f2:ea:
                    d7:bf:7b:7b:e2:62:4e:fd:49:e8:55:e8:57:16:59:
                    4e:fd:d6:0e:29:ac:34:bd:2a:c0:16:12:c7:c9:84:
                    d8:5c:54:64:21:09:5c:32:38:cf:42:68:1d:46:3a:
                    ec:ea:64:fb:1c:a1:dc:75:4c:65:97:c9:51:81:1f:
                    55:1a:5e:9e:a9:6f:47:cf:d8:a6:a8:32:09:e5:6a:
                    b0:43:f3:7a:9c:17:13:56:6a:00:77:e4:80:b5:23:
                    57:17:18:5a:25:6a:00:02:d0:4a:40:ae:f7:e4:5b:
                    8a:70:17:ca:14:86:5a:42:52:f8:1c:0b:80:11:b5:
                    68:23:92:fc:f8:1b:be:12:34:39:da:64:b3:c7:5c:
                    ad:1e:af:8d:6f:7e:95:4b:1e:fc:bf:74:86:23:83:
                    62:0b:f5:6e:84:17:6f:cd:d0:a3:09:40:56:41:6c:
                    10:02:d9:8d:de:44:2c:54:0b:a5:e6:72:3d:f7:4e:
                    ae:de:81:7e:72:16:9c:85:46:69:de:c0:ce:ac:32:
                    e7:0d:7d:81:69:bd:37:d2:90:29:64:59:b4:7a:ed:
                    bb:2c:a1:41:65:26:03:3f:a5:e6:f7:15:bc:51:07:
                    82:5f:af:cb:fa:88:2e:d9:79:e8:51:a2:de:c6:c3:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:3B:C5:AC:0F:01:A5:C1:36:ED:D8:06:22:8D:2A:01:2B:95:8C
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ass7xawPAaXBNu3YBiKNKgErlYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.77.0/24
                  45.129.127.0/24
                  45.135.37.0/24
                  45.157.37.0/24
                  80.253.250.0/24
                  103.139.50.0/24
                  193.5.125.0/24
                  193.27.23.0/24
                  193.164.199.0/24
                IPv6:
                  2a06:1184:33::/48
                  2a06:35c2::/32
                  2a06:b5c0::/29
                  2a0a:2d06:33::/48
                  2a0a:2d06:55::/48
                  2a0c:7886:b::/48
                  2a0c:7886:33::/48
                  2a0e:15c7:88::/48
                  2a0e:1a80:2541::/48
                  2a0e:8880::/29
                  2a0e:c780::/32
                  2a0e:f201::/32
                  2a0e:f600:14::/48
                  2a0f:140::/29
                  2a0f:e00::/29
                  2a0f:1740::/29
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2100::/29
                  2a0f:2d81::/32
                  2a0f:2e80::/29
                  2a0f:3045::/32
                  2a0f:3046:320::/48
                  2a0f:3240::/29
                  2a0f:3d84::/32
                  2a0f:7d02:1::/48
                  2a0f:7d02:100::/48
                  2a0f:8300::/29
                  2a0f:b400::/29
                  2a0f:c400::/29
                  2a0f:e1c6::/32
                  2a0f:e4c0::/29
                  2a10:32c0::/29
                  2a10:3340::/29
                  2a10:35c0::/29
                  2a10:37c0::/29
                  2a10:4a00::/29
                  2a10:5400::/29
                  2a10:6500::/29
                  2a10:6d40::/29
                  2a10:7100::/29
                  2a10:7300::/29
                  2a10:7900::/29
                  2a10:7b00::/29
                  2a11:4c40::/29
                  2a11:5c80::/29
                  2a11:6d40::/29
                  2a11:fd80::/29
                  2a12:ac40::/31
                  2a12:ba00::/29
                  2a12:f540::/29
                  2a13:18c0:1::/48
                  2a13:18c6:33::/48
                  2a13:18c6:55::/48
                  2a13:3080::/29
                  2a13:8c82:3::/48
                  2a13:df00::/29
                  2a13:e100:1312::/48
                  2a13:e101:2::/48
                  2a13:e102:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:2d:ba:33:a6:19:92:a7:50:ee:77:9e:7e:50:73:4b:6e:
         e1:02:3a:c0:60:68:7f:08:d2:43:a0:d7:0e:fd:a4:11:7c:21:
         e7:b3:e1:ea:91:5b:02:4f:6f:34:f9:e6:c6:a4:dc:fe:06:e7:
         44:e9:8c:c0:09:7e:59:e7:d0:0e:8a:b0:50:f1:da:5c:11:f5:
         9d:62:e2:a0:24:83:97:8b:42:75:6e:8d:68:70:16:3a:9c:eb:
         5f:a7:0e:5a:1d:38:72:b2:14:5a:ba:ff:c3:23:5e:78:a7:21:
         22:ba:8c:d3:df:7b:4a:ef:0b:de:f4:08:3d:25:8d:fa:b2:a9:
         c9:b6:28:8d:28:d2:e7:25:8e:71:71:12:ee:68:78:25:86:b3:
         1a:6f:3c:6a:0f:2c:9a:3a:a5:63:b3:49:46:66:82:d7:1c:6a:
         97:c3:2a:9a:86:d9:49:07:b2:28:0c:bf:30:e2:27:27:88:54:
         71:41:55:6b:97:83:80:a6:03:58:24:2d:a8:70:e7:72:b9:b1:
         24:87:04:cb:97:17:73:1c:c8:8a:4c:8c:6f:07:9e:38:dd:3a:
         2f:4f:96:c6:ee:d5:23:ae:07:85:7c:dd:19:e7:51:bc:fa:ea:
         59:eb:d8:44:5c:b7:2f:d8:47:c4:cf:b8:be:d6:83:f5:3a:e4:
         17:ab:02:94
-----BEGIN CERTIFICATE-----
MIIHZTCCBk2gAwIBAgISAZno+aX+TfCoDSzSa+lE2KF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUxMDE1MTc0NDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmNiM2JjNWFjMGYwMWE1YzEzNmVkZDgwNjIyOGQyYTAxMmI5NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQzxQ8qBLioadWkP8urXv3t74mJO
/UnoVehXFllO/dYOKaw0vSrAFhLHyYTYXFRkIQlcMjjPQmgdRjrs6mT7HKHcdUxl
l8lRgR9VGl6eqW9Hz9imqDIJ5WqwQ/N6nBcTVmoAd+SAtSNXFxhaJWoAAtBKQK73
5FuKcBfKFIZaQlL4HAuAEbVoI5L8+Bu+EjQ52mSzx1ytHq+Nb36VSx78v3SGI4Ni
C/VuhBdvzdCjCUBWQWwQAtmN3kQsVAul5nI9906u3oF+chachUZp3sDOrDLnDX2B
ab030pApZFm0eu27LKFBZSYDP6Xm9xW8UQeCX6/L+ogu2XnoUaLexsNkIQIDAQAB
o4IEcTCCBG0wHQYDVR0OBBYEFALLO8WsDwGlwTbt2AYijSoBK5WMMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQXNzN3hhd1BBYVhCTnUzWUJpS05LZ0VybFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIChQYIKwYBBQUHAQcBAf8EggJ0MIICcDA8BAIAATA2AwQA
LYBNAwQALYF/AwQALYclAwQALZ0lAwQAUP36AwQAZ4syAwQAwQV9AwQAwRsXAwQA
waTHMIICLgQCAAIwggImAwcAKgYRhAAzAwUAKgY1wgMFAyoGtcADBwAqCi0GADMD
BwAqCi0GAFUDBwAqDHiGAAsDBwAqDHiGADMDBwAqDhXHAIgDBwAqDhqAJUEDBQMq
DoiAAwUAKg7HgAMFACoO8gEDBwAqDvYAABQDBQMqDwFAAwUDKg8OAAMFAyoPF0AD
BwAqDx4AASMDBwAqDx4ABFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkDBwAq
Dx4BAAEDBwAqDx6BAAIDBwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6BkugDBwAqDx6B
o9ADBwAqDx6Bza4DBQMqDyEAAwUAKg8tgQMFAyoPLoADBQAqDzBFAwcAKg8wRgMg
AwUDKg8yQAMFACoPPYQDBwAqD30CAAEDBwAqD30CAQADBQMqD4MAAwUDKg+0AAMF
AyoPxAADBQAqD+HGAwUDKg/kwAMFAyoQMsADBQMqEDNAAwUDKhA1wAMFAyoQN8AD
BQMqEEoAAwUDKhBUAAMFAyoQZQADBQMqEG1AAwUDKhBxAAMFAyoQcwADBQMqEHkA
AwUDKhB7AAMFAyoRTEADBQMqEVyAAwUDKhFtQAMFAyoR/YADBQEqEqxAAwUDKhK6
AAMFAyoS9UADBwAqExjAAAEDBwAqExjGADMDBwAqExjGAFUDBQMqEzCAAwcAKhOM
ggADAwUDKhPfAAMHACoT4QATEgMHACoT4QEAAgMHACoT4QIAAzANBgkqhkiG9w0B
AQsFAAOCAQEAmT4tujOmGZKnUO53nn5Qc0tu4QI6wGBofwjSQ6DXDv2kEXwh57Ph
6pFbAk9vNPnmxqTc/gbnROmMwAl+WefQDoqwUPHaXBH1nWLioCSDl4tCdW6NaHAW
OpzrX6cOWh04crIUWrr/wyNeeKchIrqM0997Su8L3vQIPSWN+rKpybYojSjS5yWO
cXES7mh4JYazGm88ag8smjqlY7NJRmaC1xxql8MqmobZSQeyKAy/MOInJ4hUcUFV
a5eDgKYDWCQtqHDncrmxJIcEy5cXcxzIikyMbweeON06L0+Wxu7VI64HhXzdGedR
vPrqWevYRFy3L9hHxM+4vtaD9TrkF6sClA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:49 2025 by rpki-client