Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TCc1NiHDrnWFTyZ4xr9V8I1neIY.roa
File:                     TCc1NiHDrnWFTyZ4xr9V8I1neIY.roa (raw, json)
Hash identifier:          5Szsa8B4FAB3vkpUOY1EC6jZGmnEQTRPx4+Dc92W2Kw=
Subject key identifier:   4C:27:35:36:21:C3:AE:75:85:4F:26:78:C6:BF:55:F0:8D:67:78:86
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019DB639AFCD0EE6D92C7E63F119A72DC93E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TCc1NiHDrnWFTyZ4xr9V8I1neIY.roa
Signing time:             Wed 22 Apr 2026 17:25:27 +0000
ROA not before:           Wed 22 Apr 2026 17:25:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200546
IP address blocks:        2a05:35c0:6::/48 maxlen: 48
                          2a05:35c0:11::/48 maxlen: 48
                          2a06:1180:aa::/48 maxlen: 48
                          2a06:1180:1f3::/48 maxlen: 48
                          2a06:1180:1000::/48 maxlen: 48
                          2a06:1180:12bb::/48 maxlen: 48
                          2a06:1181:100::/48 maxlen: 48
                          2a06:1184:88::/48 maxlen: 48
                          2a06:1184:1312::/48 maxlen: 48
                          2a09:17c0:8743::/48 maxlen: 48
                          2a09:17c1:ad::/48 maxlen: 48
                          2a09:17c1:ca::/48 maxlen: 48
                          2a09:17c1:f3::/48 maxlen: 48
                          2a09:17c7:fc3a::/48 maxlen: 48
                          2a0a:2d04:100::/48 maxlen: 48
                          2a0a:2d04:9825::/48 maxlen: 48
                          2a0a:2d05:19ad::/48 maxlen: 48
                          2a0a:2d06:100::/48 maxlen: 48
                          2a0a:2d06:103::/48 maxlen: 48
                          2a0a:2d06:1312::/48 maxlen: 48
                          2a0a:2d07:35::/48 maxlen: 48
                          2a0a:2d07:fc3e::/48 maxlen: 48
                          2a0c:7881:98dd::/48 maxlen: 48
                          2a0c:7882:1::/48 maxlen: 48
                          2a0c:7886:b::/48 maxlen: 48
                          2a0c:7886:55::/48 maxlen: 48
                          2a0c:7886:d6::/48 maxlen: 48
                          2a0c:7886:1b3::/48 maxlen: 48
                          2a0c:7886:38bc::/48 maxlen: 48
                          2a0c:7886:7b8a::/48 maxlen: 48
                          2a0c:7886:bbdf::/48 maxlen: 48
                          2a0e:15c0:abbc::/48 maxlen: 48
                          2a0e:15c5:22::/48 maxlen: 48
                          2a0e:15c7:11::/48 maxlen: 48
                          2a0e:15c7:77::/48 maxlen: 48
                          2a0e:15c7:d4::/48 maxlen: 48
                          2a0e:1a80:10::/48 maxlen: 48
                          2a0e:f600::/48 maxlen: 48
                          2a0e:f600:13::/48 maxlen: 48
                          2a0e:f601:1312::/48 maxlen: 48
                          2a0e:f603:33::/48 maxlen: 48
                          2a0e:f603:acab::/48 maxlen: 48
                          2a0f:1584:5::/48 maxlen: 48
                          2a0f:3047::/48 maxlen: 48
                          2a0f:7d00:32ba::/48 maxlen: 48
                          2a0f:7d02:100::/48 maxlen: 48
                          2a0f:7d06:44::/48 maxlen: 48
                          2a0f:7d06:77::/48 maxlen: 48
                          2a0f:7d06:88::/48 maxlen: 48
                          2a0f:7d06:102::/48 maxlen: 48
                          2a0f:7d06:2a2b::/48 maxlen: 48
                          2a0f:7d06:ad98::/48 maxlen: 48
                          2a0f:e1c1:33::/48 maxlen: 48
                          2a0f:e202:11::/48 maxlen: 48
                          2a0f:e6c6:55::/48 maxlen: 48
                          2a0f:e7c6:55::/48 maxlen: 48
                          2a0f:e847:2::/48 maxlen: 48
                          2a0f:ea44:22::/48 maxlen: 48
                          2a10:67c2:3::/48 maxlen: 48
                          2a12:ac44:8426::/48 maxlen: 48
                          2a12:ecc0:158::/48 maxlen: 48
                          2a12:ecc0:34a::/48 maxlen: 48
                          2a13:8c86:22::/48 maxlen: 48
                          2a13:c900:130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b6:39:af:cd:0e:e6:d9:2c:7e:63:f1:19:a7:2d:c9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 22 17:25:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c27353621c3ae75854f2678c6bf55f08d677886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:b8:1d:cb:7a:25:75:5a:e2:e0:c1:cf:e6:
                    27:df:3f:c9:ac:f0:f9:fa:85:cd:ea:c0:b1:b2:50:
                    97:b0:a8:8c:0a:df:3a:b3:17:03:78:70:ed:5f:a0:
                    48:1c:fd:73:97:2b:ac:4d:d7:12:bc:76:c3:38:64:
                    61:fd:9e:03:84:ac:7c:ff:2d:fa:bc:90:f9:67:01:
                    51:7f:11:21:da:3b:6c:a9:6a:2b:73:c4:8e:18:44:
                    4f:1f:27:45:46:0b:24:f9:da:d1:19:91:49:83:d9:
                    39:b0:a5:96:5a:49:d2:2a:62:cd:f6:18:13:8d:1e:
                    0b:45:dd:4e:68:f6:f3:09:c5:51:e2:df:c3:08:a7:
                    f4:46:2b:2f:e9:b3:c7:2d:0a:e8:bd:02:ae:4c:cb:
                    ad:1d:c7:39:f5:31:15:a0:c5:82:c4:dd:a7:d0:29:
                    5c:46:43:6d:75:b5:1e:4f:83:77:05:76:4a:16:9a:
                    5d:14:a1:68:b6:4d:a5:e5:65:28:d8:50:17:91:9e:
                    2e:3f:a9:b6:cb:93:35:52:ee:9a:1c:16:b1:f3:79:
                    dd:4b:8a:0f:b5:38:95:b5:32:66:49:63:cd:10:e4:
                    21:ba:92:78:a1:1b:bc:9d:08:32:20:45:ec:9c:40:
                    6d:34:ae:ce:6d:58:5c:ad:db:a4:45:87:22:e9:78:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:35:36:21:C3:AE:75:85:4F:26:78:C6:BF:55:F0:8D:67:78:86
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TCc1NiHDrnWFTyZ4xr9V8I1neIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:35c0:6::/48
                  2a05:35c0:11::/48
                  2a06:1180:aa::/48
                  2a06:1180:1f3::/48
                  2a06:1180:1000::/48
                  2a06:1180:12bb::/48
                  2a06:1181:100::/48
                  2a06:1184:88::/48
                  2a06:1184:1312::/48
                  2a09:17c0:8743::/48
                  2a09:17c1:ad::/48
                  2a09:17c1:ca::/48
                  2a09:17c1:f3::/48
                  2a09:17c7:fc3a::/48
                  2a0a:2d04:100::/48
                  2a0a:2d04:9825::/48
                  2a0a:2d05:19ad::/48
                  2a0a:2d06:100::/48
                  2a0a:2d06:103::/48
                  2a0a:2d06:1312::/48
                  2a0a:2d07:35::/48
                  2a0a:2d07:fc3e::/48
                  2a0c:7881:98dd::/48
                  2a0c:7882:1::/48
                  2a0c:7886:b::/48
                  2a0c:7886:55::/48
                  2a0c:7886:d6::/48
                  2a0c:7886:1b3::/48
                  2a0c:7886:38bc::/48
                  2a0c:7886:7b8a::/48
                  2a0c:7886:bbdf::/48
                  2a0e:15c0:abbc::/48
                  2a0e:15c5:22::/48
                  2a0e:15c7:11::/48
                  2a0e:15c7:77::/48
                  2a0e:15c7:d4::/48
                  2a0e:1a80:10::/48
                  2a0e:f600::/48
                  2a0e:f600:13::/48
                  2a0e:f601:1312::/48
                  2a0e:f603:33::/48
                  2a0e:f603:acab::/48
                  2a0f:1584:5::/48
                  2a0f:3047::/48
                  2a0f:7d00:32ba::/48
                  2a0f:7d02:100::/48
                  2a0f:7d06:44::/48
                  2a0f:7d06:77::/48
                  2a0f:7d06:88::/48
                  2a0f:7d06:102::/48
                  2a0f:7d06:2a2b::/48
                  2a0f:7d06:ad98::/48
                  2a0f:e1c1:33::/48
                  2a0f:e202:11::/48
                  2a0f:e6c6:55::/48
                  2a0f:e7c6:55::/48
                  2a0f:e847:2::/48
                  2a0f:ea44:22::/48
                  2a10:67c2:3::/48
                  2a12:ac44:8426::/48
                  2a12:ecc0:158::/48
                  2a12:ecc0:34a::/48
                  2a13:8c86:22::/48
                  2a13:c900:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:c1:4c:e5:05:ab:69:53:81:09:9c:54:e9:4a:41:24:f5:
         9d:32:d3:2a:ab:5c:89:19:3c:70:3b:c4:21:d7:07:8f:00:8d:
         dc:1a:9b:b7:7b:4f:60:fb:e9:7d:4d:89:8a:94:8e:6f:56:c3:
         64:a1:66:cc:39:8b:1b:23:18:54:84:78:80:ba:59:6a:40:2f:
         74:99:18:79:b7:64:fa:2d:79:e4:1e:d2:05:fd:5b:a8:0c:33:
         c6:72:c3:a2:b4:f2:12:4b:85:a9:05:96:07:4e:11:90:11:45:
         40:5f:92:35:8a:89:d8:bb:fc:76:cd:bc:6a:15:d0:f9:49:b8:
         0f:0d:2b:b4:e6:40:84:0e:3e:6a:a8:8e:46:48:7e:47:fb:ae:
         cb:24:10:47:23:f7:4f:54:3e:92:cd:46:83:14:87:19:75:3f:
         ee:61:c7:52:d8:32:a2:9a:59:49:09:f6:da:3e:7b:d6:eb:78:
         40:ec:21:69:19:f2:5d:98:c8:2e:dd:0b:82:39:9c:55:25:45:
         e7:34:b2:00:6d:de:98:1c:40:ad:0f:46:30:00:aa:1c:ba:5c:
         f4:3a:b6:f7:56:31:63:28:2c:77:5b:e7:c2:aa:04:82:3a:f3:
         c6:70:54:17:fe:df:93:92:e6:e2:87:56:80:88:92:99:a9:aa:
         bb:f1:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:41 2026 by rpki-client