Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DC6F0mfYavqmIkVWp9CoS3ORJPY.roa
File:                     DC6F0mfYavqmIkVWp9CoS3ORJPY.roa (raw, json)
Hash identifier:          H/N8+lVCJsVtR4s7AZv6JX/uXYchHAlYepuRHlvMSmQ=
Subject key identifier:   0C:2E:85:D2:67:D8:6A:FA:A6:22:45:56:A7:D0:A8:4B:73:91:24:F6
Certificate issuer:       /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial:       019F23688DF8BD739F6E6706B6589E1FB2AD
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DC6F0mfYavqmIkVWp9CoS3ORJPY.roa
Signing time:             Thu 02 Jul 2026 15:18:02 +0000
ROA not before:           Thu 02 Jul 2026 15:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50192
IP address blocks:        185.75.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:8d:f8:bd:73:9f:6e:67:06:b6:58:9e:1f:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
        Validity
            Not Before: Jul  2 15:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c2e85d267d86afaa6224556a7d0a84b739124f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:4a:a3:03:20:0b:06:0e:5f:82:09:8d:8c:
                    17:52:8d:05:91:14:83:d5:31:9c:4a:71:fb:fd:de:
                    75:04:a3:61:49:82:84:e4:17:09:f2:ca:72:03:b1:
                    29:8d:86:43:4e:57:2f:be:de:62:b6:95:72:55:cf:
                    c7:79:7e:13:1f:49:7f:cf:73:8d:48:b4:9f:d2:0d:
                    b9:cb:34:db:70:59:f1:65:56:d4:62:ce:13:4c:b5:
                    3d:b7:ac:9e:d0:4e:ae:be:f9:3b:28:29:16:48:27:
                    bf:01:5f:25:96:3e:b1:77:ac:8d:83:f1:11:b8:7a:
                    af:05:d2:0e:a1:14:5f:2b:bb:9e:16:a8:d7:3b:24:
                    7b:e1:a1:88:34:2d:a8:e8:9e:b4:35:ce:8d:c7:ba:
                    df:f8:9a:ff:55:42:90:99:a7:1d:41:03:47:db:ca:
                    ed:4e:7c:09:d3:0a:24:ae:0d:cb:88:b7:d1:d5:06:
                    f6:ec:d8:ce:72:be:03:e6:aa:d9:21:c2:0c:7f:57:
                    66:82:93:f2:fe:7d:82:93:4d:05:54:db:7d:d8:fc:
                    88:7b:7e:61:4e:81:6b:69:e5:86:d2:cf:14:05:7f:
                    c1:19:40:a2:de:a0:cf:c6:6e:01:ed:16:86:0f:7d:
                    49:bb:3d:2e:fa:06:ba:74:cd:66:fb:1f:5d:4e:ab:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2E:85:D2:67:D8:6A:FA:A6:22:45:56:A7:D0:A8:4B:73:91:24:F6
            X509v3 Authority Key Identifier:
                keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DC6F0mfYavqmIkVWp9CoS3ORJPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:a5:b0:d0:13:60:7e:aa:ab:2e:17:39:d5:88:b0:dc:e4:
         d3:99:8d:cf:3a:d7:8b:94:de:50:e7:bb:45:7e:38:11:28:0e:
         69:31:79:70:ed:6b:a8:bd:9c:2f:12:16:20:82:ef:d1:58:48:
         f0:50:71:6b:67:da:09:f8:13:54:1a:a9:5b:3b:d1:61:b2:9d:
         e7:dc:fc:39:6e:63:b9:28:5e:24:c2:18:0b:67:02:ac:8f:17:
         6f:7d:83:74:99:94:98:12:f5:1f:90:23:56:fe:ad:d2:0c:eb:
         c9:d8:f3:b8:50:95:a2:40:76:8b:e7:18:a3:da:a9:52:46:b8:
         b1:e1:02:7a:5d:4a:90:3c:5f:5e:cc:22:61:b7:f2:f9:cd:06:
         3c:6a:fa:a5:dc:b6:e7:0b:bd:7b:ce:6c:d9:21:74:76:8a:eb:
         e0:aa:a0:56:4c:df:e5:39:6b:e6:2a:08:5f:7a:11:c6:e7:4e:
         aa:07:65:ef:ce:cd:7f:57:95:be:06:c9:d7:2c:28:46:63:1a:
         c7:c9:0f:b2:cb:8b:f1:2c:fe:f7:8a:95:30:4d:82:e6:0b:af:
         68:17:ea:01:f4:cb:da:cc:cf:d9:41:1d:8f:7c:1e:f3:66:9e:
         3e:2e:da:2f:88:a4:be:78:21:36:a6:94:01:ad:b4:2b:85:c7:
         04:bd:d1:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaI34vXOfbmcGtlieH7KtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzc5YzU4ZTZjZmFiYTQ0YzIwODc2YjdkNTk4YzA4NTA0
YjUzMGIwHhcNMjYwNzAyMTUxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzJlODVkMjY3ZDg2YWZhYTYyMjQ1NTZhN2QwYTg0YjczOTEyNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCdKowMgCwYOX4IJjYwXUo0FkRSD
1TGcSnH7/d51BKNhSYKE5BcJ8spyA7EpjYZDTlcvvt5itpVyVc/HeX4TH0l/z3ON
SLSf0g25yzTbcFnxZVbUYs4TTLU9t6ye0E6uvvk7KCkWSCe/AV8llj6xd6yNg/ER
uHqvBdIOoRRfK7ueFqjXOyR74aGINC2o6J60Nc6Nx7rf+Jr/VUKQmacdQQNH28rt
TnwJ0wokrg3LiLfR1Qb27NjOcr4D5qrZIcIMf1dmgpPy/n2Ck00FVNt92PyIe35h
ToFraeWG0s8UBX/BGUCi3qDPxm4B7RaGD31Juz0u+ga6dM1m+x9dTqv8vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwuhdJn2Gr6piJFVqfQqEtzkST2MB8GA1UdIwQY
MBaAFP43nFjmz6ukTCCHa31ZjAhQS1MLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2plY1dPYlBxNlJNSUlkcmZWbU1DRkJMVXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt
NjU5OGI0Y2ViMDY5LzEvREM2RjBtZllhdnFtSWtWV3A5Q29TM09SSlBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5
LzEvX2plY1dPYlBxNlJNSUlkcmZWbU1DRkJMVXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUs0MA0G
CSqGSIb3DQEBCwUAA4IBAQCOJKWw0BNgfqqrLhc51Yiw3OTTmY3POteLlN5Q57tF
fjgRKA5pMXlw7WuovZwvEhYggu/RWEjwUHFrZ9oJ+BNUGqlbO9Fhsp3n3Pw5bmO5
KF4kwhgLZwKsjxdvfYN0mZSYEvUfkCNW/q3SDOvJ2PO4UJWiQHaL5xij2qlSRrix
4QJ6XUqQPF9ezCJht/L5zQY8avql3LbnC717zmzZIXR2iuvgqqBWTN/lOWvmKghf
ehHG506qB2Xvzs1/V5W+BsnXLChGYxrHyQ+yy4vxLP73ipUwTYLmC69oF+oB9Mva
zM/ZQR2PfB7zZp4+LtoviKS+eCE2ppQBrbQrhccEvdHv
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:55 2026 by rpki-client