Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/wsLBMp1xRJgr69K7X57Is-5d0GE.roa
File:                     wsLBMp1xRJgr69K7X57Is-5d0GE.roa (raw, json)
Hash identifier:          mpGX3UZzDQtu714gFa7DML2FgzYlJk2cK8dfIFZYaDk=
Subject key identifier:   C2:C2:C1:32:9D:71:44:98:2B:EB:D2:BB:5F:9E:C8:B3:EE:5D:D0:61
Certificate issuer:       /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial:       019F23688C8EBBA4C8E89F176137C4E828B9
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/wsLBMp1xRJgr69K7X57Is-5d0GE.roa
Signing time:             Thu 02 Jul 2026 15:18:01 +0000
ROA not before:           Thu 02 Jul 2026 15:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35775
IP address blocks:        5.83.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:8c:8e:bb:a4:c8:e8:9f:17:61:37:c4:e8:28:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
        Validity
            Not Before: Jul  2 15:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2c2c1329d7144982bebd2bb5f9ec8b3ee5dd061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:02:2a:1a:af:09:c2:e8:ff:fa:60:4c:63:
                    03:3e:30:d3:65:0b:db:58:76:8c:4b:b5:65:7a:30:
                    29:10:dd:dd:e9:93:cf:77:31:b3:e4:c8:98:8c:34:
                    d0:f0:ec:a2:a0:7f:d3:cf:54:1c:ae:3b:02:54:3c:
                    ff:a5:20:e7:cc:c1:b0:f9:b4:a8:23:77:59:a0:9d:
                    a8:02:8e:c8:65:28:9d:66:c8:d8:ac:b2:cc:d1:7b:
                    b4:db:56:80:cc:34:d7:a6:b4:53:4f:d5:99:f4:10:
                    8d:88:b1:59:7b:01:43:0f:9d:ad:95:e5:68:75:12:
                    74:c3:ed:cb:3d:88:ac:59:c7:19:a0:f3:b8:6a:29:
                    30:d1:4d:30:b2:3c:c9:fe:0b:cb:e9:74:8c:75:1b:
                    dd:22:7c:f6:c0:86:99:f3:59:cc:89:32:68:92:8d:
                    c9:5d:93:f8:50:6f:e2:65:b5:72:e2:e3:3b:df:13:
                    a7:69:30:42:8d:63:0c:1b:f1:0b:a9:3d:02:22:9b:
                    ce:b5:9e:02:6e:7c:c2:50:59:1d:18:af:42:bd:56:
                    b6:82:2b:d6:35:4e:7f:b8:17:a6:43:fc:65:22:87:
                    db:47:9d:40:fb:29:56:22:46:ab:5a:53:1b:bf:f7:
                    bb:e0:83:3e:5d:cd:f0:21:1b:12:f2:2d:9e:71:b1:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:C1:32:9D:71:44:98:2B:EB:D2:BB:5F:9E:C8:B3:EE:5D:D0:61
            X509v3 Authority Key Identifier:
                keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/wsLBMp1xRJgr69K7X57Is-5d0GE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:b4:f0:5c:91:f2:d9:c6:d3:dc:29:9a:ed:d5:ff:65:36:
         7b:96:60:19:6b:01:4c:cc:dd:3d:fa:cf:c1:68:5b:26:dc:59:
         13:12:33:28:b8:95:88:eb:9f:05:e5:ce:3b:57:e1:85:6e:ac:
         ef:55:2f:ee:7c:cf:83:67:f3:c7:f7:a9:a8:0a:0d:85:6b:20:
         47:f3:38:d3:0e:0e:cc:83:12:64:f2:82:2d:bf:ed:f4:44:bb:
         34:f3:9a:89:79:6d:91:e4:48:37:5c:94:e3:43:5b:1e:b9:4c:
         39:bc:5b:1f:f4:a1:7f:bd:84:75:f3:af:eb:4f:66:e7:44:f5:
         19:4b:85:35:bb:1c:78:53:92:ed:bf:22:fe:a5:5b:c2:3c:53:
         98:c7:e9:32:9e:6a:07:db:c6:89:fb:11:cd:f9:83:b7:f1:22:
         65:3f:8d:e4:13:9e:13:ef:1d:0f:a0:88:2f:f4:ff:77:f5:8b:
         14:56:36:eb:ee:b7:db:38:7c:f0:d3:e3:4e:4b:c6:6e:93:d5:
         a9:83:cc:bc:07:eb:08:68:61:cc:b3:e2:66:f1:ff:45:fc:ed:
         d3:87:e9:bd:8b:8e:5d:0e:eb:96:2c:78:b8:24:0c:18:23:69:
         37:80:df:d7:02:f7:0f:b5:07:4f:ae:a0:0a:51:44:ba:59:3b:
         8b:f2:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:30 2026 by rpki-client