Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/EuzrvuKdTBEUT1iTSTu2oWpyl08.roa
File:                     EuzrvuKdTBEUT1iTSTu2oWpyl08.roa (raw, json)
Hash identifier:          6lfE37g+270FUBODA6XRsyANZt1xmAjhCCTH8Dga4fo=
Subject key identifier:   12:EC:EB:BE:E2:9D:4C:11:14:4F:58:93:49:3B:B6:A1:6A:72:97:4F
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019F3C1DA4EC391CDBD5D7BE5BD41546425D
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/EuzrvuKdTBEUT1iTSTu2oWpyl08.roa
Signing time:             Tue 07 Jul 2026 10:26:43 +0000
ROA not before:           Tue 07 Jul 2026 10:26:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31624
IP address blocks:        195.20.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3c:1d:a4:ec:39:1c:db:d5:d7:be:5b:d4:15:46:42:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Jul  7 10:26:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12ecebbee29d4c11144f5893493bb6a16a72974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:61:f7:5d:23:a0:fe:8d:3e:7f:55:27:6e:
                    60:ca:4f:b2:3b:36:2b:c3:a3:0c:91:c3:f8:13:ad:
                    39:9b:b9:28:2f:59:0d:5c:6c:bf:8b:ca:72:1d:88:
                    e8:42:48:46:46:f6:bf:7a:f0:88:8c:e1:8b:08:ff:
                    3b:64:32:85:45:55:92:d7:d9:ee:9c:62:29:70:48:
                    88:8e:61:9b:d5:13:b4:a8:ea:1d:f5:81:9c:d0:0e:
                    e8:36:dc:9d:f3:ee:04:ec:ee:13:ff:4d:68:79:1b:
                    87:cb:f3:08:82:29:06:ef:80:d3:cb:1f:7a:33:41:
                    1c:7e:3a:28:81:bd:23:d6:58:10:a2:17:a4:bc:9c:
                    33:1d:ac:3a:78:7a:cc:4c:e4:74:c3:2a:58:78:1f:
                    94:01:fe:2c:26:b7:fb:94:32:c8:4a:01:ad:4f:9a:
                    84:3c:c3:88:ad:19:09:ca:b8:8b:51:b2:c8:10:a3:
                    ed:48:28:ac:20:f6:f0:db:cd:f8:6e:0a:da:3b:78:
                    89:1d:ac:af:be:d8:7e:f8:03:c7:f2:d1:6e:e1:c4:
                    1b:3f:cb:d5:57:99:21:e8:77:b6:89:ae:a2:36:62:
                    f8:b7:10:ad:00:dd:e8:39:6a:09:ce:77:b6:46:77:
                    a7:7b:fe:4c:b2:2a:42:f4:a9:0b:d9:89:27:06:e3:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:EB:BE:E2:9D:4C:11:14:4F:58:93:49:3B:B6:A1:6A:72:97:4F
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/EuzrvuKdTBEUT1iTSTu2oWpyl08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:b2:2d:43:70:4f:cb:b6:78:6c:b1:d3:41:cc:4e:c0:8d:
         7c:a7:a2:c0:ed:50:21:a2:c4:c6:69:b4:be:7a:60:d6:ea:a8:
         c9:38:23:e7:70:ac:14:70:60:be:ef:cd:6c:b5:9b:44:ea:a1:
         23:2e:87:2c:47:b5:bf:c0:10:3f:88:fa:6a:d7:98:68:f5:d0:
         c2:45:9d:a2:28:1b:7c:8c:52:41:8b:8a:56:37:55:2d:13:d2:
         64:7d:7d:a7:43:e3:7c:df:fd:8a:0a:2e:1e:f7:b4:f6:a1:80:
         77:35:98:64:7b:2a:e9:08:84:5f:a0:7f:49:2b:0a:27:d2:b9:
         2a:43:a9:6c:0b:6c:43:72:77:0e:7e:d0:27:f5:5d:b5:3f:9c:
         14:b4:de:96:c9:1c:23:4f:16:a3:0c:22:5b:a0:41:83:09:76:
         a3:46:9e:e9:22:2f:e5:c0:af:7e:da:5b:45:35:5b:5d:c3:d8:
         0a:ed:fc:78:3e:14:3e:58:c2:06:21:22:e2:5f:15:8e:6d:ee:
         d4:71:1d:52:f6:9b:22:49:b2:56:ac:fb:32:a2:ec:65:00:42:
         ed:8e:d8:c2:61:58:0f:81:3e:d4:98:48:08:29:12:ad:c6:4d:
         77:ef:ae:45:f2:d2:7a:2b:20:2f:fe:71:42:df:ec:a9:0e:b4:
         90:0a:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:41 2026 by rpki-client