Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa
File:                     rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa (raw, json)
Hash identifier:          kAqEU3AZtb+qAVPxKeiCoJPu2fI++dhercqPaQVS1jY=
Subject key identifier:   AD:4F:D0:A1:3A:89:17:D5:E0:67:7B:D3:62:AD:0E:4F:26:D9:7D:22
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       0199C63AFB69F959FF01C534817F43F8FD2D
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa
Signing time:             Wed 08 Oct 2025 23:49:38 +0000
ROA not before:           Wed 08 Oct 2025 23:49:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31898
IP address blocks:        79.72.0.0/20 maxlen: 20
                          79.72.16.0/22 maxlen: 22
                          79.72.20.0/23 maxlen: 23
                          79.72.24.0/21 maxlen: 21
                          79.72.32.0/22 maxlen: 24
                          79.72.40.0/21 maxlen: 21
                          79.72.48.0/20 maxlen: 20
                          79.72.64.0/19 maxlen: 19
                          79.76.0.0/20 maxlen: 20
                          79.76.16.0/23 maxlen: 23
                          79.76.18.0/23 maxlen: 23
                          79.76.20.0/24 maxlen: 24
                          79.76.24.0/21 maxlen: 21
                          79.76.32.0/19 maxlen: 19
                          79.76.96.0/19 maxlen: 19
                          80.225.64.0/20 maxlen: 20
                          80.225.80.0/20 maxlen: 20
                          80.225.160.0/21 maxlen: 21
                          80.225.168.0/23 maxlen: 23
                          80.225.170.0/23 maxlen: 23
                          80.225.172.0/23 maxlen: 23
                          80.225.174.0/23 maxlen: 23
                          80.225.176.0/23 maxlen: 23
                          80.225.178.0/23 maxlen: 23
                          80.225.184.0/21 maxlen: 21
                          80.225.192.0/18 maxlen: 18
                          81.208.160.0/20 maxlen: 20
                          81.208.188.0/22 maxlen: 22
                          84.8.64.0/21 maxlen: 21
                          84.8.72.0/23 maxlen: 23
                          84.8.74.0/23 maxlen: 23
                          84.8.76.0/23 maxlen: 23
                          84.8.78.0/23 maxlen: 23
                          84.8.88.0/23 maxlen: 23
                          84.8.96.0/19 maxlen: 19
                          84.8.128.0/20 maxlen: 20
                          84.8.144.0/20 maxlen: 20
                          84.8.224.0/21 maxlen: 21
                          84.8.232.0/23 maxlen: 23
                          84.8.234.0/23 maxlen: 23
                          84.8.238.0/23 maxlen: 23
                          84.8.240.0/23 maxlen: 23
                          84.8.242.0/23 maxlen: 23
                          84.8.248.0/21 maxlen: 21
                          84.235.160.0/19 maxlen: 19
                          84.235.192.0/23 maxlen: 23
                          84.235.198.0/23 maxlen: 23
                          84.235.200.0/21 maxlen: 21
                          84.235.208.0/20 maxlen: 20
                          84.235.224.0/20 maxlen: 20
                          84.235.240.0/20 maxlen: 20
                          89.168.0.0/21 maxlen: 21
                          89.168.16.0/20 maxlen: 20
                          89.168.32.0/19 maxlen: 19
                          89.168.64.0/18 maxlen: 18
                          92.5.0.0/17 maxlen: 17
                          92.5.128.0/18 maxlen: 18
                          92.5.192.0/19 maxlen: 19
                          92.5.224.0/20 maxlen: 20
                          92.5.240.0/21 maxlen: 21
                          92.5.248.0/22 maxlen: 22
                          92.5.254.0/24 maxlen: 24
                          92.5.255.0/24 maxlen: 24
                          130.110.0.0/20 maxlen: 20
                          130.110.16.0/21 maxlen: 21
                          130.110.24.0/22 maxlen: 22
                          130.110.28.0/23 maxlen: 23
                          130.110.32.0/19 maxlen: 19
                          130.110.64.0/19 maxlen: 19
                          130.110.96.0/19 maxlen: 19
                          130.110.206.0/24 maxlen: 24
                          130.110.207.0/24 maxlen: 24
                          130.110.208.0/24 maxlen: 24
                          130.110.209.0/24 maxlen: 24
                          130.110.210.0/24 maxlen: 24
                          130.110.211.0/24 maxlen: 24
                          130.110.212.0/24 maxlen: 24
                          130.110.213.0/24 maxlen: 24
                          130.110.214.0/24 maxlen: 24
                          130.110.216.0/24 maxlen: 24
                          130.110.218.0/24 maxlen: 24
                          130.110.219.0/24 maxlen: 24
                          130.110.220.0/24 maxlen: 24
                          130.110.221.0/24 maxlen: 24
                          130.110.222.0/24 maxlen: 24
                          130.110.223.0/24 maxlen: 24
                          130.110.224.0/21 maxlen: 21
                          130.110.232.0/22 maxlen: 22
                          130.110.236.0/23 maxlen: 23
                          130.110.238.0/24 maxlen: 24
                          130.110.239.0/24 maxlen: 24
                          130.110.240.0/20 maxlen: 20
                          134.98.64.0/23 maxlen: 23
                          134.98.128.0/19 maxlen: 19
                          134.98.192.0/19 maxlen: 19
                          134.98.224.0/23 maxlen: 23
                          134.98.248.0/21 maxlen: 21
                          141.253.96.0/19 maxlen: 19
                          141.253.192.0/20 maxlen: 20
                          141.253.208.0/22 maxlen: 22
                          141.253.212.0/23 maxlen: 23
                          141.253.214.0/24 maxlen: 24
                          141.253.215.0/24 maxlen: 24
                          141.253.216.0/21 maxlen: 21
                          145.241.112.0/20 maxlen: 20
                          145.241.144.0/21 maxlen: 21
                          145.241.152.0/21 maxlen: 21
                          145.241.160.0/20 maxlen: 20
                          145.241.178.0/23 maxlen: 23
                          145.241.180.0/23 maxlen: 23
                          145.241.182.0/24 maxlen: 24
                          145.241.183.0/24 maxlen: 24
                          145.241.184.0/21 maxlen: 21
                          145.241.192.0/18 maxlen: 18
                          213.35.96.0/19 maxlen: 19
                          217.142.128.0/19 maxlen: 19
                          217.142.160.0/21 maxlen: 21
                          217.142.168.0/23 maxlen: 23
                          217.142.170.0/23 maxlen: 23
                          217.142.172.0/23 maxlen: 23
                          217.142.174.0/23 maxlen: 23
                          217.142.176.0/23 maxlen: 23
                          217.142.178.0/23 maxlen: 23
                          217.142.184.0/21 maxlen: 21
                          217.142.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c6:3a:fb:69:f9:59:ff:01:c5:34:81:7f:43:f8:fd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: Oct  8 23:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ad4fd0a13a8917d5e0677bd362ad0e4f26d97d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:5f:ab:4e:bc:c3:69:08:9a:fd:f2:27:fe:
                    ff:01:1a:69:9a:cb:03:e7:93:73:6f:80:8a:62:ad:
                    fd:65:0c:fa:7f:cb:f6:28:ba:24:98:85:ec:a3:46:
                    75:ba:ff:2a:d7:67:a1:e1:20:13:ea:71:94:ed:8f:
                    1c:aa:b7:81:ac:66:cc:1b:b4:d2:67:fb:56:33:d0:
                    03:05:29:2e:fc:16:f9:da:db:07:90:b7:40:d3:fb:
                    6c:b3:d1:cc:4b:13:be:15:2b:25:05:24:53:4c:a3:
                    0d:31:5e:ca:89:1c:d9:26:63:d0:c3:17:de:5f:c4:
                    9b:5d:69:ae:30:10:ea:88:9b:f6:b3:08:b2:f2:ae:
                    74:a8:1e:54:c6:48:3e:20:55:82:9f:5a:25:dc:13:
                    a3:4e:70:f0:15:ee:f7:41:c8:78:d7:89:6e:ab:e1:
                    ab:75:c0:f0:44:7a:78:0b:d7:c2:8b:52:31:ec:f8:
                    78:16:0b:b3:28:51:ed:a2:bf:76:52:f9:e8:ad:21:
                    b9:99:87:ad:25:06:6a:a1:da:84:0b:b4:bc:6c:c7:
                    c0:ab:87:0f:72:23:b6:c4:28:d7:26:25:d7:15:bc:
                    ef:3e:78:7f:d6:7f:d9:c8:03:23:75:5b:8c:7e:0f:
                    e9:e7:1e:10:9a:66:64:59:9b:77:62:7f:a9:ad:e0:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4F:D0:A1:3A:89:17:D5:E0:67:7B:D3:62:AD:0E:4F:26:D9:7D:22
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.72.0.0-79.72.21.255
                  79.72.24.0-79.72.35.255
                  79.72.40.0-79.72.95.255
                  79.76.0.0-79.76.20.255
                  79.76.24.0-79.76.63.255
                  79.76.96.0/19
                  80.225.64.0/19
                  80.225.160.0-80.225.179.255
                  80.225.184.0-80.225.255.255
                  81.208.160.0/20
                  81.208.188.0/22
                  84.8.64.0/20
                  84.8.88.0/23
                  84.8.96.0-84.8.159.255
                  84.8.224.0-84.8.235.255
                  84.8.238.0-84.8.243.255
                  84.8.248.0/21
                  84.235.160.0-84.235.193.255
                  84.235.198.0-84.235.255.255
                  89.168.0.0/21
                  89.168.16.0-89.168.127.255
                  92.5.0.0-92.5.251.255
                  92.5.254.0/23
                  130.110.0.0-130.110.29.255
                  130.110.32.0-130.110.127.255
                  130.110.206.0-130.110.214.255
                  130.110.216.0/24
                  130.110.218.0-130.110.255.255
                  134.98.64.0/23
                  134.98.128.0/19
                  134.98.192.0-134.98.225.255
                  134.98.248.0/21
                  141.253.96.0/19
                  141.253.192.0/19
                  145.241.112.0/20
                  145.241.144.0-145.241.175.255
                  145.241.178.0-145.241.255.255
                  213.35.96.0/19
                  217.142.128.0-217.142.179.255
                  217.142.184.0/21
                  217.142.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:7f:c7:c2:e9:f9:1a:56:96:9a:6a:1f:49:6b:5b:86:cd:
         8f:41:f7:26:4d:5a:1a:89:5b:cd:4e:dd:80:01:f8:7f:35:82:
         1b:9d:de:44:cf:cd:d9:dc:bc:4c:f7:46:3f:34:16:49:d5:0f:
         22:e6:e6:6c:b5:d5:43:4f:ba:5b:23:c2:5c:15:77:89:8e:d2:
         a9:d3:41:2b:26:28:de:b0:e5:f3:f0:be:b1:90:e7:af:6f:49:
         77:bc:05:c5:d7:f7:be:66:3f:20:24:26:de:fb:d0:a7:e7:2c:
         d7:74:d0:2e:42:58:13:de:b3:26:ea:50:59:49:72:87:51:c3:
         03:31:1f:19:8c:af:cf:6a:ce:8f:a4:e2:fe:34:0d:c8:11:33:
         e2:f2:b7:1c:21:92:4d:82:6a:a1:75:fa:49:e5:b8:3c:1e:c5:
         4f:f1:bc:df:d4:2e:a8:c8:72:8a:6d:69:42:3c:6d:11:0e:33:
         9b:53:28:d3:ce:9e:7e:6f:74:f3:63:f0:21:c5:cb:9d:a8:a8:
         d8:f1:08:7a:88:b9:d5:73:9a:ce:01:fb:26:8a:4c:e3:d6:3f:
         5b:f4:52:b1:36:b9:5f:97:15:28:50:83:e4:bd:7c:25:35:9a:
         25:06:02:c9:dc:0c:0a:2a:d7:d7:19:67:68:00:94:a0:ed:d9:
         56:e2:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:03 2025 by rpki-client