Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/_ABV_5VBnB4k7l-PToT9DQmXexU.roa
File:                     _ABV_5VBnB4k7l-PToT9DQmXexU.roa (raw, json)
Hash identifier:          WozzA/Ovvccf1QRCxoJlKSURGc/qCGPUwMaC34biB0M=
Subject key identifier:   FC:00:55:FF:95:41:9C:1E:24:EE:5F:8F:4E:84:FD:0D:09:97:7B:15
Certificate issuer:       /CN=cba185a8b162027e85ef319019887fe2193deaab
Certificate serial:       019F2368A5E9317A028A1ABB6D44E15429FB
Authority key identifier: CB:A1:85:A8:B1:62:02:7E:85:EF:31:90:19:88:7F:E2:19:3D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/_ABV_5VBnB4k7l-PToT9DQmXexU.roa
Signing time:             Thu 02 Jul 2026 15:18:08 +0000
ROA not before:           Thu 02 Jul 2026 15:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199754
IP address blocks:        2001:678:121c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:a5:e9:31:7a:02:8a:1a:bb:6d:44:e1:54:29:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba185a8b162027e85ef319019887fe2193deaab
        Validity
            Not Before: Jul  2 15:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc0055ff95419c1e24ee5f8f4e84fd0d09977b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:fd:b6:02:e2:20:d1:c2:7c:5b:ee:a7:49:
                    55:77:86:6a:1f:93:80:85:b8:e0:1c:72:cd:27:4d:
                    71:36:b8:ad:83:cc:4a:63:27:4c:a1:c4:3d:f2:9c:
                    2c:1a:90:a0:9b:80:ef:93:63:49:e2:96:eb:f0:cd:
                    09:30:31:7c:4e:cd:af:c6:18:3d:77:e9:f2:91:e0:
                    bc:ef:45:be:6e:1d:bb:91:33:af:88:07:c7:42:f3:
                    40:8e:b4:bb:a8:36:3a:92:be:cc:4e:e6:c7:77:92:
                    92:b8:42:c3:45:83:10:c5:a3:be:ad:5c:99:0b:5f:
                    4c:83:2d:c2:53:63:28:c2:2c:8e:44:18:78:61:57:
                    47:a4:19:b3:18:57:d5:85:cc:cf:88:51:cb:ee:6b:
                    8d:60:ae:16:d6:5c:5f:2f:49:55:e6:02:80:7c:1e:
                    89:61:8f:f3:a8:2b:bb:64:72:33:08:11:2a:ef:14:
                    79:50:c1:5b:38:d3:c5:03:7c:34:48:40:8f:63:d0:
                    a4:89:18:2f:72:2d:15:a7:57:76:bf:39:df:83:52:
                    c6:d8:60:25:80:79:54:91:bb:7e:a8:1c:f5:ca:77:
                    04:86:7e:bc:68:9e:7e:bf:7a:c1:5a:64:ad:8e:52:
                    db:a6:76:c3:15:94:f9:12:ad:de:6e:32:cf:03:6f:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:00:55:FF:95:41:9C:1E:24:EE:5F:8F:4E:84:FD:0D:09:97:7B:15
            X509v3 Authority Key Identifier:
                keyid:CB:A1:85:A8:B1:62:02:7E:85:EF:31:90:19:88:7F:E2:19:3D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/_ABV_5VBnB4k7l-PToT9DQmXexU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:121c::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:de:bb:d1:04:81:37:60:44:ff:1e:6d:8a:7f:1c:0a:2d:e4:
         8e:6d:52:3e:a4:b2:d8:b2:8c:76:4a:bb:c3:43:f6:7e:43:9f:
         8e:fa:04:bf:53:bb:b9:ce:af:d2:ad:b1:ed:6d:17:f1:87:09:
         7f:c9:dc:a2:c8:16:40:b7:5f:73:7d:ab:ec:e9:85:ba:4f:37:
         99:93:58:4e:be:3a:d3:2f:78:d6:4e:37:78:56:40:33:84:95:
         3e:f1:c2:22:18:0d:b7:b9:95:18:c7:6f:0a:d2:57:ce:f4:d4:
         17:5c:9e:4a:a2:60:99:8c:38:b7:f5:40:f9:2f:19:a4:45:91:
         a3:39:6a:c6:bf:b8:90:82:97:69:e7:57:5c:20:0c:e6:81:db:
         86:35:f9:5d:16:6d:67:3e:73:c6:4a:89:98:0e:da:fd:7d:81:
         af:ed:18:d5:3b:ec:bf:5e:c7:90:18:6f:50:3b:7f:e4:df:54:
         84:1c:59:80:74:eb:18:12:7f:c3:19:af:44:a9:88:77:43:85:
         36:63:30:ea:0c:54:8d:7e:40:90:61:3e:8e:34:57:0b:03:98:
         a8:60:ef:0f:db:46:46:27:66:f8:34:7a:c2:64:f9:a0:84:21:
         ca:e6:5a:ec:ad:f4:ba:64:df:96:d9:36:8e:3a:eb:f2:d4:cd:
         dc:86:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:30 2026 by rpki-client