Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa
File:                     bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa (raw, json)
Hash identifier:          0VXWmptilJp/NZdJSyteya06wYsuekGmJXgRcUTXwzQ=
Subject key identifier:   6C:E2:67:DC:2E:17:FC:76:D5:AB:58:7A:51:B3:E6:78:76:BC:F5:79
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       0199CB222AE7F562BF8C3D749F4CCA4A191B
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa
Signing time:             Thu 09 Oct 2025 22:40:37 +0000
ROA not before:           Thu 09 Oct 2025 22:40:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31655
IP address blocks:        5.2.96.0/19 maxlen: 24
                          5.144.156.0/22 maxlen: 24
                          62.223.128.0/17 maxlen: 17
                          80.252.64.0/20 maxlen: 24
                          88.215.0.0/18 maxlen: 29
                          89.213.8.0/21 maxlen: 24
                          89.213.16.0/20 maxlen: 24
                          89.213.32.0/21 maxlen: 24
                          185.4.196.0/22 maxlen: 24
                          185.21.208.0/22 maxlen: 24
                          188.66.64.0/18 maxlen: 24
                          195.162.96.0/19 maxlen: 24
                          213.218.192.0/20 maxlen: 24
                          2a02:c1c0::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:cb:22:2a:e7:f5:62:bf:8c:3d:74:9f:4c:ca:4a:19:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Oct  9 22:40:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ce267dc2e17fc76d5ab587a51b3e67876bcf579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:77:5c:13:20:c5:89:65:b7:53:53:c0:f6:
                    7d:fd:a9:65:84:d4:69:4d:be:06:c7:8a:b0:c8:3d:
                    fc:a4:f5:88:2a:60:b7:1f:a4:9f:0d:a3:ac:5b:44:
                    d3:c7:7c:75:72:4b:72:15:50:d7:c3:5f:cf:50:e2:
                    13:56:0c:28:88:bf:05:4d:03:00:ac:37:cb:4c:21:
                    00:3c:cb:b9:12:c4:33:df:e5:9b:bb:8b:82:00:a9:
                    0a:66:8d:53:e6:89:ad:2c:e0:a4:11:ba:3f:13:0b:
                    ea:1d:aa:42:33:b3:7f:46:32:a4:7b:d4:5f:ed:bb:
                    a1:b4:88:0b:60:b0:4d:40:ec:37:4d:3e:eb:bd:ea:
                    3a:c6:2f:73:27:bf:e3:b7:03:cf:01:8c:0f:5d:28:
                    20:06:55:02:77:c4:85:83:29:8f:84:3f:9d:33:e6:
                    cd:d6:6e:b8:16:e6:a3:34:5e:d8:23:7b:0d:9c:0e:
                    f3:c8:c5:e5:0f:41:70:67:9d:e5:85:4e:21:17:06:
                    0d:26:2e:46:9b:99:e1:e2:b5:5b:20:51:30:d0:57:
                    30:54:79:fa:b3:96:a9:4f:04:d5:c4:ea:c9:24:23:
                    8b:1a:e9:bc:3e:0f:23:a6:9c:0e:93:c4:04:73:b9:
                    08:79:09:48:01:f4:ca:14:18:86:11:76:5a:c7:60:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:67:DC:2E:17:FC:76:D5:AB:58:7A:51:B3:E6:78:76:BC:F5:79
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.2.96.0/19
                  5.144.156.0/22
                  62.223.128.0/17
                  80.252.64.0/20
                  88.215.0.0/18
                  89.213.8.0-89.213.39.255
                  185.4.196.0/22
                  185.21.208.0/22
                  188.66.64.0/18
                  195.162.96.0/19
                  213.218.192.0/20
                IPv6:
                  2a02:c1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:f5:66:8d:a4:d1:2d:84:b8:51:c2:40:90:3a:26:4f:22:
         e2:fd:fe:95:e0:2b:5f:41:7b:9b:d6:d8:97:22:c6:db:64:cb:
         52:ce:7a:2f:b5:88:81:ed:60:2c:1a:21:f1:26:22:1a:f0:8a:
         ed:0a:a3:8b:b8:26:b2:65:ce:24:04:63:da:1d:a5:6b:32:85:
         d8:7f:5a:e9:80:77:8a:33:eb:05:c5:fd:a7:a4:48:22:65:2f:
         b4:94:7d:b3:bd:55:d1:79:48:1d:b8:45:2c:f0:ab:a3:7a:47:
         c8:e5:a9:8e:8b:53:06:07:3b:73:34:9b:04:a9:96:37:b4:fc:
         4a:4d:72:8c:ae:52:81:b8:b6:68:05:db:7c:3a:93:42:ec:a1:
         4b:9f:fb:a6:a3:cf:07:cd:7c:03:e1:9b:c8:94:42:9b:b1:7c:
         02:ee:1a:c2:c6:5d:fc:dc:0e:57:18:7c:a1:b5:37:c7:18:38:
         92:d3:aa:2b:8b:60:b0:6f:f4:d5:55:56:e7:67:f9:26:2f:60:
         fe:29:ce:87:66:04:3d:75:33:1a:6a:3a:ac:ef:37:af:f2:9e:
         66:59:ab:60:69:ba:58:ae:84:a1:95:8d:a8:c7:c0:57:10:2a:
         bd:92:36:4a:93:11:f4:72:a8:c1:25:85:90:49:e7:3c:d8:66:
         9c:17:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:25:10 2025 by rpki-client