Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/Dv1loStZYAsjb_Af0DKMu_bevS8.roa
File:                     Dv1loStZYAsjb_Af0DKMu_bevS8.roa (raw, json)
Hash identifier:          Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=
Subject key identifier:   0E:FD:65:A1:2B:59:60:0B:23:6F:F0:1F:D0:32:8C:BB:F6:DE:BD:2F
Certificate issuer:       /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial:       019F236894387DEE2103279A4EE6F7F4E45A
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/Dv1loStZYAsjb_Af0DKMu_bevS8.roa
Signing time:             Thu 02 Jul 2026 15:18:04 +0000
ROA not before:           Thu 02 Jul 2026 15:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2852
IP address blocks:        194.50.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:94:38:7d:ee:21:03:27:9a:4e:e6:f7:f4:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
        Validity
            Not Before: Jul  2 15:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0efd65a12b59600b236ff01fd0328cbbf6debd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:64:b0:62:8e:ef:bc:47:91:8f:4a:86:d4:
                    49:fb:b4:ab:ae:eb:46:2c:f5:56:75:83:40:3b:51:
                    b4:06:2e:e8:31:b0:c5:24:82:bb:ff:8c:2a:b0:b6:
                    6c:4b:ad:c1:6a:8f:de:5d:a7:e3:f0:01:e2:db:3f:
                    96:b0:14:53:d9:cb:0a:e7:2a:b6:ea:f0:67:05:97:
                    55:2f:ec:f5:a2:f7:50:7d:7c:e9:19:ca:59:ae:5b:
                    b3:af:76:0a:92:86:9c:66:84:c1:60:b3:4d:2e:e9:
                    24:ea:35:73:53:1f:25:e6:3c:df:02:b7:94:29:f8:
                    67:e2:0c:35:fa:ae:7a:6c:ac:39:60:45:4d:3c:4d:
                    6e:e1:7c:47:50:e9:7b:b0:c4:04:9e:58:fb:2e:b8:
                    19:d0:28:62:0c:79:9f:b8:22:63:72:3a:48:21:d3:
                    d2:d4:8f:0d:23:35:ae:8f:24:ab:a3:85:ed:3f:e8:
                    31:14:f0:11:87:c6:5b:62:e7:28:05:fe:51:45:ce:
                    c8:39:b9:80:e4:f2:5c:16:51:34:1b:30:52:57:0a:
                    74:24:a9:23:50:88:8b:50:b7:a6:09:58:e9:13:86:
                    17:e4:ab:41:75:8c:26:5e:94:72:dd:a9:42:0c:e3:
                    eb:d0:38:5a:26:59:62:78:2c:cf:5d:aa:f5:f2:88:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:65:A1:2B:59:60:0B:23:6F:F0:1F:D0:32:8C:BB:F6:DE:BD:2F
            X509v3 Authority Key Identifier:
                keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/Dv1loStZYAsjb_Af0DKMu_bevS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:d1:77:06:99:f3:3e:f2:6f:9c:71:fd:9e:5e:5d:08:c6:
         44:67:0a:91:ee:0d:74:8d:aa:2d:ed:30:ff:64:a8:a2:36:5b:
         9e:20:dd:64:50:05:77:62:7c:c6:b3:a1:50:66:3c:08:20:3c:
         c6:61:e7:40:e0:5c:45:56:85:83:fd:36:58:de:f1:fe:6b:ea:
         5e:27:d8:84:a4:69:17:06:78:92:7a:0d:a4:b6:25:3c:71:bd:
         06:1d:14:f2:05:2d:93:20:11:c9:6a:c4:7a:6d:b8:11:83:1a:
         da:85:17:31:0c:e2:13:54:0d:86:7b:eb:a6:61:3b:71:23:63:
         dd:fe:71:ac:c0:dc:fc:ad:31:2a:ac:5b:65:6f:7a:6d:79:72:
         f7:32:5f:85:ac:6e:8d:c4:d7:68:34:2b:e5:56:4e:35:5b:f0:
         55:88:90:e7:b1:b4:05:6d:ec:36:bd:c9:b6:af:85:03:31:ad:
         30:ac:ad:44:a3:48:94:e8:c8:76:9f:26:72:ed:c0:c2:60:e7:
         82:d1:46:ec:9e:57:0c:b8:e0:96:52:2a:8d:d3:88:0f:c7:86:
         ad:f2:1c:26:17:f4:a7:f6:60:7b:4e:7c:ce:8b:35:f5:9a:ff:
         49:b2:3d:67:f2:38:4c:a4:8b:b7:04:72:f8:b4:c8:94:a2:0c:
         ac:e0:5a:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJQ4fe4hAyeaTub39ORaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDJjN2NiYzIzNTI3MmI3YWNjZDdiM2YwYjBlNDdjNjFj
NzVlMmIwHhcNMjYwNzAyMTUxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWZkNjVhMTJiNTk2MDBiMjM2ZmYwMWZkMDMyOGNiYmY2ZGViZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXxksGKO77xHkY9KhtRJ+7SrrutG
LPVWdYNAO1G0Bi7oMbDFJIK7/4wqsLZsS63Bao/eXafj8AHi2z+WsBRT2csK5yq2
6vBnBZdVL+z1ovdQfXzpGcpZrluzr3YKkoacZoTBYLNNLukk6jVzUx8l5jzfAreU
Kfhn4gw1+q56bKw5YEVNPE1u4XxHUOl7sMQEnlj7LrgZ0ChiDHmfuCJjcjpIIdPS
1I8NIzWujySro4XtP+gxFPARh8ZbYucoBf5RRc7IObmA5PJcFlE0GzBSVwp0JKkj
UIiLULemCVjpE4YX5KtBdYwmXpRy3alCDOPr0DhaJllieCzPXar18oil5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA79ZaErWWALI2/wH9AyjLv23r0vMB8GA1UdIwQY
MBaAFFcCx8vCNScreszXs/Cw5Hxhx14rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndMSHk4STFKeXQ2ek5lejhMRGtmR0hIWGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvRHYxbG9TdFpZQXNqYl9BZjBES011X2JldlM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvVndMSHk4STFKeXQ2ek5lejhMRGtmR0hIWGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjIaMA0G
CSqGSIb3DQEBCwUAA4IBAQAtAtF3BpnzPvJvnHH9nl5dCMZEZwqR7g10jaot7TD/
ZKiiNlueIN1kUAV3YnzGs6FQZjwIIDzGYedA4FxFVoWD/TZY3vH+a+peJ9iEpGkX
BniSeg2ktiU8cb0GHRTyBS2TIBHJasR6bbgRgxrahRcxDOITVA2Ge+umYTtxI2Pd
/nGswNz8rTEqrFtlb3pteXL3Ml+FrG6NxNdoNCvlVk41W/BViJDnsbQFbew2vcm2
r4UDMa0wrK1Eo0iU6Mh2nyZy7cDCYOeC0UbsnlcMuOCWUiqN04gPx4at8hwmF/Sn
9mB7TnzOizX1mv9Jsj1n8jhMpIu3BHL4tMiUogys4Frj
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:15 2026 by rpki-client