Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/F6dtZCln9jtwgD3UNiwUw0kumRA.roa
File:                     F6dtZCln9jtwgD3UNiwUw0kumRA.roa (raw, json)
Hash identifier:          uD2JK6zc95cLRElnqyfz7Z+XlrFdmIXOZmETVNCU+Bc=
Subject key identifier:   17:A7:6D:64:29:67:F6:3B:70:80:3D:D4:36:2C:14:C3:49:2E:99:10
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       0199810F3B1843B42005AACB9345B389A75F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/F6dtZCln9jtwgD3UNiwUw0kumRA.roa
Signing time:             Thu 25 Sep 2025 13:28:02 +0000
ROA not before:           Thu 25 Sep 2025 13:28:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59651
IP address blocks:        193.233.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:81:0f:3b:18:43:b4:20:05:aa:cb:93:45:b3:89:a7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Sep 25 13:28:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=17a76d642967f63b70803dd4362c14c3492e9910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:f1:50:b7:14:35:af:4f:95:f5:c6:1b:6b:
                    f6:c7:27:29:ec:d7:a3:82:25:27:09:c7:43:8a:ef:
                    1f:b0:62:f5:ba:d4:79:ba:42:09:b5:5a:b8:b6:6e:
                    cb:41:00:60:26:49:9c:e5:da:6c:52:2f:5f:fa:b2:
                    01:d7:e0:b1:b4:b3:7a:da:81:f2:5a:a0:84:8a:2d:
                    6d:af:11:e3:4c:b1:4f:ce:6b:b9:a8:13:0c:07:e3:
                    6b:4c:ee:36:77:93:28:ed:d6:9a:81:be:e9:b5:2c:
                    35:bf:75:1e:61:ea:ac:42:58:7f:82:ee:ca:2a:78:
                    9a:70:ee:7f:af:bd:38:db:fe:3d:7e:de:57:7a:32:
                    c6:cf:e4:8a:7f:2b:f0:be:82:70:f6:fe:b5:2c:a3:
                    72:a0:1e:2f:42:13:72:b6:2d:44:39:20:6e:73:69:
                    5e:a7:2a:4c:e9:2e:5c:56:df:c6:05:b2:9a:43:14:
                    12:2b:3b:fa:80:c2:9d:54:0e:32:71:9f:22:56:5e:
                    14:94:2c:f2:d9:3b:9f:65:ba:96:f3:f8:f4:8d:10:
                    e4:b5:84:fe:ae:72:8a:fa:0a:b6:72:66:03:e8:ee:
                    b0:87:a3:f8:0e:8e:51:bc:69:73:35:28:17:46:8c:
                    27:d7:7e:2c:01:02:00:cb:42:23:6f:51:b8:09:4c:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A7:6D:64:29:67:F6:3B:70:80:3D:D4:36:2C:14:C3:49:2E:99:10
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/F6dtZCln9jtwgD3UNiwUw0kumRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ca:87:b8:7c:10:18:bc:e9:f1:6d:1e:2c:71:e7:4c:6d:d7:
         1d:52:77:5e:59:b1:b3:1d:ac:5d:51:34:bc:dc:3a:50:cd:d0:
         46:ba:fe:d4:a1:59:3e:50:dd:68:85:4a:8e:12:7b:47:47:3d:
         30:98:40:30:f8:72:13:10:14:28:59:91:a8:58:3a:4a:bd:ac:
         10:28:41:08:6a:a6:94:38:ef:14:ba:44:30:94:19:64:67:ab:
         c0:41:fe:a8:e3:9e:80:28:2b:87:f6:a0:14:3d:c1:ab:69:ea:
         b3:09:60:63:ed:e8:7b:d4:1b:47:a8:06:8b:4b:28:7b:b0:46:
         97:e2:03:89:6e:58:a2:b3:34:83:e1:c9:9b:bb:bf:85:e0:b8:
         df:8a:42:ec:a1:4a:a3:d6:c2:79:b2:15:f8:8b:fa:73:ae:cb:
         21:af:e0:e3:37:ba:6d:0c:d4:ac:a4:49:e5:fc:8e:36:44:38:
         0b:a9:8e:88:06:66:22:dd:3c:b4:4c:34:70:f8:7d:ac:d2:4d:
         ed:59:b2:48:f3:bc:e3:26:b4:61:5c:ce:b8:86:92:f2:44:12:
         14:09:b8:bd:90:aa:fa:cd:24:7c:84:aa:a9:85:a9:6f:c7:e3:
         18:1d:87:c1:37:3d:26:eb:fa:d2:f5:1f:b8:b6:f1:20:46:6b:
         7c:d5:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:33:13 2025 by rpki-client