Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TpY948mVjhDweYBR4b3utEnIoIc.roa
File:                     TpY948mVjhDweYBR4b3utEnIoIc.roa (raw, json)
Hash identifier:          bmmwgf9MqoqcArA5Bcj9rwWyUu1B4tGtfz9GVT/Ns8Y=
Subject key identifier:   4E:96:3D:E3:C9:95:8E:10:F0:79:80:51:E1:BD:EE:B4:49:C8:A0:87
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       0197F3A1AEB1D4A2F88CDF4F11B7CF3BB4B0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TpY948mVjhDweYBR4b3utEnIoIc.roa
Signing time:             Thu 10 Jul 2025 09:19:08 +0000
ROA not before:           Thu 10 Jul 2025 09:19:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20820
IP address blocks:        80.96.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:f3:a1:ae:b1:d4:a2:f8:8c:df:4f:11:b7:cf:3b:b4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jul 10 09:19:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4e963de3c9958e10f0798051e1bdeeb449c8a087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:1f:29:7f:18:d7:3c:61:de:ce:7a:5b:0d:
                    3c:86:25:9d:e9:eb:6c:26:f4:08:33:f1:ca:58:ea:
                    d3:32:6a:b2:c1:9e:e0:40:be:1c:6c:90:ac:74:47:
                    0c:68:6b:36:66:2d:5f:dc:36:ab:4d:94:85:cd:1b:
                    55:87:13:3c:2f:4f:c9:8a:ff:a8:6c:45:4b:6a:bd:
                    fa:2e:32:c6:fb:9b:1b:0e:e2:bf:5e:ea:2a:14:52:
                    09:3c:4f:d0:ac:4d:40:7a:46:be:99:f5:5c:a2:e0:
                    0f:2f:b8:07:3a:08:e4:43:72:83:26:40:3a:03:3c:
                    a0:ae:a6:dc:fc:4f:f7:c9:79:72:7e:1e:25:59:08:
                    d6:b5:34:f7:b1:52:dd:f0:24:e1:74:f3:81:d2:82:
                    3e:d2:28:b0:02:f1:30:b6:24:9f:95:b2:1f:f6:79:
                    1d:2d:eb:c3:8a:7a:23:f6:5e:fd:56:f3:9f:0e:34:
                    27:e7:2c:89:f4:e1:78:ab:77:63:00:0f:a8:3e:ab:
                    a8:13:dd:bb:30:91:42:6a:b5:47:74:8f:d8:f7:28:
                    51:10:5a:e7:e6:ac:aa:f7:a3:d3:e3:13:c8:07:09:
                    05:4e:56:40:99:0a:65:45:fb:a6:34:67:5f:ed:f4:
                    9c:0a:69:39:2f:c3:88:5c:ea:9d:92:e3:f6:4c:83:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:3D:E3:C9:95:8E:10:F0:79:80:51:E1:BD:EE:B4:49:C8:A0:87
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TpY948mVjhDweYBR4b3utEnIoIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:0e:ca:f6:e8:1d:66:90:3b:aa:96:61:d1:42:07:13:52:
         8e:53:ab:88:06:a9:86:cd:b1:7a:d3:71:2a:e3:1d:66:d5:b0:
         e3:fc:c7:fb:75:bb:5c:fd:d7:1b:e6:93:b0:fd:24:65:fc:64:
         b2:a6:69:a7:dd:61:1b:92:94:54:8f:dd:ea:07:6a:93:16:f5:
         df:8e:38:20:a3:96:3b:a8:21:f0:ba:dd:54:eb:45:eb:1f:79:
         c5:c3:6e:28:a9:de:a7:34:6b:c7:40:fa:80:05:91:80:cf:5f:
         bd:f2:d3:91:de:82:d7:bc:8b:37:e5:d3:7d:af:02:e4:89:90:
         92:ca:90:e4:06:2e:28:16:c8:54:4a:2e:03:44:c5:49:b5:32:
         a3:b9:d1:cc:7e:4e:6a:eb:d9:71:10:bc:e1:c5:a4:24:cd:ab:
         c5:59:40:10:9b:5d:8b:9c:19:c0:d0:77:17:9d:82:bb:e8:fc:
         41:0d:9d:d9:e3:2e:d3:08:78:e1:47:35:5e:81:07:dd:67:d8:
         22:51:19:be:c5:f3:ad:63:6c:83:3c:b8:16:75:37:f6:8e:f7:
         51:dc:d2:53:7d:55:03:6d:cd:a7:17:23:69:d5:68:a8:df:3e:
         61:d4:69:6d:ed:ba:27:1a:1f:ca:70:fd:a7:19:83:a8:ca:59:
         28:2e:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:24 2025 by rpki-client