Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/T_aE1VBzRFBW86cu7jRpCvqMP_0.roa
File:                     T_aE1VBzRFBW86cu7jRpCvqMP_0.roa (raw, json)
Hash identifier:          Br23NBG7MwrWwFTa8s2oq/DVFkGOhwRXNYpcFdJ00mE=
Subject key identifier:   4F:F6:84:D5:50:73:44:50:56:F3:A7:2E:EE:34:69:0A:FA:8C:3F:FD
Certificate issuer:       /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial:       019833496885327D4267E01A9F8E8C7CE027
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/T_aE1VBzRFBW86cu7jRpCvqMP_0.roa
Signing time:             Tue 22 Jul 2025 17:58:25 +0000
ROA not before:           Tue 22 Jul 2025 17:58:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     196934
IP address blocks:        195.191.178.0/24 maxlen: 24
                          195.191.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:49:68:85:32:7d:42:67:e0:1a:9f:8e:8c:7c:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
        Validity
            Not Before: Jul 22 17:58:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4ff684d55073445056f3a72eee34690afa8c3ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:b5:da:dc:69:78:45:10:4e:67:d9:12:00:
                    74:51:41:f0:a6:c1:31:c1:27:cd:dc:45:e6:4d:a5:
                    06:4f:a4:73:be:c2:b6:54:8b:c8:9c:8b:c3:85:00:
                    01:a2:8d:ec:bb:9b:6f:bb:c3:5e:1c:9e:91:4a:07:
                    dc:a0:cc:1c:06:f6:da:25:14:c5:ff:f8:39:4d:76:
                    1e:23:72:a8:0d:5c:c0:b5:dc:bf:06:cf:83:ff:de:
                    93:e3:47:c1:c9:bb:29:c2:bf:6b:f7:07:7d:1f:29:
                    e1:b9:14:98:9f:c0:fe:b2:e4:11:2b:d5:fd:3d:6e:
                    c7:6f:f8:29:ed:b5:60:31:09:d1:0c:28:3c:a7:86:
                    ac:4e:83:e9:5d:b4:8f:7a:ac:73:0f:04:5a:9d:78:
                    8f:d3:0e:96:30:f5:f2:27:7a:16:6e:df:57:2d:00:
                    a6:98:16:ad:ce:1c:c0:81:1f:09:96:fb:2d:90:27:
                    10:1d:3a:aa:74:3e:f1:a2:ba:77:b8:7e:34:fc:7f:
                    18:89:41:7e:22:c6:a4:0c:88:79:cc:75:42:a8:b5:
                    e2:43:c2:ef:46:a8:c5:ea:30:5e:c6:df:f9:28:f3:
                    4d:53:31:6d:42:96:ec:9f:7a:ce:bf:b6:6a:42:73:
                    5d:30:99:db:36:29:40:4d:91:bd:9c:ac:aa:79:30:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F6:84:D5:50:73:44:50:56:F3:A7:2E:EE:34:69:0A:FA:8C:3F:FD
            X509v3 Authority Key Identifier:
                keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/T_aE1VBzRFBW86cu7jRpCvqMP_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.191.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:17:20:17:b2:6e:a1:19:35:77:c8:69:85:04:15:f9:55:
         28:a5:7a:55:62:83:b1:71:11:a6:51:77:87:07:9e:1d:2b:fd:
         eb:34:58:2b:fd:71:15:a1:df:87:59:78:e6:c4:ea:5e:5a:63:
         5a:75:c7:22:9d:61:8f:20:1a:0a:2a:11:25:b9:6d:d8:1b:96:
         16:a7:ad:80:a4:82:5a:8b:ed:df:9e:c7:d2:61:4a:ae:bd:cc:
         b2:86:80:26:aa:7f:cd:d3:48:22:9d:aa:18:4f:d8:57:2b:a6:
         14:bd:0e:05:aa:82:b7:a5:9d:0b:3a:bb:16:c4:d2:a0:f0:41:
         fb:fa:59:c6:76:1f:da:60:54:05:ea:e3:ad:38:f0:da:cc:22:
         67:da:ae:c5:9a:ee:2d:ab:44:4c:c8:0a:91:70:01:4f:ba:7f:
         9e:03:bf:b6:62:3b:06:a4:63:02:01:76:65:ac:ee:cd:61:10:
         26:72:46:34:5b:ae:c2:ee:5d:8e:0a:d5:5a:13:5c:f3:e0:17:
         17:51:14:63:f4:86:02:6c:c2:ee:06:32:3f:2d:c4:71:76:84:
         c3:ff:ea:73:7d:ff:eb:39:6b:92:62:5f:1d:97:0c:33:ba:f6:
         12:a2:c4:1a:16:51:26:ed:f7:02:3e:f0:59:31:fc:ef:f6:30:
         34:d3:28:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgzSWiFMn1CZ+Aan46MfOAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTMxYTg3NGU2ODhmMjdjOTVhY2FkOGRiZDMxZGY2OThm
MjExN2QwHhcNMjUwNzIyMTc1ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY2ODRkNTUwNzM0NDUwNTZmM2E3MmVlZTM0NjkwYWZhOGMzZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4O12txpeEUQTmfZEgB0UUHwpsEx
wSfN3EXmTaUGT6RzvsK2VIvInIvDhQABoo3su5tvu8NeHJ6RSgfcoMwcBvbaJRTF
//g5TXYeI3KoDVzAtdy/Bs+D/96T40fBybspwr9r9wd9HynhuRSYn8D+suQRK9X9
PW7Hb/gp7bVgMQnRDCg8p4asToPpXbSPeqxzDwRanXiP0w6WMPXyJ3oWbt9XLQCm
mBatzhzAgR8JlvstkCcQHTqqdD7xorp3uH40/H8YiUF+IsakDIh5zHVCqLXiQ8Lv
RqjF6jBext/5KPNNUzFtQpbsn3rOv7ZqQnNdMJnbNilATZG9nKyqeTD+AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/2hNVQc0RQVvOnLu40aQr6jD/9MB8GA1UdIwQY
MBaAFFuTGodOaI8nyVrK2NvTHfaY8hF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lZjBlZTQtYTM5OC00ZWVjLTk1Mjkt
OWFlNmE2MWEzNjFkLzEvVF9hRTFWQnpSRkJXODZjdTdqUnBDdnFNUF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lZjBlZTQtYTM5OC00ZWVjLTk1MjktOWFlNmE2MWEzNjFk
LzEvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7+yMA0G
CSqGSIb3DQEBCwUAA4IBAQBMuhcgF7JuoRk1d8hphQQV+VUopXpVYoOxcRGmUXeH
B54dK/3rNFgr/XEVod+HWXjmxOpeWmNadccinWGPIBoKKhEluW3YG5YWp62ApIJa
i+3fnsfSYUquvcyyhoAmqn/N00ginaoYT9hXK6YUvQ4FqoK3pZ0LOrsWxNKg8EH7
+lnGdh/aYFQF6uOtOPDazCJn2q7Fmu4tq0RMyAqRcAFPun+eA7+2YjsGpGMCAXZl
rO7NYRAmckY0W67C7l2OCtVaE1zz4BcXURRj9IYCbMLuBjI/LcRxdoTD/+pzff/r
OWuSYl8dlwwzuvYSosQaFlEm7fcCPvBZMfzv9jA00yhj
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:42:53 2025 by rpki-client