Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ix50fllmTBXH0H6Th11QAkYuvBU.roa
File:                     ix50fllmTBXH0H6Th11QAkYuvBU.roa (raw, json)
Hash identifier:          p2NUkXsFZFD0PMPwbkACoAvFJ2EQV4gGlYmOL6mduVg=
Subject key identifier:   8B:1E:74:7E:59:66:4C:15:C7:D0:7E:93:87:5D:50:02:46:2E:BC:15
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       019EDF4348F59E2EB8B7BF7338EB1A41F300
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ix50fllmTBXH0H6Th11QAkYuvBU.roa
Signing time:             Fri 19 Jun 2026 09:43:09 +0000
ROA not before:           Fri 19 Jun 2026 09:43:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202799
IP address blocks:        176.98.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:df:43:48:f5:9e:2e:b8:b7:bf:73:38:eb:1a:41:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Jun 19 09:43:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b1e747e59664c15c7d07e93875d5002462ebc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:18:a6:01:cc:55:37:ea:67:c5:8e:54:53:
                    d7:45:1d:a4:51:d9:1f:3a:a9:38:34:99:af:48:0b:
                    0a:a7:97:46:60:1f:73:b3:31:20:e8:51:08:f2:c4:
                    27:42:3a:14:d5:b4:27:a8:7c:8e:07:7c:f2:34:26:
                    ab:66:d6:a9:f7:34:cc:70:c3:b3:c2:c3:f7:bc:f6:
                    28:ea:e5:a0:04:d7:43:14:e1:6d:d3:1b:95:7d:ad:
                    c3:36:1f:c4:1a:07:b1:97:d0:18:c2:14:90:e3:e6:
                    69:40:a6:58:85:01:69:77:3f:49:dc:14:5b:4b:d7:
                    fc:1c:66:a8:5b:2c:47:4d:6d:d0:a5:26:59:5d:82:
                    64:83:7c:ae:ac:59:ca:6b:8b:2b:93:1d:26:6a:cc:
                    4a:dd:2a:8a:89:d7:17:d1:f8:a5:f3:ad:93:01:de:
                    ff:a4:ee:b8:45:a0:6a:9a:0b:c2:fa:02:9d:fb:41:
                    69:69:83:60:98:82:4b:c8:4b:f4:91:fa:73:18:b2:
                    e8:0b:d9:c7:78:7f:69:93:aa:ac:40:1e:ca:76:e6:
                    e9:da:c7:79:43:fd:3a:8d:dc:64:5c:9a:7f:41:83:
                    24:3a:a2:7a:fe:58:c8:64:2f:63:9e:5d:53:06:4d:
                    ef:45:ea:a2:9c:c3:42:e8:27:c4:1b:3d:da:07:e7:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:74:7E:59:66:4C:15:C7:D0:7E:93:87:5D:50:02:46:2E:BC:15
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ix50fllmTBXH0H6Th11QAkYuvBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.98.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:fd:84:0c:a0:81:b0:cf:71:11:0a:c4:63:a4:2c:9a:83:49:
         9a:b0:f1:27:fb:4a:4a:42:63:43:33:d9:55:60:c4:12:7c:7f:
         51:eb:b1:de:b6:84:c0:55:13:0b:c5:78:e1:63:3e:59:36:f3:
         72:6a:fe:58:0e:5f:25:ca:ff:33:a6:54:2f:c5:e1:2c:9d:7a:
         6f:a4:6d:00:b1:b7:ee:ac:26:32:3b:b9:c4:1f:99:d5:4a:25:
         5e:72:5c:b5:2b:f8:9e:a6:88:68:ac:ff:39:40:da:e0:fb:31:
         0d:51:b7:60:c0:1e:ee:2b:93:3b:be:0c:b1:2f:87:77:cc:b6:
         47:5c:3a:cc:bd:ad:da:f4:bb:78:86:e4:6c:38:cd:f1:86:eb:
         6e:11:76:39:ab:c1:51:b7:a9:4c:43:47:2f:8a:2f:5a:0f:72:
         a1:34:f0:82:eb:6f:6c:ef:b9:d6:e8:60:e6:09:8c:6f:23:1d:
         f1:97:aa:2a:a9:30:7b:8f:21:0d:a4:08:e0:96:9e:82:8f:37:
         2b:e8:4b:b9:58:bf:54:c5:af:a0:8f:af:c1:90:34:e7:38:f2:
         19:5a:d9:8c:46:39:6f:f1:da:7f:52:ad:c7:8c:17:ba:74:68:
         08:3c:a5:5f:24:84:f4:0c:3e:d7:75:86:24:25:33:dc:b3:e5:
         93:a1:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:27 2026 by rpki-client