Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/weFhJ6o0dUzqAWnzZyWVgR-4cfw.roa
File:                     weFhJ6o0dUzqAWnzZyWVgR-4cfw.roa (raw, json)
Hash identifier:          ++9M17cqnkYizKWfJDJXuz+WROEMWThTBlJS5u4HdI4=
Subject key identifier:   C1:E1:61:27:AA:34:75:4C:EA:01:69:F3:67:25:95:81:1F:B8:71:FC
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       0197D06BE96CFE20659722D3D4A0AF1FD630
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/weFhJ6o0dUzqAWnzZyWVgR-4cfw.roa
Signing time:             Thu 03 Jul 2025 13:13:42 +0000
ROA not before:           Thu 03 Jul 2025 13:13:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48728
IP address blocks:        31.11.48.0/21 maxlen: 21
                          37.186.32.0/23 maxlen: 23
                          37.186.32.0/24 maxlen: 24
                          37.186.33.0/24 maxlen: 24
                          37.186.34.0/24 maxlen: 24
                          37.186.35.0/24 maxlen: 24
                          37.186.36.0/24 maxlen: 24
                          37.186.37.0/24 maxlen: 24
                          37.186.39.0/24 maxlen: 24
                          37.186.40.0/24 maxlen: 24
                          37.186.41.0/24 maxlen: 24
                          37.186.42.0/23 maxlen: 23
                          37.186.42.0/24 maxlen: 24
                          37.186.43.0/24 maxlen: 24
                          37.186.44.0/24 maxlen: 24
                          37.186.45.0/24 maxlen: 24
                          37.186.46.0/24 maxlen: 24
                          37.186.47.0/24 maxlen: 24
                          37.186.48.0/24 maxlen: 24
                          37.186.49.0/24 maxlen: 24
                          37.186.50.0/24 maxlen: 24
                          37.186.51.0/24 maxlen: 24
                          37.186.52.0/24 maxlen: 24
                          37.186.53.0/24 maxlen: 24
                          37.186.54.0/24 maxlen: 24
                          37.186.55.0/24 maxlen: 24
                          37.186.58.0/24 maxlen: 24
                          37.186.59.0/24 maxlen: 24
                          80.76.160.0/24 maxlen: 24
                          80.76.161.0/24 maxlen: 24
                          80.76.162.0/24 maxlen: 24
                          80.76.163.0/24 maxlen: 24
                          80.76.164.0/24 maxlen: 24
                          80.76.165.0/24 maxlen: 24
                          80.76.170.0/24 maxlen: 24
                          80.76.171.0/24 maxlen: 24
                          80.76.172.0/24 maxlen: 24
                          80.76.173.0/24 maxlen: 24
                          80.76.174.0/24 maxlen: 24
                          80.76.175.0/24 maxlen: 24
                          103.14.208.0/24 maxlen: 24
                          103.17.0.0/22 maxlen: 22
                          103.17.0.0/24 maxlen: 24
                          103.17.1.0/24 maxlen: 24
                          103.17.2.0/24 maxlen: 24
                          103.17.3.0/24 maxlen: 24
                          103.23.124.0/24 maxlen: 24
                          103.23.125.0/24 maxlen: 24
                          103.199.88.0/22 maxlen: 22
                          103.199.88.0/24 maxlen: 24
                          103.199.89.0/24 maxlen: 24
                          103.199.90.0/24 maxlen: 24
                          103.199.91.0/24 maxlen: 24
                          103.225.72.0/22 maxlen: 22
                          103.225.72.0/24 maxlen: 24
                          103.225.73.0/24 maxlen: 24
                          103.225.74.0/24 maxlen: 24
                          103.225.75.0/24 maxlen: 24
                          212.70.96.0/24 maxlen: 24
                          212.70.97.0/24 maxlen: 24
                          212.70.98.0/24 maxlen: 24
                          212.70.99.0/24 maxlen: 24
                          212.70.102.0/24 maxlen: 24
                          212.70.106.0/24 maxlen: 24
                          212.70.107.0/24 maxlen: 24
                          212.70.108.0/24 maxlen: 24
                          212.70.109.0/24 maxlen: 24
                          212.70.110.0/24 maxlen: 24
                          212.70.111.0/24 maxlen: 24
                          212.70.112.0/24 maxlen: 24
                          212.70.113.0/24 maxlen: 24
                          212.70.114.0/24 maxlen: 24
                          212.70.115.0/24 maxlen: 24
                          212.70.116.0/24 maxlen: 24
                          212.70.117.0/24 maxlen: 24
                          212.70.118.0/24 maxlen: 24
                          212.70.119.0/24 maxlen: 24
                          212.70.122.0/24 maxlen: 24
                          212.70.125.0/24 maxlen: 24
                          212.70.126.0/24 maxlen: 24
                          212.70.127.0/24 maxlen: 24
                          2a04:7f80::/29 maxlen: 29
                          2a04:7f80::/48 maxlen: 48
                          2a04:7f80:0:a::/64 maxlen: 64
                          2a04:7f80:2::/47 maxlen: 47
                          2a04:7f80:2::/48 maxlen: 48
                          2a04:7f80:3::/48 maxlen: 48
                          2a04:7f80:4::/47 maxlen: 47
                          2a04:7f80:4::/48 maxlen: 48
                          2a04:7f80:5::/48 maxlen: 48
                          2a04:7f80:10::/44 maxlen: 44
                          2a04:7f80:10::/48 maxlen: 48
                          2a04:7f80:11::/48 maxlen: 48
                          2a04:7f80:12::/48 maxlen: 48
                          2a04:7f80:13::/48 maxlen: 48
                          2a04:7f80:14::/48 maxlen: 48
                          2a04:7f80:15::/48 maxlen: 48
                          2a04:7f80:16::/48 maxlen: 48
                          2a04:7f80:17::/48 maxlen: 48
                          2a04:7f80:18::/48 maxlen: 48
                          2a04:7f80:19::/48 maxlen: 48
                          2a04:7f80:1a::/48 maxlen: 48
                          2a04:7f80:1b::/48 maxlen: 48
                          2a04:7f80:1c::/48 maxlen: 48
                          2a04:7f80:1d::/48 maxlen: 48
                          2a04:7f80:1e::/48 maxlen: 48
                          2a04:7f80:1f::/48 maxlen: 48
                          2a04:7f80:20::/44 maxlen: 44
                          2a04:7f80:20::/48 maxlen: 48
                          2a04:7f80:21::/48 maxlen: 48
                          2a04:7f80:22::/48 maxlen: 48
                          2a04:7f80:23::/48 maxlen: 48
                          2a04:7f80:24::/48 maxlen: 48
                          2a04:7f80:25::/48 maxlen: 48
                          2a04:7f80:26::/48 maxlen: 48
                          2a04:7f80:27::/48 maxlen: 48
                          2a04:7f80:28::/48 maxlen: 48
                          2a04:7f80:29::/48 maxlen: 48
                          2a04:7f80:2a::/48 maxlen: 48
                          2a04:7f80:2b::/48 maxlen: 48
                          2a04:7f80:2c::/48 maxlen: 48
                          2a04:7f80:2d::/48 maxlen: 48
                          2a04:7f80:2e::/48 maxlen: 48
                          2a04:7f80:2f::/48 maxlen: 48
                          2a04:7f80:30::/44 maxlen: 44
                          2a04:7f80:30::/48 maxlen: 48
                          2a04:7f80:31::/48 maxlen: 48
                          2a04:7f80:32::/48 maxlen: 48
                          2a04:7f80:33::/48 maxlen: 48
                          2a04:7f80:34::/48 maxlen: 48
                          2a04:7f80:35::/48 maxlen: 48
                          2a04:7f80:36::/48 maxlen: 48
                          2a04:7f80:37::/48 maxlen: 48
                          2a04:7f80:38::/48 maxlen: 48
                          2a04:7f80:39::/48 maxlen: 48
                          2a04:7f80:3a::/48 maxlen: 48
                          2a04:7f80:3b::/48 maxlen: 48
                          2a04:7f80:3c::/48 maxlen: 48
                          2a04:7f80:3d::/48 maxlen: 48
                          2a04:7f80:3e::/48 maxlen: 48
                          2a04:7f80:3f::/48 maxlen: 48
                          2a04:7f80:40::/45 maxlen: 45
                          2a04:7f80:40::/48 maxlen: 48
                          2a04:7f80:41::/48 maxlen: 48
                          2a04:7f80:42::/48 maxlen: 48
                          2a04:7f80:43::/48 maxlen: 48
                          2a04:7f80:44::/48 maxlen: 48
                          2a04:7f80:45::/48 maxlen: 48
                          2a04:7f80:46::/48 maxlen: 48
                          2a04:7f80:47::/48 maxlen: 48
                          2a04:7f80:48::/45 maxlen: 45
                          2a04:7f80:48::/48 maxlen: 48
                          2a04:7f80:49::/48 maxlen: 48
                          2a04:7f80:4a::/48 maxlen: 48
                          2a04:7f80:4b::/48 maxlen: 48
                          2a04:7f80:4c::/48 maxlen: 48
                          2a04:7f80:4d::/48 maxlen: 48
                          2a04:7f80:4e::/48 maxlen: 48
                          2a04:7f80:4f::/48 maxlen: 48
                          2a04:7f80:50::/45 maxlen: 45
                          2a04:7f80:50::/48 maxlen: 48
                          2a04:7f80:51::/48 maxlen: 48
                          2a04:7f80:52::/48 maxlen: 48
                          2a04:7f80:53::/48 maxlen: 48
                          2a04:7f80:54::/48 maxlen: 48
                          2a04:7f80:55::/48 maxlen: 48
                          2a04:7f80:56::/48 maxlen: 48
                          2a04:7f80:57::/48 maxlen: 48
                          2a04:7f80:58::/45 maxlen: 45
                          2a04:7f80:58::/48 maxlen: 48
                          2a04:7f80:59::/48 maxlen: 48
                          2a04:7f80:5a::/48 maxlen: 48
                          2a04:7f80:5b::/48 maxlen: 48
                          2a04:7f80:5c::/48 maxlen: 48
                          2a04:7f80:5d::/48 maxlen: 48
                          2a04:7f80:5e::/48 maxlen: 48
                          2a04:7f80:5f::/48 maxlen: 48
                          2a04:7f80:60::/44 maxlen: 44
                          2a04:7f80:60::/48 maxlen: 48
                          2a04:7f80:61::/48 maxlen: 48
                          2a04:7f80:62::/48 maxlen: 48
                          2a04:7f80:63::/48 maxlen: 48
                          2a04:7f80:64::/48 maxlen: 48
                          2a04:7f80:65::/48 maxlen: 48
                          2a04:7f80:66::/48 maxlen: 48
                          2a04:7f80:67::/48 maxlen: 48
                          2a04:7f80:68::/48 maxlen: 48
                          2a04:7f80:69::/48 maxlen: 48
                          2a04:7f80:6a::/48 maxlen: 48
                          2a04:7f80:6b::/48 maxlen: 48
                          2a04:7f80:6c::/48 maxlen: 48
                          2a04:7f80:6d::/48 maxlen: 48
                          2a04:7f80:6e::/48 maxlen: 48
                          2a04:7f80:6f::/48 maxlen: 48
                          2a04:7f80:88::/45 maxlen: 45
                          2a04:7f80:90::/45 maxlen: 45
                          2a04:7f80:99::/48 maxlen: 48
                          2a04:7f80:1000::/40 maxlen: 40
                          2a04:7f80:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d0:6b:e9:6c:fe:20:65:97:22:d3:d4:a0:af:1f:d6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Jul  3 13:13:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c1e16127aa34754cea0169f3672595811fb871fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:b2:c0:60:de:a6:86:96:61:9d:d2:92:08:
                    46:90:11:82:17:af:0a:07:6a:30:03:7a:25:a4:00:
                    14:92:82:71:8b:04:d7:be:95:b9:48:de:59:c9:84:
                    79:e8:76:e7:bd:d2:01:f6:b2:c1:05:76:6c:a5:65:
                    eb:dc:2c:fc:14:df:16:96:e8:30:a9:76:51:2e:aa:
                    f7:ce:09:cd:85:c6:71:0e:b3:e0:ec:d1:a7:98:1d:
                    dd:9c:f1:e5:97:94:94:1c:ba:f1:a9:f4:9a:b1:07:
                    30:f3:c1:64:38:57:16:16:62:13:d5:10:45:bc:0e:
                    51:84:7e:e1:cc:7b:d3:dd:ae:c0:23:78:ee:be:48:
                    fb:4f:f5:80:21:34:e5:1a:77:70:b1:91:5a:fc:7b:
                    7d:39:73:55:d3:e4:fa:6d:13:a7:79:a1:15:21:78:
                    69:f6:e7:da:5d:67:64:e9:c8:38:27:bf:8b:6a:18:
                    ce:bd:7d:8c:66:fb:cb:f5:1f:22:c0:c3:4d:94:a0:
                    ee:01:ab:5d:3a:78:c2:cb:85:e1:54:51:59:35:ae:
                    5e:95:6a:a7:ac:a5:4a:f3:24:7d:31:3f:a6:16:08:
                    20:96:b7:21:6f:9a:12:b7:da:2d:34:02:e6:71:f6:
                    38:46:f3:32:a9:fa:a1:0f:55:dc:b0:7b:8e:ff:bf:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E1:61:27:AA:34:75:4C:EA:01:69:F3:67:25:95:81:1F:B8:71:FC
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/weFhJ6o0dUzqAWnzZyWVgR-4cfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.48.0/21
                  37.186.32.0-37.186.37.255
                  37.186.39.0-37.186.55.255
                  37.186.58.0/23
                  80.76.160.0-80.76.165.255
                  80.76.170.0-80.76.175.255
                  103.14.208.0/24
                  103.17.0.0/22
                  103.23.124.0/23
                  103.199.88.0/22
                  103.225.72.0/22
                  212.70.96.0/22
                  212.70.102.0/24
                  212.70.106.0-212.70.119.255
                  212.70.122.0/24
                  212.70.125.0-212.70.127.255
                IPv6:
                  2a04:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:73:d9:2d:55:f3:fb:17:e0:29:56:7d:b1:61:b1:87:1b:
         6e:68:e4:89:88:70:cc:80:df:cb:15:c8:b9:04:62:bc:bf:ba:
         27:15:96:35:ce:19:7b:93:dd:c9:17:7c:fa:4f:00:a3:14:f1:
         94:06:2e:22:9b:5a:f9:9c:87:22:31:57:d7:1f:4a:0b:bd:bc:
         40:15:0b:ff:78:fe:67:78:da:8a:d8:f4:e4:90:37:ac:e0:81:
         6d:1b:c7:75:f7:7b:a7:35:b3:49:ec:2f:dc:4d:89:04:e2:67:
         65:2d:aa:ac:43:75:ec:8b:bd:a6:e6:02:b9:1e:84:97:aa:3e:
         d5:61:94:15:8f:ac:05:d9:ba:11:f2:70:7a:1c:c4:30:20:72:
         0a:42:87:5f:0d:85:75:de:23:12:03:f4:f5:ad:64:d8:3d:65:
         98:7c:06:54:7b:e4:eb:e1:26:e9:0e:25:1a:54:36:8d:f7:98:
         50:45:99:9b:f6:1c:6a:a0:d8:c6:25:30:cf:38:67:79:81:4b:
         7a:25:85:4f:b9:78:8a:8a:a1:23:83:26:af:b3:a0:ab:f5:b0:
         06:4b:2a:ee:84:7f:ed:c9:ba:63:10:f6:ca:88:85:b8:10:c8:
         d6:23:e6:d8:30:6a:b9:c7:71:c8:0a:76:79:98:9b:c8:64:92:
         8a:11:78:7a
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAZfQa+ls/iBllyLT1KCvH9YwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjUwNzAzMTMxMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWUxNjEyN2FhMzQ3NTRjZWEwMTY5ZjM2NzI1OTU4MTFmYjg3MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu2ywGDepoaWYZ3SkghGkBGCF68K
B2owA3olpAAUkoJxiwTXvpW5SN5ZyYR56HbnvdIB9rLBBXZspWXr3Cz8FN8Wlugw
qXZRLqr3zgnNhcZxDrPg7NGnmB3dnPHll5SUHLrxqfSasQcw88FkOFcWFmIT1RBF
vA5RhH7hzHvT3a7AI3juvkj7T/WAITTlGndwsZFa/Ht9OXNV0+T6bROneaEVIXhp
9ufaXWdk6cg4J7+LahjOvX2MZvvL9R8iwMNNlKDuAatdOnjCy4XhVFFZNa5elWqn
rKVK8yR9MT+mFggglrchb5oSt9otNALmcfY4RvMyqfqhD1XcsHuO/7+l8QIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFMHhYSeqNHVM6gFp82cllYEfuHH8MB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvd2VGaEo2bzBkVXpxQVduelp5V1ZnUi00Y2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBlwQCAAEwgZADBAMf
CzAwDAMEBSW6IAMEASW6JDAMAwQAJbonAwQDJbowAwQBJbo6MAwDBAVQTKADBAFQ
TKQwDAMEAVBMqgMEBFBMoAMEAGcO0AMEAmcRAAMEAWcXfAMEAmfHWAMEAmfhSAME
AtRGYAMEANRGZjAMAwQB1EZqAwQD1EZwAwQA1EZ6MAwDBADURn0DBAfURgAwDQQC
AAIwBwMFAyoEf4AwDQYJKoZIhvcNAQELBQADggEBAJ/Ac9ktVfP7F+ApVn2xYbGH
G25o5ImIcMyA38sVyLkEYry/uicVljXOGXuT3ckXfPpPAKMU8ZQGLiKbWvmchyIx
V9cfSgu9vEAVC/94/md42orY9OSQN6zggW0bx3X3e6c1s0nsL9xNiQTiZ2UtqqxD
deyLvabmArkehJeqPtVhlBWPrAXZuhHycHocxDAgcgpCh18NhXXeIxID9PWtZNg9
ZZh8BlR75OvhJukOJRpUNo33mFBFmZv2HGqg2MYlMM84Z3mBS3olhU+5eIqKoSOD
Jq+zoKv1sAZLKu6Ef+3JumMQ9sqIhbgQyNYj5tgwarnHccgKdnmYm8hkkooReHo=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:34 2025 by rpki-client