Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/agy8dh7oDcXyau0N2KAm1cVd3JU.roa
File:                     agy8dh7oDcXyau0N2KAm1cVd3JU.roa (raw, json)
Hash identifier:          ExhTvpiuAXqgbI1NGXcF7MEEy8MEvXvPS618kr0Fdk8=
Subject key identifier:   6A:0C:BC:76:1E:E8:0D:C5:F2:6A:ED:0D:D8:A0:26:D5:C5:5D:DC:95
Certificate issuer:       /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial:       019835FBB71BC91FB562F8DE03269D06297B
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/agy8dh7oDcXyau0N2KAm1cVd3JU.roa
Signing time:             Wed 23 Jul 2025 06:32:25 +0000
ROA not before:           Wed 23 Jul 2025 06:32:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56754
IP address blocks:        185.246.92.0/24 maxlen: 24
                          185.246.93.0/24 maxlen: 24
                          185.246.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 21:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:fb:b7:1b:c9:1f:b5:62:f8:de:03:26:9d:06:29:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
        Validity
            Not Before: Jul 23 06:32:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a0cbc761ee80dc5f26aed0dd8a026d5c55ddc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:8d:15:7e:18:2a:1b:a3:21:c6:40:be:42:
                    40:20:03:52:2b:41:00:7f:68:30:ac:17:3c:06:9a:
                    49:17:76:f5:5c:ca:a4:39:f1:cb:35:57:bf:f7:b3:
                    b2:53:54:41:62:91:60:e2:40:8a:a1:2e:71:01:62:
                    62:19:17:2f:7a:c7:b2:d4:c9:de:d6:26:15:93:4e:
                    1c:2d:17:d2:3e:33:56:62:32:91:a6:8f:7d:01:54:
                    31:0e:4f:67:55:6d:f0:9f:d8:32:20:55:08:1d:e8:
                    24:98:67:fd:62:07:59:84:c3:c9:c7:21:8e:3a:d7:
                    e5:6a:bc:3b:85:9d:0f:01:eb:e4:1b:97:9e:a9:3e:
                    07:cf:94:96:b8:f2:1b:30:ac:8d:41:8c:79:99:00:
                    3d:af:0f:68:10:66:5e:2f:c6:50:14:08:e1:d6:4c:
                    29:a5:97:54:c0:61:04:39:db:c7:e9:0d:91:a3:d1:
                    88:af:4e:5c:f0:e9:c4:5f:bf:b1:f3:5e:2e:32:83:
                    63:a0:98:9c:8e:c4:4e:f8:30:63:a3:39:da:a3:a1:
                    25:96:ee:88:bf:dc:c0:31:d5:20:09:be:e7:36:87:
                    bc:10:a8:bf:05:3a:ad:65:2d:bf:2f:9e:b8:13:b1:
                    17:f6:a1:40:58:5f:62:a2:72:3e:62:1f:d6:50:4c:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:BC:76:1E:E8:0D:C5:F2:6A:ED:0D:D8:A0:26:D5:C5:5D:DC:95
            X509v3 Authority Key Identifier:
                keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/agy8dh7oDcXyau0N2KAm1cVd3JU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.92.0-185.246.94.255

    Signature Algorithm: sha256WithRSAEncryption
         09:81:70:81:e6:1d:41:df:b5:00:ff:e0:a3:7b:30:c8:96:79:
         22:92:b4:91:b8:ea:f5:64:19:9c:e7:f5:c6:d4:aa:d1:71:03:
         3f:a9:ce:c5:a3:0a:43:da:96:8f:82:c7:91:86:ee:a7:27:76:
         12:fb:e2:93:99:0b:09:c9:89:89:d7:78:6a:e4:aa:76:93:b3:
         60:61:4a:dd:92:d0:82:81:3b:26:64:6b:f9:91:6e:50:6d:6a:
         ba:a1:4f:65:0c:a8:31:f7:7f:a7:8b:99:ca:27:dd:09:2d:ad:
         fe:68:e1:a4:b7:3f:cb:e0:26:fe:6b:46:c6:9b:50:c1:44:84:
         4c:23:6a:91:f9:27:1b:23:2a:35:22:81:15:20:6b:5f:50:66:
         50:7b:40:a8:27:06:cc:c4:76:75:8d:43:93:92:f3:23:6b:69:
         84:ba:f6:71:b8:29:54:62:3c:09:c6:25:f7:1f:14:20:ce:c3:
         67:30:37:ef:89:a6:4f:b1:b8:24:22:85:5d:c2:57:db:33:23:
         5c:9b:54:b2:49:0e:95:d8:60:28:72:a8:c8:ba:3d:d1:77:49:
         42:56:28:5e:cb:12:0f:1f:41:d0:55:d9:01:63:da:49:42:b9:
         ba:ed:0e:1e:36:4d:d8:c0:ab:04:5c:0c:90:d7:c8:21:ad:46:
         97:f6:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:12:56 2025 by rpki-client