Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/PWPcidSaQ_vJd_1GO_4YsiiMemU.roa
File:                     PWPcidSaQ_vJd_1GO_4YsiiMemU.roa (raw, json)
Hash identifier:          WJQnuJgsOZgxmIpIk6Yg1ApUP7uwqsYV99jwQ6GpscU=
Subject key identifier:   3D:63:DC:89:D4:9A:43:FB:C9:77:FD:46:3B:FE:18:B2:28:8C:7A:65
Certificate issuer:       /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial:       01A05C9698098D2C8A7E289D6E17DC3E00DA
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/PWPcidSaQ_vJd_1GO_4YsiiMemU.roa
Signing time:             Tue 01 Sep 2026 10:49:28 +0000
ROA not before:           Tue 01 Sep 2026 10:49:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     399359
IP address blocks:        185.56.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5c:96:98:09:8d:2c:8a:7e:28:9d:6e:17:dc:3e:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
        Validity
            Not Before: Sep  1 10:49:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d63dc89d49a43fbc977fd463bfe18b2288c7a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:f3:f4:f9:1c:6f:31:c7:04:f6:60:8e:29:23:
                    b1:2e:da:88:42:48:4c:a0:a2:8a:09:69:0d:90:b2:
                    08:af:fe:91:5b:bc:0b:a1:dc:d8:16:29:86:35:35:
                    5b:79:3c:ce:a0:d4:39:c0:29:1e:dc:55:bd:f9:ec:
                    b3:06:96:83:76:46:b2:2b:1e:4f:da:b0:09:af:1f:
                    7e:9f:26:14:db:c1:bc:dc:ec:ee:86:ca:8d:31:63:
                    39:66:7f:ae:8b:fe:69:9f:cc:c9:db:9d:93:c0:a9:
                    51:e1:1e:8a:c5:41:39:e0:18:1d:aa:57:42:52:8c:
                    ea:91:6a:dd:fd:ff:c1:18:4c:39:e2:4d:19:e2:da:
                    fe:0e:e8:b2:22:d9:f0:d8:a5:e1:1d:d9:19:c8:6c:
                    8f:76:5e:f1:93:46:40:27:8c:d2:a3:48:73:b7:d3:
                    10:d3:32:25:ce:3d:de:00:34:10:1e:d5:03:42:5e:
                    ab:48:4b:92:7f:8e:7d:e9:93:fe:27:72:9a:d4:b5:
                    d6:d5:0b:ad:be:46:1d:64:95:fe:6a:90:7b:e9:01:
                    a4:c2:8a:22:a2:53:43:6a:f3:be:bc:95:60:ca:29:
                    49:d5:72:c5:e4:f1:1c:10:f8:a4:16:b4:ca:e0:df:
                    8a:0d:a1:48:ca:8b:a8:b9:63:d4:4e:f1:75:56:88:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:DC:89:D4:9A:43:FB:C9:77:FD:46:3B:FE:18:B2:28:8C:7A:65
            X509v3 Authority Key Identifier:
                keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/PWPcidSaQ_vJd_1GO_4YsiiMemU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:05:4f:c5:91:7c:61:9b:20:d6:2e:e6:0d:17:05:cb:08:95:
         e4:57:01:35:7a:60:ad:df:92:98:2b:78:37:87:cb:f6:30:fa:
         18:a6:47:a8:b4:0e:03:12:77:c5:1c:63:65:9a:4c:9b:69:25:
         50:18:31:63:ef:d3:0b:8d:37:89:0e:49:19:d1:50:4d:48:e2:
         3f:1c:7e:b7:18:6f:55:0d:20:f2:e7:7d:0b:6c:ad:81:5c:fc:
         b0:e8:a0:c3:43:6e:96:ca:0c:61:45:a7:95:10:2e:06:ce:2b:
         ea:76:ca:b4:f9:73:ba:65:f9:a6:5d:65:ef:3d:74:e6:45:cd:
         ab:54:19:30:1a:99:87:81:4f:fa:8c:63:a2:67:de:94:b7:80:
         d2:5b:1d:a6:ff:3b:b6:8a:22:17:9e:a0:0d:1d:0b:a8:1c:17:
         cb:e0:6c:fd:a5:63:b2:6d:99:b9:f1:b9:5d:52:7e:6b:26:32:
         a9:48:e7:5b:f9:e9:bf:f3:43:2b:4b:c2:62:3f:f9:93:11:a5:
         3a:72:19:9e:15:e5:ba:73:69:30:a0:00:42:ea:0f:c7:3f:f1:
         6c:d2:11:6e:fc:79:cf:43:3b:fd:c7:b9:38:bc:7c:7d:bd:1d:
         ca:18:a7:fc:4b:05:dc:82:cb:ba:87:99:d5:37:77:fc:0c:f1:
         2c:d3:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:18 2026 by rpki-client