Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa
File:                     1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (raw, json)
Hash identifier:          FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=
Subject key identifier:   D4:0D:0E:81:85:C6:DE:25:52:ED:D6:32:0E:7F:9E:54:88:4E:F1:E3
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       01A03CDFCCA0F8370C7396FE63D0E4B77AA2
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa
Signing time:             Wed 26 Aug 2026 07:01:34 +0000
ROA not before:           Wed 26 Aug 2026 07:01:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203676
IP address blocks:        185.177.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:df:cc:a0:f8:37:0c:73:96:fe:63:d0:e4:b7:7a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Aug 26 07:01:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d40d0e8185c6de2552edd6320e7f9e54884ef1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:14:c2:77:a8:34:56:35:ae:2b:0e:02:64:
                    af:a9:f4:c8:0f:20:5b:ac:23:90:ea:26:e4:dc:d6:
                    89:86:35:71:91:0b:01:8b:30:81:29:90:04:2b:b5:
                    72:b5:62:77:72:2c:69:63:29:aa:17:02:39:33:45:
                    97:18:d7:2b:eb:b2:da:4e:66:5d:e6:d3:d6:12:aa:
                    7b:67:ee:e8:c5:10:6b:fd:32:37:8f:e7:fd:c5:d7:
                    3f:be:ba:9f:ed:f6:c5:1e:67:17:3c:d4:13:da:7b:
                    3d:99:f7:c5:1a:30:63:82:47:bd:68:a6:e3:4c:b3:
                    f3:28:56:7f:b3:0e:18:75:7f:c7:19:3b:c7:75:fa:
                    7f:f0:76:5f:a6:3f:a0:f2:86:d7:67:ff:9e:ff:8f:
                    46:ec:87:ef:5a:b0:b1:f3:af:60:3d:b1:91:8b:fe:
                    51:86:9a:48:52:e9:00:b4:30:cd:c1:13:91:3d:8a:
                    e7:78:ea:d8:0d:71:23:16:dc:67:46:43:bd:76:29:
                    4f:cb:d0:5d:1c:8a:61:0a:fd:93:19:3d:ba:1e:19:
                    ef:60:24:b6:12:16:fc:12:16:17:ce:f1:d8:3c:d7:
                    90:76:e2:01:ec:a6:d7:b9:02:a9:32:2c:1d:bf:f9:
                    49:e3:e5:60:a1:76:54:e3:5f:15:01:f4:f0:40:65:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0D:0E:81:85:C6:DE:25:52:ED:D6:32:0E:7F:9E:54:88:4E:F1:E3
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:96:4f:98:92:03:ba:7c:f7:c3:8e:f4:c3:b7:99:2c:71:
         0b:1c:35:54:f0:e2:cf:9e:7a:d3:65:36:cf:a7:3e:cd:b7:9b:
         7b:ed:8b:86:41:55:de:10:14:6b:23:57:2f:03:24:61:51:37:
         15:98:02:91:f2:73:aa:ed:54:c2:0a:1f:44:88:77:55:97:45:
         e0:6d:b9:4c:ef:10:bd:d4:f5:3b:35:b0:a2:45:1e:46:d2:d8:
         5c:c2:51:a3:e3:88:86:4e:50:47:2c:e5:b2:88:12:a7:bb:ba:
         35:2c:8c:b2:98:73:70:50:dc:55:89:2f:5e:2a:dc:9f:4f:3c:
         6e:2c:a0:1d:ad:e7:0b:ca:e0:3b:c8:35:94:1a:a0:32:f6:ed:
         03:ee:10:4d:61:53:fd:90:f0:be:56:fd:5a:98:14:8b:e6:c3:
         c8:9d:99:34:86:25:79:66:6b:90:c2:03:3f:15:0a:42:43:60:
         24:f0:b5:78:f6:3f:e3:55:7f:b5:b1:e0:9a:7f:5e:5c:d7:65:
         7b:60:a3:45:63:5f:ce:b3:80:f7:58:91:c9:e3:14:74:59:b0:
         a5:07:56:67:88:b2:91:98:94:91:bf:ee:47:0b:cf:32:29:9e:
         22:bf:f9:72:05:95:d5:bc:58:74:c4:28:82:16:f1:d3:84:24:
         3e:a3:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:04:42 2026 by rpki-client