Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pBIViSMLSu1P-Wuw8baSDmRmd6c.roa
File:                     pBIViSMLSu1P-Wuw8baSDmRmd6c.roa (raw, json)
Hash identifier:          TRUysw2cyGGkDHaC/hBqCa5SVLgYPmNEdj1BRuSlVd0=
Subject key identifier:   A4:12:15:89:23:0B:4A:ED:4F:F9:6B:B0:F1:B6:92:0E:64:66:77:A7
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01A0660D46646EDE80858B643D640169B0B0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pBIViSMLSu1P-Wuw8baSDmRmd6c.roa
Signing time:             Thu 03 Sep 2026 06:55:41 +0000
ROA not before:           Thu 03 Sep 2026 06:55:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5511
IP address blocks:        81.180.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:66:0d:46:64:6e:de:80:85:8b:64:3d:64:01:69:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Sep  3 06:55:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a4121589230b4aed4ff96bb0f1b6920e646677a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:c4:dc:63:39:36:16:13:f4:7f:99:2d:fd:
                    0e:8a:76:40:5d:83:b0:0e:5f:e4:2a:df:35:a2:f0:
                    f3:e8:f0:a9:89:18:d9:c3:1e:b1:68:23:ca:10:cf:
                    c7:f6:c5:02:c8:aa:d5:01:7c:9a:a4:88:7f:bf:4a:
                    e2:87:29:7e:51:41:84:33:51:56:c0:2a:69:f0:32:
                    3d:3a:30:a4:51:79:ce:34:46:9d:86:00:ba:77:f4:
                    40:f8:9d:7a:80:d3:0a:eb:1c:2a:68:b3:cc:91:ef:
                    55:1c:15:0d:46:b8:c4:50:30:ca:4c:1a:03:6a:f9:
                    b3:91:9c:e1:83:a8:3a:d1:2e:07:c0:e9:ed:78:fe:
                    8c:47:da:b0:d6:a5:b4:0a:34:e6:77:bd:74:ad:29:
                    1c:3d:72:5b:f0:cc:62:4c:96:a5:9c:18:50:a5:c0:
                    e7:a0:c2:57:38:03:85:3c:0d:df:31:a4:c9:31:a1:
                    93:9e:a7:07:45:bd:8e:df:29:df:a7:41:a0:94:23:
                    a0:bc:e7:81:36:84:18:58:fa:9c:ee:e0:1b:a6:8a:
                    c3:90:ef:92:4c:06:ac:2e:62:c5:62:28:51:dd:1e:
                    7d:5c:d3:b7:7c:11:e6:f1:04:91:e5:96:5a:6b:d7:
                    ee:f8:22:b4:71:9d:bf:0e:ed:0c:70:37:b2:61:78:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:12:15:89:23:0B:4A:ED:4F:F9:6B:B0:F1:B6:92:0E:64:66:77:A7
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pBIViSMLSu1P-Wuw8baSDmRmd6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.180.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:17:3a:ef:dd:28:1a:54:a9:40:d2:40:a9:92:d3:ec:7a:d3:
         cc:b8:83:a8:1c:dc:d7:ef:75:f4:b3:93:8b:a0:30:8b:36:1d:
         41:65:d1:b3:28:00:f0:3f:6d:e4:e9:11:01:e2:2e:c4:fd:96:
         3a:6c:ec:7b:b7:7a:2f:63:c2:7b:ff:b2:ef:49:45:ce:5f:7a:
         36:b7:4d:38:a8:e4:6b:a8:c5:b9:76:87:b2:f9:8d:ab:2f:3d:
         99:39:ab:ac:96:f6:c6:41:62:b9:5e:11:e6:16:33:9b:2d:59:
         7e:31:92:ba:96:83:4f:70:94:cf:9c:3a:a3:6e:a7:d0:06:27:
         82:c4:fb:3a:84:f7:ea:98:c3:48:6b:42:df:f9:41:81:27:32:
         b1:f0:a8:96:8a:b5:d0:ef:af:b7:0e:7a:9e:38:ee:f7:9b:b8:
         26:64:60:10:04:0b:87:4a:6c:61:85:00:98:65:5e:91:12:97:
         4f:2c:20:2d:fd:9c:b2:09:c2:52:7e:a1:b7:67:0b:eb:f6:48:
         0d:13:c9:a1:40:0e:14:77:53:b7:f8:f5:56:77:f8:a9:3f:28:
         c3:85:9e:6d:95:44:e4:6e:81:a4:81:6c:ad:c1:0d:52:87:ae:
         44:02:ea:ba:8c:58:f9:1b:04:a5:32:11:3b:b1:ac:2b:31:24:
         ce:52:df:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBmDUZkbt6AhYtkPWQBabCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwOTAzMDY1NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDEyMTU4OTIzMGI0YWVkNGZmOTZiYjBmMWI2OTIwZTY0NjY3N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySLE3GM5NhYT9H+ZLf0OinZAXYOw
Dl/kKt81ovDz6PCpiRjZwx6xaCPKEM/H9sUCyKrVAXyapIh/v0rihyl+UUGEM1FW
wCpp8DI9OjCkUXnONEadhgC6d/RA+J16gNMK6xwqaLPMke9VHBUNRrjEUDDKTBoD
avmzkZzhg6g60S4HwOnteP6MR9qw1qW0CjTmd710rSkcPXJb8MxiTJalnBhQpcDn
oMJXOAOFPA3fMaTJMaGTnqcHRb2O3ynfp0GglCOgvOeBNoQYWPqc7uAbporDkO+S
TAasLmLFYihR3R59XNO3fBHm8QSR5ZZaa9fu+CK0cZ2/Du0McDeyYXjA9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQSFYkjC0rtT/lrsPG2kg5kZnenMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvcEJJVmlTTUxTdTFQLVd1dzhiYVNEbVJtZDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbQlMA0G
CSqGSIb3DQEBCwUAA4IBAQBZFzrv3SgaVKlA0kCpktPsetPMuIOoHNzX73X0s5OL
oDCLNh1BZdGzKADwP23k6REB4i7E/ZY6bOx7t3ovY8J7/7LvSUXOX3o2t004qORr
qMW5doey+Y2rLz2ZOauslvbGQWK5XhHmFjObLVl+MZK6loNPcJTPnDqjbqfQBieC
xPs6hPfqmMNIa0Lf+UGBJzKx8KiWirXQ76+3DnqeOO73m7gmZGAQBAuHSmxhhQCY
ZV6REpdPLCAt/ZyyCcJSfqG3Zwvr9kgNE8mhQA4Ud1O3+PVWd/ipPyjDhZ5tlUTk
boGkgWytwQ1Sh65EAuq6jFj5GwSlMhE7sawrMSTOUt86
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:52 2026 by rpki-client