Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w26nXkEu1_B-FVJ0VC58BhCQ_lo.roa
File:                     w26nXkEu1_B-FVJ0VC58BhCQ_lo.roa (raw, json)
Hash identifier:          byN/zn3ZhBgCX4sh7AvuVDmE6fnPoBJPcY8vjmjDs5s=
Subject key identifier:   C3:6E:A7:5E:41:2E:D7:F0:7E:15:52:74:54:2E:7C:06:10:90:FE:5A
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01A117C7B614583E20E2ADA06D8D869D9ECB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w26nXkEu1_B-FVJ0VC58BhCQ_lo.roa
Signing time:             Wed 07 Oct 2026 19:12:06 +0000
ROA not before:           Wed 07 Oct 2026 19:12:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215362
IP address blocks:        80.96.98.0/24 maxlen: 24
                          81.181.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:c7:b6:14:58:3e:20:e2:ad:a0:6d:8d:86:9d:9e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Oct  7 19:12:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c36ea75e412ed7f07e155274542e7c061090fe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:7c:4f:f2:a1:06:f4:0d:03:41:07:15:03:
                    c8:9a:e7:20:ac:1a:42:1b:5a:5d:e5:f7:1e:0b:69:
                    05:3d:82:a5:ea:ef:5f:56:86:12:58:d2:d0:c6:be:
                    ee:95:e9:a7:4c:ab:d3:3b:c4:07:4d:f4:a2:43:f8:
                    fb:f8:4e:a2:77:8e:34:6d:c8:7f:62:71:13:58:33:
                    f3:e7:3b:ca:dd:ae:8a:c2:7d:51:21:7b:62:dd:c8:
                    35:ae:1f:b5:52:0a:60:e5:03:f3:eb:14:9a:7d:9a:
                    28:8e:d1:3f:68:ca:b0:dc:50:4c:c1:63:1b:8d:20:
                    4d:03:45:f3:09:68:d3:65:18:3a:b5:1d:bc:64:e1:
                    61:ec:5e:0a:93:6a:f2:1d:69:53:4a:54:e6:dd:07:
                    95:8c:50:a0:13:58:26:f6:30:c5:41:c0:34:ed:4a:
                    c9:06:c4:4f:36:c9:b3:d3:12:23:7a:55:1f:77:98:
                    1a:d0:b9:62:60:ff:4b:2a:5e:f4:92:dc:2e:92:00:
                    6a:6d:21:7e:7a:be:c7:71:9a:68:4d:20:ff:f8:3e:
                    4b:f1:f3:8d:e9:bc:00:df:8f:77:d8:67:25:c3:5c:
                    05:ad:e2:e4:17:4b:4b:ce:00:21:c1:d7:cd:ec:31:
                    2c:d7:9a:84:0a:6d:60:3b:33:46:05:73:8a:80:2a:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:A7:5E:41:2E:D7:F0:7E:15:52:74:54:2E:7C:06:10:90:FE:5A
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w26nXkEu1_B-FVJ0VC58BhCQ_lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.98.0/24
                  81.181.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:d0:5e:95:a8:e7:2b:01:d8:34:5c:d1:40:1a:d4:87:ef:
         3a:c2:4e:f3:5d:7c:06:cc:69:f0:e8:11:6b:ac:ac:fd:cb:67:
         58:b1:17:50:2a:a1:ff:00:9f:af:3a:e5:1c:10:21:b4:7f:b4:
         a1:b4:7f:1b:de:68:27:9b:11:11:30:69:cb:ad:41:3c:e7:37:
         92:08:15:e1:78:bc:c6:ff:51:da:4b:d3:02:b7:44:f0:43:55:
         fc:92:a8:33:68:e9:23:35:a8:3c:bb:40:86:6d:f6:14:35:58:
         0a:9f:0f:c9:c1:4b:75:df:ef:f9:20:5d:5a:c1:d8:18:a3:5a:
         21:4d:26:af:03:af:39:0a:8f:a3:73:73:e5:44:31:3f:1f:f1:
         41:07:4c:5c:b4:69:49:d0:41:f1:b4:1b:91:b2:18:56:d1:0c:
         82:34:76:5f:6f:a7:82:7f:f0:6a:79:9b:fa:6e:cc:4e:43:55:
         f6:e6:37:5c:5c:08:ea:20:43:64:68:b4:02:ca:f7:a9:10:3f:
         0b:32:25:09:0b:32:76:bb:56:3d:7c:97:35:14:e6:a9:da:58:
         13:32:d8:43:8d:35:7c:d1:fa:a9:0b:20:a3:ab:b2:e1:72:c5:
         b9:fa:c0:77:60:48:30:0e:aa:84:e3:8b:0c:a6:00:7e:63:0e:
         7c:85:20:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEXx7YUWD4g4q2gbY2GnZ7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYxMDA3MTkxMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzZlYTc1ZTQxMmVkN2YwN2UxNTUyNzQ1NDJlN2MwNjEwOTBmZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/98T/KhBvQNA0EHFQPImucgrBpC
G1pd5fceC2kFPYKl6u9fVoYSWNLQxr7ulemnTKvTO8QHTfSiQ/j7+E6id440bch/
YnETWDPz5zvK3a6Kwn1RIXti3cg1rh+1Ugpg5QPz6xSafZoojtE/aMqw3FBMwWMb
jSBNA0XzCWjTZRg6tR28ZOFh7F4Kk2ryHWlTSlTm3QeVjFCgE1gm9jDFQcA07UrJ
BsRPNsmz0xIjelUfd5ga0LliYP9LKl70ktwukgBqbSF+er7HcZpoTSD/+D5L8fON
6bwA34932Gclw1wFreLkF0tLzgAhwdfN7DEs15qECm1gOzNGBXOKgCpA4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMNup15BLtfwfhVSdFQufAYQkP5aMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvdzI2blhrRXUxX0ItRlZKMFZDNThCaENRX2xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUGBiAwQA
UbVxMA0GCSqGSIb3DQEBCwUAA4IBAQCPFNBelajnKwHYNFzRQBrUh+86wk7zXXwG
zGnw6BFrrKz9y2dYsRdQKqH/AJ+vOuUcECG0f7ShtH8b3mgnmxERMGnLrUE85zeS
CBXheLzG/1HaS9MCt0TwQ1X8kqgzaOkjNag8u0CGbfYUNVgKnw/JwUt13+/5IF1a
wdgYo1ohTSavA685Co+jc3PlRDE/H/FBB0xctGlJ0EHxtBuRshhW0QyCNHZfb6eC
f/BqeZv6bsxOQ1X25jdcXAjqIENkaLQCyvepED8LMiUJCzJ2u1Y9fJc1FOap2lgT
MthDjTV80fqpCyCjq7LhcsW5+sB3YEgwDqqE44sMpgB+Yw58hSAu
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:46:44 2026 by rpki-client