Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gVGWEuApRLsYDMZvInll5VwFxNw.roa
File:                     gVGWEuApRLsYDMZvInll5VwFxNw.roa (raw, json)
Hash identifier:          vU4NTNbeDMHOwM3otqiz7jYEX7lNp3FeBhY75BBaaxQ=
Subject key identifier:   81:51:96:12:E0:29:44:BB:18:0C:C6:6F:22:79:65:E5:5C:05:C4:DC
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       01A13FB835F0DB4280B61CCB1E353DB73DB8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gVGWEuApRLsYDMZvInll5VwFxNw.roa
Signing time:             Thu 15 Oct 2026 13:19:59 +0000
ROA not before:           Thu 15 Oct 2026 13:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218686
IP address blocks:        178.218.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:b8:35:f0:db:42:80:b6:1c:cb:1e:35:3d:b7:3d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Oct 15 13:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81519612e02944bb180cc66f227965e55c05c4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:6f:4c:88:f7:57:ae:2c:6a:b1:05:80:72:
                    0a:1c:65:bc:7d:0e:2f:11:f7:22:83:52:07:26:bc:
                    1b:0d:5a:52:92:16:33:d7:8d:41:99:68:b2:5b:33:
                    d2:2a:cb:d4:49:65:08:e9:ad:31:b8:37:15:fe:0b:
                    02:49:16:7e:bc:cd:78:4a:f9:51:aa:40:d9:3a:a3:
                    b0:a2:02:94:21:db:b8:ab:72:11:a2:ee:91:85:6a:
                    e0:2e:49:c7:f2:2c:93:3c:a9:65:26:76:0b:e3:cd:
                    0c:e7:b8:f5:13:1e:af:95:8b:c8:ca:da:34:f4:f9:
                    b3:45:0d:54:32:f5:35:43:b4:32:a2:4f:47:f3:12:
                    08:da:ea:69:51:be:2f:98:83:67:69:7b:ed:ab:6a:
                    6c:f5:5d:5c:99:8e:6c:8f:e2:d4:53:dc:69:75:ed:
                    2f:9b:d3:c6:fa:01:33:23:e3:e5:35:be:98:84:b6:
                    61:0d:4c:1c:20:1e:61:c6:e3:cc:47:5e:33:ad:52:
                    15:70:f7:15:55:96:f3:86:48:2c:45:a5:87:7b:de:
                    65:c1:55:12:9b:89:0c:a5:e7:b6:0d:81:ab:8a:e8:
                    4a:f5:04:0a:7b:58:79:8a:25:81:3e:08:25:f3:d7:
                    cd:ba:61:ae:ad:91:1d:23:2c:94:e3:04:5f:a8:6e:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:51:96:12:E0:29:44:BB:18:0C:C6:6F:22:79:65:E5:5C:05:C4:DC
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gVGWEuApRLsYDMZvInll5VwFxNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:da:2c:c5:43:c1:16:3d:38:cf:6b:02:94:fa:c3:a0:b6:1f:
         9f:71:cb:f3:02:48:35:41:ee:ba:6f:13:3e:06:b0:21:05:29:
         70:33:66:c3:a9:c8:58:4d:1e:a6:8f:18:43:33:03:45:a9:40:
         fd:97:39:86:e1:c4:5e:53:bb:ae:6a:2d:bb:91:25:14:a5:c3:
         56:87:92:17:60:f5:0e:96:44:b2:0f:8a:5e:30:e9:f2:88:a5:
         c7:4b:7d:e1:f3:63:41:82:c6:59:e6:43:6f:1b:62:37:84:f3:
         ec:2a:81:08:c3:eb:7f:f0:3f:a1:8e:db:35:c7:4c:3d:d6:d8:
         03:7b:23:57:50:fa:4a:d4:44:d1:1f:b9:ac:0e:0d:96:98:ed:
         2d:5d:2f:07:a7:9d:fc:58:98:11:ce:66:35:3e:3d:a0:e3:d9:
         ec:60:bb:88:bb:f1:04:95:bc:4f:44:1e:3b:7f:46:4a:3d:aa:
         ce:be:53:73:5a:c1:34:c0:21:f3:1d:4e:79:38:40:81:e6:e1:
         75:b0:36:23:72:6d:02:9c:d4:f2:22:13:99:e3:13:9b:b5:3e:
         4e:6f:77:22:d6:75:fe:fa:02:51:70:64:fd:79:81:f1:70:56:
         45:96:53:79:32:af:e1:a4:1d:f4:3a:5e:4c:9e:0b:59:51:1d:
         d2:84:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:38 2026 by rpki-client