Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/5i-wWx3uk1x4J6voWTJfC3D_1MY.roa
File:                     5i-wWx3uk1x4J6voWTJfC3D_1MY.roa (raw, json)
Hash identifier:          7Vfr9k/nk3ZAYLLvZ5n9BW3E9bNyVf4pRuIW+OVPNMg=
Subject key identifier:   E6:2F:B0:5B:1D:EE:93:5C:78:27:AB:E8:59:32:5F:0B:70:FF:D4:C6
Certificate issuer:       /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial:       01A03982594EFBEC31CD7B24714287A08B01
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/5i-wWx3uk1x4J6voWTJfC3D_1MY.roa
Signing time:             Tue 25 Aug 2026 15:20:38 +0000
ROA not before:           Tue 25 Aug 2026 15:20:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216138
IP address blocks:        176.53.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:82:59:4e:fb:ec:31:cd:7b:24:71:42:87:a0:8b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
        Validity
            Not Before: Aug 25 15:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e62fb05b1dee935c7827abe859325f0b70ffd4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:f7:ec:6b:36:a7:d9:04:d1:a2:92:23:c6:
                    32:ef:5b:54:2b:b3:2f:a0:b5:97:ff:14:4d:e5:2a:
                    cb:90:2d:b0:5f:f0:09:a9:2f:92:cf:5f:f7:99:c8:
                    14:de:cc:6e:72:2c:16:36:c4:39:1c:a7:18:87:91:
                    3c:8e:30:e3:8a:25:fc:ef:f4:15:1d:c6:7e:cc:ff:
                    19:4e:51:3d:0c:43:60:3c:2c:64:45:1f:44:b0:96:
                    8b:69:69:b4:f7:6c:2d:46:40:d9:e8:f7:64:ac:a3:
                    ff:d4:7e:f9:dc:66:2c:22:1c:7d:26:e0:3a:35:33:
                    28:c0:a2:77:b3:12:a4:ce:3e:fa:bf:11:26:e1:3f:
                    d0:37:5c:de:57:41:05:80:37:68:6f:d7:de:99:11:
                    4b:f3:ee:7f:f5:0d:dd:94:ff:11:69:6d:70:a8:54:
                    ab:1d:fd:bf:f2:d6:a8:65:09:30:73:f9:c5:63:1b:
                    3e:2f:dd:54:3a:44:da:c5:4a:ce:dd:15:c4:59:61:
                    7e:bd:c0:34:09:34:1d:1d:2d:9a:6b:f1:51:e5:ed:
                    bc:5d:f1:44:d8:fc:3f:59:b7:66:14:ba:91:ad:60:
                    2c:ae:e4:98:87:24:84:d8:13:e4:52:70:a2:79:1e:
                    2f:00:a8:82:57:10:b0:a4:ac:7a:8c:7a:0b:e2:52:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2F:B0:5B:1D:EE:93:5C:78:27:AB:E8:59:32:5F:0B:70:FF:D4:C6
            X509v3 Authority Key Identifier:
                keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/5i-wWx3uk1x4J6voWTJfC3D_1MY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:0b:6b:c5:13:c8:13:d0:d6:da:b6:0b:e8:0b:34:c5:f0:
         e2:cc:6d:c0:7b:5f:ed:c5:56:ea:38:7f:d7:c6:e0:af:f2:74:
         2c:eb:a1:a9:86:b2:7d:92:21:7d:57:7b:9a:43:ba:5e:50:4d:
         c6:ad:f6:2f:10:82:1e:17:03:cd:ea:38:11:72:ee:25:40:5a:
         b1:0a:59:6b:d5:85:5a:04:5d:0c:b6:9a:94:46:eb:1a:cf:51:
         fa:4c:43:b1:8d:b8:fd:1a:94:5d:6f:e2:6a:98:c5:f0:45:c2:
         c8:1f:7a:7a:ad:5a:1c:60:74:c1:8e:e4:66:cc:02:35:d5:57:
         90:19:62:b1:2c:be:6c:78:c3:a4:38:d3:65:9a:f7:6f:75:e8:
         fe:15:7c:f2:a3:53:f7:3f:8f:e5:3e:de:01:db:91:cd:bd:73:
         e8:de:55:6e:2a:d8:84:06:ab:76:dc:bb:ea:f5:b6:9e:20:7d:
         e2:bd:34:1c:dc:e5:65:ad:a8:c9:38:08:73:e5:2f:7e:a5:c0:
         3e:f3:19:e9:62:b8:1f:a3:22:77:d2:45:a9:20:4e:89:1b:b3:
         a0:b1:97:db:47:ec:76:c3:df:fa:cc:54:b6:63:01:a0:b1:1a:
         ba:e0:04:1b:9e:47:12:26:2b:c7:a0:dc:5e:8b:21:2e:41:4e:
         4d:a0:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:32 2026 by rpki-client