Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa
File:                     MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (raw, json)
Hash identifier:          1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=
Subject key identifier:   33:0C:13:B5:FA:92:0C:8F:2A:E7:E8:8B:27:A8:11:56:3E:70:E7:F0
Certificate issuer:       /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial:       019ED9BC12860F342F829C60E61F2222FEF7
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa
Signing time:             Thu 18 Jun 2026 07:57:21 +0000
ROA not before:           Thu 18 Jun 2026 07:57:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24940
IP address blocks:        193.105.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d9:bc:12:86:0f:34:2f:82:9c:60:e6:1f:22:22:fe:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
        Validity
            Not Before: Jun 18 07:57:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=330c13b5fa920c8f2ae7e88b27a811563e70e7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:22:b1:ca:37:27:78:3c:5e:75:98:75:88:
                    ac:3b:04:b2:36:12:ae:49:89:d5:04:11:d7:a9:04:
                    76:74:46:54:db:12:78:93:d1:44:97:01:87:bb:b9:
                    ba:08:0d:db:fc:d4:b8:a1:10:1b:53:31:67:9f:32:
                    32:1a:97:cf:9f:3c:c7:1b:84:b5:2d:4a:78:62:39:
                    8d:24:3d:4c:07:e8:27:de:b8:71:29:07:fb:3a:7e:
                    08:6c:f8:ab:17:49:15:08:94:43:f1:78:59:cb:c3:
                    5a:44:96:48:17:95:3b:44:b5:aa:2d:cb:6d:1f:35:
                    68:62:27:9f:6e:50:d2:55:77:99:63:78:e8:c9:2c:
                    72:ef:70:90:13:7b:00:9a:76:7f:1f:7d:fe:0c:2a:
                    f4:1d:1b:03:17:47:49:81:b0:55:ae:df:8d:b3:bc:
                    b5:13:4b:0f:c9:3a:85:76:43:e2:d0:ac:f2:97:8f:
                    a5:e8:d9:4d:1d:11:46:30:d4:e7:5b:c2:ec:42:f1:
                    d0:f8:3c:da:8a:05:70:ac:4e:08:d5:72:88:e6:d6:
                    1d:1e:82:2d:9a:77:75:cf:38:b4:d0:01:0c:6c:bf:
                    7d:3c:3a:39:6a:f5:78:9a:68:cf:4f:07:80:ac:45:
                    23:91:0b:4d:d3:92:bc:3d:b0:73:a7:41:de:49:6e:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:13:B5:FA:92:0C:8F:2A:E7:E8:8B:27:A8:11:56:3E:70:E7:F0
            X509v3 Authority Key Identifier:
                keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:04:8b:fc:f4:9a:63:b8:fb:a0:d5:1e:9a:67:95:00:90:ae:
         e3:cf:8c:1f:b4:18:7f:76:54:ba:de:ce:96:16:af:cd:80:2a:
         67:13:fa:81:30:1e:30:1b:5e:78:dc:c8:b8:d9:7d:d7:b8:d9:
         b7:aa:9b:53:58:88:89:36:48:56:a2:bd:52:b8:a3:e7:ad:92:
         6f:8a:50:45:86:0e:29:c9:fb:03:df:a6:9c:7a:85:a9:e3:0e:
         19:eb:1b:c8:8a:0b:6d:f4:d8:6d:2c:c4:6c:92:13:b6:6b:f6:
         18:4e:3e:19:43:98:6d:3d:26:19:0a:ff:9c:1e:db:5f:c7:76:
         cb:9b:4f:97:b7:c9:d4:d0:cc:e6:30:85:a9:d1:60:4c:0b:07:
         09:65:f8:6c:d4:b7:e6:b5:27:5a:51:af:12:7e:42:5f:01:29:
         cc:c3:b4:fc:a2:79:cf:69:e1:4f:fa:db:e1:14:6e:86:90:3f:
         e7:b4:91:22:7a:27:cb:33:36:0e:9e:a1:a6:d8:77:f4:7f:fd:
         0a:4b:94:3a:9a:d5:a7:58:9d:69:bc:79:2f:07:55:91:73:8d:
         89:a8:14:c8:e9:62:ac:8e:09:c1:9c:11:3f:e3:e9:85:e7:21:
         cd:50:39:3c:3c:a6:8b:77:02:1c:ed:b9:d0:7f:eb:29:27:57:
         3b:e7:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:33 2026 by rpki-client