Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/n62une5lw0UbkVEodjBd5Qkr3xI.roa
File:                     n62une5lw0UbkVEodjBd5Qkr3xI.roa (raw, json)
Hash identifier:          kbJZQgp1SsLCtXQnnwKL9+yLk2mGeG5i9CX6cESkLJo=
Subject key identifier:   9F:AD:AE:9D:EE:65:C3:45:1B:91:51:28:76:30:5D:E5:09:2B:DF:12
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019F5FE1D76F12FCF933BA544B69E8FF38DF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/n62une5lw0UbkVEodjBd5Qkr3xI.roa
Signing time:             Tue 14 Jul 2026 09:07:44 +0000
ROA not before:           Tue 14 Jul 2026 09:07:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133201
IP address blocks:        188.255.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 08:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:5f:e1:d7:6f:12:fc:f9:33:ba:54:4b:69:e8:ff:38:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul 14 09:07:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9fadae9dee65c3451b91512876305de5092bdf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:1d:38:a7:0f:54:7d:d7:2e:42:f8:9c:6b:
                    67:2d:ec:85:21:22:fa:ec:31:ac:d5:f1:d3:b7:63:
                    e3:25:7d:fc:db:c7:96:e5:84:0c:ba:bb:6b:e8:2e:
                    a7:76:e5:c4:a9:fa:ac:18:cb:75:68:15:e9:4a:94:
                    1e:80:7c:2c:c7:c5:34:cf:ec:23:c1:bf:a1:77:01:
                    f4:50:0e:89:90:cf:39:f2:45:48:89:26:42:77:92:
                    4c:cf:e3:37:79:d7:ac:17:cc:3c:1d:f7:a1:e0:d8:
                    12:53:18:f2:3f:d9:5d:92:7d:b2:73:43:29:85:d6:
                    19:d0:ff:00:9f:0b:e0:49:ae:1c:48:32:d3:20:c7:
                    6e:17:e7:54:79:62:93:61:49:e7:2c:ee:25:aa:52:
                    2e:36:ba:42:15:3f:59:b4:84:d5:ec:21:b0:61:22:
                    dd:f4:46:0b:a8:2a:77:f8:2e:ec:f8:94:f7:f7:f9:
                    04:96:52:84:bd:71:ec:0d:cf:ed:40:5a:a4:cb:66:
                    54:ea:ba:b7:2a:8d:fa:b8:90:a7:12:b9:90:b1:a9:
                    a0:94:a7:b7:eb:ff:de:74:00:9d:c7:90:2b:98:76:
                    f6:e8:e1:31:da:cd:1f:03:77:52:0e:75:52:b9:82:
                    ab:08:7f:d9:6e:4a:e6:29:ec:65:8e:46:54:4a:ca:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AD:AE:9D:EE:65:C3:45:1B:91:51:28:76:30:5D:E5:09:2B:DF:12
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/n62une5lw0UbkVEodjBd5Qkr3xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.255.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:fb:5a:81:62:e1:d8:5e:76:dc:67:9e:62:35:29:56:c4:
         6e:a9:22:5f:04:62:9b:e0:c0:f4:26:a4:ab:c5:70:da:cf:34:
         74:a3:dc:86:29:35:01:28:10:db:e0:90:7c:29:48:af:ff:2a:
         35:b9:c6:cb:17:69:fe:af:b6:7c:ea:d3:f7:f5:98:c3:42:63:
         38:48:04:33:3c:b6:bd:20:57:74:dd:51:22:35:d9:1d:08:bc:
         dc:90:c8:a8:4c:9d:39:65:67:5a:e4:8a:14:26:ad:8d:74:99:
         96:e9:06:0c:5b:41:42:4e:4e:10:27:fd:04:7a:f5:0f:78:9b:
         59:36:ca:b7:e1:de:19:ff:d3:29:f6:fb:e5:2f:ba:bf:64:26:
         f0:77:2f:67:be:53:60:f7:d4:3c:11:b7:c4:55:94:b7:b8:76:
         b1:e5:68:07:e5:c6:1d:49:7b:03:20:13:1c:ee:50:92:e0:a3:
         87:df:dd:f1:98:30:1a:d6:98:f3:a6:8f:7a:db:3e:6f:8e:14:
         d9:6c:e3:83:c0:36:ff:11:06:63:2b:57:51:95:4b:75:56:2c:
         7b:78:ee:23:5e:85:11:f2:8b:67:ba:cb:52:0c:b6:27:5a:00:
         b7:9a:8b:cc:88:64:48:eb:17:b5:bf:17:4d:0d:8c:a6:cb:bd:
         1e:36:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:53 2026 by rpki-client