Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ViFP5rp9_kh71j905ntxU5SBk68.roa
File:                     ViFP5rp9_kh71j905ntxU5SBk68.roa (raw, json)
Hash identifier:          58dlvwMJZtV0cctgTlo4T66Sg5qkkMyrdz4IEFt0NhQ=
Subject key identifier:   56:21:4F:E6:BA:7D:FE:48:7B:D6:3F:74:E6:7B:71:53:94:81:93:AF
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       01A015460DFD0A1FD4837510ADEE2AB625F3
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ViFP5rp9_kh71j905ntxU5SBk68.roa
Signing time:             Tue 18 Aug 2026 14:28:27 +0000
ROA not before:           Tue 18 Aug 2026 14:28:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16200
IP address blocks:        83.147.193.0/24 maxlen: 24
                          2a14:ed00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:15:46:0d:fd:0a:1f:d4:83:75:10:ad:ee:2a:b6:25:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Aug 18 14:28:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56214fe6ba7dfe487bd63f74e67b7153948193af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:ba:b1:51:e6:0d:90:7b:02:49:12:b0:61:
                    5d:95:04:01:2d:4b:ca:af:5b:c3:34:c6:ad:50:eb:
                    21:dd:54:5d:6f:be:c6:22:3f:79:5b:84:13:90:74:
                    98:8f:a5:6d:2c:02:b2:96:10:17:aa:a5:b7:f4:b2:
                    35:99:05:c8:0c:c2:48:4b:9d:56:39:20:dd:9d:bb:
                    ea:1f:54:66:84:9d:0b:6b:08:70:b6:40:b9:31:63:
                    cf:a9:0f:d2:6b:b1:a3:be:12:3d:c8:a0:28:11:ac:
                    f4:fe:cb:f8:a9:c9:70:8f:9c:d0:47:f8:de:3d:a0:
                    b4:30:5c:9e:3a:7f:02:5d:3e:9b:b6:01:c2:b9:ef:
                    8a:d1:12:6b:f9:1b:08:84:88:00:d7:99:e1:e8:b1:
                    83:d0:28:74:04:bb:19:38:38:96:88:0f:3a:89:e5:
                    c2:81:55:38:0a:ad:10:2f:69:cf:02:cc:ab:53:46:
                    d7:fa:90:3f:c1:d2:29:76:39:ea:76:4b:c2:4c:1c:
                    e6:16:29:cb:ec:a1:5b:04:34:f8:d9:a3:45:46:b2:
                    fa:c7:56:a1:ed:7b:0a:fe:bd:c1:c4:6e:71:6d:bc:
                    11:69:e8:4d:3b:1e:c9:47:a1:7b:60:de:8f:42:56:
                    c7:30:0c:86:6a:64:e0:36:51:b2:85:cf:51:ce:88:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:4F:E6:BA:7D:FE:48:7B:D6:3F:74:E6:7B:71:53:94:81:93:AF
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ViFP5rp9_kh71j905ntxU5SBk68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.193.0/24
                IPv6:
                  2a14:ed00::/29

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:d5:97:ab:8c:f1:40:9c:d8:0e:39:a1:fe:34:6b:a7:d0:
         74:7a:77:14:e1:1f:f5:af:b6:b4:1f:3a:fe:33:93:9d:55:8f:
         46:66:44:71:74:1c:84:f7:28:72:fb:ae:f4:c4:c0:18:73:08:
         5a:bf:0b:66:59:4e:04:29:6d:0b:bb:ab:e1:ac:ed:b8:53:26:
         f6:3c:46:62:57:a9:a3:37:60:c8:60:2b:b1:e5:5d:59:71:5a:
         18:96:3b:fe:4e:84:d5:bd:e4:b0:bf:6f:4a:9a:33:fe:01:7b:
         48:29:d3:ea:b5:55:ee:36:79:23:88:6c:b8:f9:e0:02:b9:0e:
         c8:de:45:d3:eb:95:44:5c:50:08:ed:45:9a:bc:db:df:e8:e1:
         27:60:c5:7c:ec:8e:8b:5b:ea:7f:87:5a:5f:c9:5d:c6:ee:96:
         e1:8e:a9:0b:fb:93:67:05:3f:99:33:50:c3:9c:75:ae:9d:10:
         17:ea:b8:39:4d:04:77:fb:6c:2d:69:f5:ff:48:1a:a2:38:80:
         9e:c3:c3:09:04:b0:d9:85:78:56:4a:d6:dc:43:4b:66:7d:6f:
         e1:3f:9e:79:3f:65:5a:24:66:4c:08:c9:9c:33:19:70:f5:93:
         8d:dd:e6:04:15:0a:70:7a:e4:09:eb:54:ae:9d:cc:82:ed:0e:
         f5:c9:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:41 2026 by rpki-client