Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dB6NeQbHC1S0b10TNXNI4L9Exe4.roa
File:                     dB6NeQbHC1S0b10TNXNI4L9Exe4.roa (raw, json)
Hash identifier:          UaL6whvNoZFDf++E96XJC/j53g+LXOrogNJ+4PVvwyU=
Subject key identifier:   74:1E:8D:79:06:C7:0B:54:B4:6F:5D:13:35:73:48:E0:BF:44:C5:EE
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019FE037A70D52A8B52C2A68126ACAA07D80
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dB6NeQbHC1S0b10TNXNI4L9Exe4.roa
Signing time:             Sat 08 Aug 2026 07:12:51 +0000
ROA not before:           Sat 08 Aug 2026 07:12:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153568
IP address blocks:        87.229.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e0:37:a7:0d:52:a8:b5:2c:2a:68:12:6a:ca:a0:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Aug  8 07:12:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=741e8d7906c70b54b46f5d13357348e0bf44c5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:47:ca:d0:d2:0a:07:f6:2a:ba:a3:6e:5c:
                    0b:5e:5e:b4:09:a5:38:d4:76:4c:cc:42:41:02:8c:
                    5b:67:cf:b0:a5:a2:a6:46:ec:95:af:66:e9:d8:aa:
                    40:93:19:0b:84:a2:a7:c5:c2:82:49:92:2a:7b:f9:
                    eb:8b:f0:13:93:07:23:c9:e0:46:b4:30:4a:fc:e7:
                    df:ca:37:1b:2c:d2:2e:cd:6d:dc:cb:46:b6:fe:15:
                    15:91:d5:9d:85:27:8b:ef:d2:ca:4d:da:4c:46:1b:
                    ac:9f:09:67:1c:24:19:38:36:45:f7:74:32:26:58:
                    91:43:3f:d0:b1:16:e0:8e:aa:73:fd:f6:4a:c5:30:
                    cc:63:29:8a:06:4e:a7:f9:32:cb:73:f1:75:95:29:
                    bd:e4:3e:fc:95:29:80:05:ca:26:42:39:95:fd:fe:
                    8b:3e:84:b5:e0:f7:73:3f:ac:32:df:ff:41:30:a6:
                    8e:58:c7:49:94:c8:a5:06:fd:1a:97:19:30:4a:6d:
                    6b:fd:a8:2f:16:fd:30:6a:c2:cd:d5:94:99:3c:05:
                    d1:d9:37:5f:ff:e4:db:ab:3b:e2:6c:4c:42:40:e5:
                    88:e7:8d:e3:9c:b7:be:2b:44:60:ce:2f:60:3b:c8:
                    c5:13:86:93:b8:0f:6a:68:55:45:ab:6c:2b:d4:e0:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:8D:79:06:C7:0B:54:B4:6F:5D:13:35:73:48:E0:BF:44:C5:EE
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/dB6NeQbHC1S0b10TNXNI4L9Exe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:04:1b:d9:6b:69:03:2f:7f:1d:8e:7d:e1:97:2a:46:b6:bc:
         23:22:f4:11:b4:93:73:a7:83:34:48:0f:8c:d4:85:e4:8e:09:
         cb:55:a8:f4:fc:5f:b5:83:b2:2f:24:a2:f8:20:e1:2b:4a:3c:
         87:1c:b4:d9:dd:8d:4a:29:d3:c5:6a:29:fc:2e:47:01:63:41:
         1f:89:49:65:bb:2c:10:01:8b:8c:9b:49:49:5e:44:1b:95:87:
         51:b4:83:cd:46:df:a0:e7:e8:fd:92:af:bd:c9:be:8b:4d:ff:
         57:f9:5d:fd:6a:69:7f:19:39:c1:a4:db:62:2a:f4:2b:7d:da:
         e8:9b:42:75:8a:26:a5:91:ea:7c:59:ce:91:af:f1:83:31:60:
         64:24:36:5e:14:e6:5e:9e:07:f8:a6:9b:5d:c4:9e:46:41:c2:
         d3:1b:18:05:2b:ec:96:7a:17:3f:c6:ef:db:a9:1d:57:19:98:
         d0:23:3e:ec:82:9d:1b:49:5d:48:bb:63:33:9f:c5:1f:0e:ca:
         2c:ef:b8:42:d8:13:11:e8:c5:00:50:57:17:30:0c:f3:51:d8:
         36:48:23:86:37:3e:1a:e8:8b:ba:89:57:e4:75:89:0a:4c:bb:
         b7:70:e9:5d:77:c5:f3:67:a6:54:3c:85:51:9c:f4:0b:86:96:
         70:aa:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:57:00 2026 by rpki-client