Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/75V-j6m3-ZHToKe72MSLQ_I2MKc.roa
File:                     75V-j6m3-ZHToKe72MSLQ_I2MKc.roa (raw, json)
Hash identifier:          Y6lkNZktAfHEe5jzTKAsjk5wZySuerbmdLU4YF+OwV4=
Subject key identifier:   EF:95:7E:8F:A9:B7:F9:91:D3:A0:A7:BB:D8:C4:8B:43:F2:36:30:A7
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       01A044CB046D0C21C25B3BC4D22EEB79851C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/75V-j6m3-ZHToKe72MSLQ_I2MKc.roa
Signing time:             Thu 27 Aug 2026 19:55:50 +0000
ROA not before:           Thu 27 Aug 2026 19:55:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218879
IP address blocks:        2a06:9801:fe0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:44:cb:04:6d:0c:21:c2:5b:3b:c4:d2:2e:eb:79:85:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Aug 27 19:55:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef957e8fa9b7f991d3a0a7bbd8c48b43f23630a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:5f:74:28:7a:d0:43:51:79:30:e8:94:9e:
                    cf:e5:66:66:58:39:5b:ce:7e:4d:05:cc:a7:a0:bd:
                    8d:36:a1:6a:fc:49:b0:52:39:c2:cc:8a:21:79:4b:
                    44:dd:8a:00:ec:62:6c:ee:24:ec:17:e9:de:aa:6b:
                    21:c2:46:c1:64:f3:4d:9a:a4:0b:ae:12:73:06:2b:
                    99:e4:f9:7b:96:b2:be:ba:6b:8a:ff:d7:76:f5:cb:
                    d6:a0:fb:e5:86:f4:9e:f5:b5:b8:15:d5:20:17:b8:
                    d4:1f:ed:b5:78:04:8f:79:90:71:14:05:52:fb:f1:
                    81:8d:ce:1a:a3:76:41:bf:fd:36:38:fb:e6:1a:83:
                    b1:19:29:f5:45:7a:be:c0:d5:df:ab:da:aa:f3:19:
                    f4:82:cf:9e:31:f9:cd:9c:fe:0f:9c:c7:17:60:5b:
                    fc:12:87:54:b8:6f:2c:d6:e1:c3:24:e1:be:9b:5e:
                    dc:24:c3:36:8d:a3:e7:85:09:e9:60:30:19:11:c9:
                    ae:f4:e0:af:23:d9:6a:ff:f5:18:6f:45:71:92:c3:
                    f4:49:fa:50:8d:1d:fd:c3:31:3d:b0:65:13:29:37:
                    ec:f2:63:95:7d:e1:56:52:ea:2a:45:c0:41:53:a1:
                    b7:46:34:9e:49:40:8e:ea:d3:f0:c8:e3:33:07:cf:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:95:7E:8F:A9:B7:F9:91:D3:A0:A7:BB:D8:C4:8B:43:F2:36:30:A7
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/75V-j6m3-ZHToKe72MSLQ_I2MKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9801:fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:19:66:01:6a:17:74:32:66:be:1a:8b:43:c6:6a:8b:46:ff:
         a1:a3:37:96:ca:78:41:cc:53:8d:a4:2d:9f:41:f6:17:8b:07:
         55:52:0e:ac:0a:0b:a1:5b:b2:d7:f4:a5:58:bc:b0:0b:e4:b6:
         fa:fe:3f:a3:62:1e:d3:03:fc:cf:9a:31:18:0d:28:26:61:eb:
         fd:a5:f5:d0:43:d4:c4:57:8b:8a:2a:83:39:59:b9:a2:f2:85:
         80:9a:21:b5:84:b1:26:fc:76:68:34:13:e3:ed:9f:af:9b:2b:
         98:b1:b4:81:86:a9:3c:2e:4b:58:2b:39:1b:c3:62:9e:7e:a6:
         5c:71:67:79:16:db:66:ca:53:90:59:14:f3:b3:04:07:35:9f:
         14:2f:ff:d1:5c:06:eb:d6:47:7a:c6:ab:d3:44:ef:a7:00:0c:
         93:75:6d:87:e2:08:88:7d:4a:4b:61:b6:f4:2f:b8:a3:37:32:
         d1:f7:73:c2:57:5a:bb:95:c2:78:b4:c2:59:cd:63:64:06:0f:
         9d:77:c6:08:42:aa:2f:e9:a7:09:15:5f:e3:99:e7:de:3a:7d:
         7b:a2:da:61:45:21:f2:8a:6d:b7:b4:54:bf:73:bc:03:2c:df:
         27:f0:00:6f:2e:26:bc:df:e3:0b:47:97:06:65:9a:67:7b:68:
         b4:db:ac:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBEywRtDCHCWzvE0i7reYUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODI3MTk1NTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk1N2U4ZmE5YjdmOTkxZDNhMGE3YmJkOGM0OGI0M2YyMzYzMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZfdCh60ENReTDolJ7P5WZmWDlb
zn5NBcynoL2NNqFq/EmwUjnCzIoheUtE3YoA7GJs7iTsF+neqmshwkbBZPNNmqQL
rhJzBiuZ5Pl7lrK+umuK/9d29cvWoPvlhvSe9bW4FdUgF7jUH+21eASPeZBxFAVS
+/GBjc4ao3ZBv/02OPvmGoOxGSn1RXq+wNXfq9qq8xn0gs+eMfnNnP4PnMcXYFv8
EodUuG8s1uHDJOG+m17cJMM2jaPnhQnpYDAZEcmu9OCvI9lq//UYb0VxksP0SfpQ
jR39wzE9sGUTKTfs8mOVfeFWUuoqRcBBU6G3RjSeSUCO6tPwyOMzB88zGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO+Vfo+pt/mR06Cnu9jEi0PyNjCnMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvNzVWLWo2bTMtWkhUb0tlNzJNU0xRX0kyTUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaYAQ/g
MA0GCSqGSIb3DQEBCwUAA4IBAQCTGWYBahd0Mma+GotDxmqLRv+hozeWynhBzFON
pC2fQfYXiwdVUg6sCguhW7LX9KVYvLAL5Lb6/j+jYh7TA/zPmjEYDSgmYev9pfXQ
Q9TEV4uKKoM5Wbmi8oWAmiG1hLEm/HZoNBPj7Z+vmyuYsbSBhqk8LktYKzkbw2Ke
fqZccWd5FttmylOQWRTzswQHNZ8UL//RXAbr1kd6xqvTRO+nAAyTdW2H4giIfUpL
Ybb0L7ijNzLR93PCV1q7lcJ4tMJZzWNkBg+dd8YIQqov6acJFV/jmefeOn17otph
RSHyim23tFS/c7wDLN8n8ABvLia83+MLR5cGZZpne2i026zY
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:45 2026 by rpki-client