Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AbLNuHpvjGDAGgEwmDJzPeWRyrk.roa
File:                     AbLNuHpvjGDAGgEwmDJzPeWRyrk.roa (raw, json)
Hash identifier:          sA8zd9IcRg66lhOXqNOfcfygzayk7SWGGsrmutoj1aE=
Subject key identifier:   01:B2:CD:B8:7A:6F:8C:60:C0:1A:01:30:98:32:73:3D:E5:91:CA:B9
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019E3B2D87231F7DE71FC9CCD12D12ECA605
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AbLNuHpvjGDAGgEwmDJzPeWRyrk.roa
Signing time:             Mon 18 May 2026 13:01:39 +0000
ROA not before:           Mon 18 May 2026 13:01:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     272314
IP address blocks:        92.118.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Jun 2026 23:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3b:2d:87:23:1f:7d:e7:1f:c9:cc:d1:2d:12:ec:a6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: May 18 13:01:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01b2cdb87a6f8c60c01a01309832733de591cab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:e7:85:02:94:0b:eb:a3:ee:fc:66:6c:32:
                    a6:84:df:29:d1:56:46:b5:70:98:d9:6d:11:d7:9f:
                    c3:6e:c2:d2:12:16:dd:0b:5f:49:96:9e:f6:89:38:
                    77:ce:b4:e0:1f:be:f2:76:84:a5:7d:cd:d3:34:21:
                    b5:f7:b6:31:4c:96:02:54:33:fd:32:f9:f1:d8:ef:
                    8b:ee:dd:d7:aa:9d:ff:ea:db:a5:22:de:6f:8b:62:
                    a7:3a:e3:74:ca:92:16:65:d3:b5:c8:9f:1e:c2:c4:
                    b1:5a:ee:67:de:0e:24:60:70:e5:3c:9c:37:ed:00:
                    36:6a:36:4b:03:48:d1:bc:61:e4:66:fe:16:48:26:
                    28:39:d6:e1:fa:84:95:08:ba:14:b1:a8:67:bc:e0:
                    fd:ec:42:c8:8d:93:d4:a4:7f:a2:fb:56:fb:4f:cb:
                    fa:c4:d9:bd:a1:44:0a:21:e9:c0:48:6f:3e:8b:1e:
                    b2:82:da:6f:16:fd:d9:81:73:08:4d:74:5a:ae:d7:
                    ef:1e:ed:5a:b3:3a:64:ea:07:14:9e:52:9a:61:46:
                    bb:51:59:35:58:89:e2:89:77:a1:13:b7:a6:f6:f7:
                    c1:b5:64:f2:f4:54:32:82:31:1e:e6:bd:74:33:e2:
                    f1:1c:81:08:f8:6d:76:26:6d:ca:76:70:7e:a7:85:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:CD:B8:7A:6F:8C:60:C0:1A:01:30:98:32:73:3D:E5:91:CA:B9
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/AbLNuHpvjGDAGgEwmDJzPeWRyrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:cd:33:c2:c8:5b:48:4b:37:7a:b5:99:e5:be:97:8c:f0:
         9d:93:48:3c:79:68:c5:6d:2c:9d:8d:db:52:51:2a:4f:e4:f3:
         e8:2b:b8:00:10:49:b6:28:51:4e:3a:5a:2f:60:f9:33:6b:e1:
         12:64:06:5b:cf:89:13:db:95:08:83:6d:09:59:99:f1:5c:55:
         48:1c:3d:58:9f:32:5d:1a:b2:3a:c1:91:74:d3:8d:33:c2:74:
         57:84:2d:58:1b:94:a7:6a:2f:2c:ac:18:b0:5c:9b:d7:cc:a5:
         18:ff:22:0a:16:33:40:4f:a1:f1:06:c3:ae:46:a8:e0:11:bd:
         01:f4:40:00:0c:d5:ca:8e:16:75:81:2d:0c:8b:ff:b5:7f:a1:
         63:ef:4e:cd:e3:3d:32:7e:87:07:4e:05:3f:b8:86:ac:7c:95:
         36:2b:c5:03:c2:e0:b4:dc:41:a1:22:72:eb:28:99:89:62:5e:
         4a:5f:34:0a:25:fc:15:fa:15:cb:0b:44:a4:bc:05:4f:c6:f7:
         33:16:b4:31:ac:90:0b:15:49:29:db:2b:a9:4b:c7:50:49:79:
         3a:f6:ea:c2:6f:84:55:a0:cd:e8:fb:9f:c6:76:d8:d2:94:5b:
         61:39:49:71:a9:aa:4c:17:d0:c2:8b:0d:20:8e:8d:48:a3:08:
         e3:ff:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:44:11 2026 by rpki-client