Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DzxJPfyVWd4l0XA7BdIfhjAevh8.roa
File:                     DzxJPfyVWd4l0XA7BdIfhjAevh8.roa (raw, json)
Hash identifier:          0+C4r8sApxIWq4Z/8i6lD9TpvM2f0vroTqvfGTRC2Ig=
Subject key identifier:   0F:3C:49:3D:FC:95:59:DE:25:D1:70:3B:05:D2:1F:86:30:1E:BE:1F
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       01A115F962063AAD9A18746222A754614C2B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DzxJPfyVWd4l0XA7BdIfhjAevh8.roa
Signing time:             Wed 07 Oct 2026 10:47:07 +0000
ROA not before:           Wed 07 Oct 2026 10:47:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     274433
IP address blocks:        178.19.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:f9:62:06:3a:ad:9a:18:74:62:22:a7:54:61:4c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Oct  7 10:47:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f3c493dfc9559de25d1703b05d21f86301ebe1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:3d:19:0d:7f:61:a2:5f:88:28:c1:e7:00:
                    96:f1:81:d8:94:5a:94:88:4a:8c:03:b3:b4:01:d8:
                    a3:3c:26:36:4f:04:ad:fa:a4:2d:bd:30:d4:db:30:
                    ab:3a:af:52:ad:af:72:b8:db:be:b6:77:4b:2f:67:
                    41:fa:eb:d7:d0:06:f4:c1:5e:26:3d:3b:d8:3a:2e:
                    35:82:09:22:87:d1:93:3f:77:11:69:7e:7e:e0:fe:
                    92:93:0b:ad:0e:fb:4b:7c:63:16:39:1c:db:62:f5:
                    56:b4:35:c3:b5:91:8d:89:b3:df:4c:fa:49:6e:c5:
                    00:f7:53:b6:37:08:32:2e:ae:d6:5a:77:cd:cb:b1:
                    26:88:b1:d7:db:eb:7f:d0:b3:a4:fa:54:c6:c4:f7:
                    51:71:e6:30:ec:c4:2f:4e:ba:6e:6f:af:82:c5:a6:
                    9a:99:55:79:f2:88:38:63:fa:b6:1b:6b:ef:97:25:
                    a1:2f:66:22:f7:fc:d1:0f:7e:58:b4:c3:c4:47:d4:
                    93:21:45:0f:64:34:2d:27:b6:e2:a8:30:73:af:db:
                    c4:66:a7:03:f9:78:47:85:dc:e1:c1:2c:6e:3a:7e:
                    67:10:4a:16:e8:36:3f:f9:dc:71:79:61:43:98:c8:
                    59:c4:91:f3:f2:76:2e:42:67:89:0e:ec:6c:a3:e9:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3C:49:3D:FC:95:59:DE:25:D1:70:3B:05:D2:1F:86:30:1E:BE:1F
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DzxJPfyVWd4l0XA7BdIfhjAevh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.19.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3b:4f:2a:83:8f:38:f2:6f:e8:78:6a:60:32:cc:14:70:39:
         ad:b6:38:ea:70:d1:ee:f9:44:a3:8f:0e:41:ee:5d:d0:36:6e:
         cd:28:4e:ae:a9:4e:2b:dc:92:c5:35:a0:10:b0:20:a8:99:42:
         f1:57:d1:59:f3:fe:fa:55:92:04:bd:bd:19:b9:48:2a:90:5f:
         35:fa:a2:62:37:cc:3d:e2:02:11:ee:fc:bb:08:ff:8e:d5:13:
         b4:48:27:3b:2d:91:30:65:36:f0:b1:32:94:ef:f8:e8:bf:84:
         10:cf:b9:24:7b:6e:bc:68:27:e2:2d:d6:e6:68:86:7a:dd:7d:
         10:34:45:ab:8e:eb:da:a0:c8:c3:ab:bd:87:92:b5:3c:f8:f1:
         33:1b:f5:46:f4:cc:3c:29:79:de:50:9d:ed:ae:d5:01:58:5e:
         d3:ff:39:23:a3:2e:aa:34:7c:16:da:3b:a0:ab:f3:d0:3a:57:
         05:ae:c6:f2:d2:92:38:4a:f8:e6:12:1f:d8:1e:d7:30:fe:67:
         9a:d6:0b:24:f9:15:e7:6d:f6:34:11:7b:30:d7:01:c9:27:fd:
         a8:b7:49:fc:40:21:ed:29:e1:25:a4:31:cd:04:6d:d6:5b:ad:
         e0:4e:24:0c:2c:92:4d:97:61:dc:80:33:bd:14:1c:b8:dd:d3:
         cf:6a:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:27 2026 by rpki-client