Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SlwxRgteWLJK8VLjUNPLoSFcaiU.roa
File:                     SlwxRgteWLJK8VLjUNPLoSFcaiU.roa (raw, json)
Hash identifier:          VOCzuanpiQ7ztNpR6dXXHTwz8B0qzAu0jcvy2+pPzLU=
Subject key identifier:   4A:5C:31:46:0B:5E:58:B2:4A:F1:52:E3:50:D3:CB:A1:21:5C:6A:25
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019FB35F501A2E487CAD3F4A86EC57F08E53
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SlwxRgteWLJK8VLjUNPLoSFcaiU.roa
Signing time:             Thu 30 Jul 2026 14:13:15 +0000
ROA not before:           Thu 30 Jul 2026 14:13:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     272871
IP address blocks:        185.226.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b3:5f:50:1a:2e:48:7c:ad:3f:4a:86:ec:57:f0:8e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jul 30 14:13:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a5c31460b5e58b24af152e350d3cba1215c6a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:5f:a3:fe:7c:a2:6d:9f:17:a4:e9:9d:0f:
                    70:bd:fa:06:17:4b:83:58:f9:d4:15:9f:ce:d4:d6:
                    1d:aa:82:9a:79:ee:75:e1:e5:2b:47:5b:00:fa:dc:
                    d9:e0:e7:76:1b:35:6e:68:d4:00:2f:76:a4:ee:7a:
                    6a:a7:42:66:7c:98:32:98:5d:b3:af:4f:f2:5f:d2:
                    dd:03:3b:f7:71:c5:73:3d:1b:b3:c5:23:17:92:b0:
                    68:89:5c:50:9a:c0:71:58:07:e5:ae:62:48:94:d1:
                    df:2b:f1:dd:cb:ac:f4:0a:8a:4b:1f:35:ab:5d:04:
                    d6:a0:c5:52:38:c7:69:b8:b6:39:46:f1:ed:a7:69:
                    e0:31:4e:99:e3:3f:b6:43:9c:dd:d8:d4:6e:9f:a0:
                    3f:e2:58:62:41:08:ad:b9:ea:88:1b:1e:db:d5:ec:
                    60:79:59:df:e7:52:3d:51:35:59:eb:4e:25:ff:f9:
                    94:87:d2:96:ef:96:aa:c4:d0:68:78:99:7f:54:dd:
                    29:5a:0c:c9:a7:c9:f8:a4:86:ba:03:36:ea:4b:5e:
                    70:f9:7f:07:c9:8d:8b:32:a6:69:9b:0f:8c:e4:e0:
                    6d:05:d6:ea:cd:80:9e:a9:d6:b3:51:d8:a8:04:00:
                    bc:e7:6e:17:f6:75:e5:4d:76:72:ab:05:56:06:d7:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:31:46:0B:5E:58:B2:4A:F1:52:E3:50:D3:CB:A1:21:5C:6A:25
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SlwxRgteWLJK8VLjUNPLoSFcaiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:60:ce:04:aa:7f:83:94:7e:72:00:36:88:aa:4d:a1:96:54:
         0a:b0:bc:ec:7c:83:4e:d1:f0:da:22:2b:a1:08:0d:9c:13:98:
         6e:ed:82:a1:27:75:de:cf:96:d5:33:c8:4e:1a:d6:b7:38:e7:
         ae:38:f0:1c:eb:0c:d1:cd:b3:dc:14:ef:f7:43:eb:17:0b:4e:
         e2:52:26:78:00:45:87:e0:87:91:c4:7a:d2:00:2d:ae:e3:e9:
         a0:34:24:98:fa:f2:c9:01:05:e5:cd:63:57:0c:a1:31:34:7a:
         42:72:a5:cd:05:2f:4c:68:e6:00:97:b0:d5:29:2b:40:d3:d3:
         54:50:6d:32:f2:d9:3f:b2:a7:1b:35:fb:16:fd:1e:e1:17:4f:
         9a:9a:3b:21:49:30:6c:3b:75:a7:af:c2:8a:6e:62:9d:dc:1e:
         79:44:0b:d3:12:63:7f:12:c2:af:c0:8e:25:c6:22:38:e7:9d:
         95:51:65:89:df:e1:64:b6:71:5a:ff:35:16:4e:b1:63:28:59:
         79:1c:c7:0c:52:61:12:ca:41:fd:b7:d9:a9:1a:19:a0:59:d0:
         fe:e3:c8:6d:70:90:e5:e4:65:cd:f5:d4:2c:8a:51:a9:6f:a3:
         f3:8a:f2:07:d9:6f:38:83:de:8d:ab:6a:08:77:3f:a0:8e:2a:
         ba:87:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:00 2026 by rpki-client