Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/V5x_TDOcEQMi0DC59Zaiu7QVU58.roa
File:                     V5x_TDOcEQMi0DC59Zaiu7QVU58.roa (raw, json)
Hash identifier:          KDxAqkqLHW7NSSNCJUDT8SUkan4p23GYEih3xFMCTNM=
Subject key identifier:   57:9C:7F:4C:33:9C:11:03:22:D0:30:B9:F5:96:A2:BB:B4:15:53:9F
Certificate issuer:       /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial:       019F2368CB7574666898250CA5EF761FB6AC
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/V5x_TDOcEQMi0DC59Zaiu7QVU58.roa
Signing time:             Thu 02 Jul 2026 15:18:18 +0000
ROA not before:           Thu 02 Jul 2026 15:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202578
IP address blocks:        185.233.201.0/24 maxlen: 24
                          193.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 11:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:cb:75:74:66:68:98:25:0c:a5:ef:76:1f:b6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
        Validity
            Not Before: Jul  2 15:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=579c7f4c339c110322d030b9f596a2bbb415539f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:4c:8b:a6:9e:dc:68:8c:80:c0:bc:ce:dd:
                    dd:84:dd:dc:d2:6b:81:c3:e1:cf:54:d2:98:b4:4c:
                    52:a8:fb:7b:38:7a:ec:4f:c7:82:0f:68:d6:8e:7f:
                    4b:2e:c5:ca:7d:8e:74:35:21:69:ca:9c:c7:d8:e2:
                    8b:f5:cd:fa:59:07:ce:40:09:e9:b6:19:2b:17:56:
                    82:b9:21:3c:eb:ce:fc:bb:a6:a2:dd:11:64:25:3f:
                    0c:0c:d7:df:6f:4a:bf:24:8d:30:df:c2:8b:12:23:
                    43:36:8d:76:68:72:50:3e:b4:b9:05:12:01:ff:02:
                    d7:b3:90:c4:cb:76:1b:ce:7f:0f:85:0c:e5:30:34:
                    0d:cc:cb:be:c7:81:db:46:a1:25:95:ce:48:9a:2a:
                    62:3c:6d:15:65:87:ab:2f:2b:3d:80:fa:95:6b:2a:
                    12:3d:e3:99:5b:fb:9a:55:75:b4:8f:fc:bb:0a:8d:
                    81:5d:23:4a:c4:c9:8e:fc:e9:d9:2d:1b:28:e9:26:
                    df:7e:a2:98:38:d3:40:0e:bf:b4:6d:75:fe:74:7d:
                    d3:7e:d0:9b:8e:a2:0f:fe:2c:aa:35:4a:ed:35:4d:
                    4b:c9:c2:01:8d:df:49:bc:f3:3e:6d:9d:4b:a9:d6:
                    09:a4:21:a6:92:20:13:0e:bc:3a:eb:f7:25:90:f0:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9C:7F:4C:33:9C:11:03:22:D0:30:B9:F5:96:A2:BB:B4:15:53:9F
            X509v3 Authority Key Identifier:
                keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/V5x_TDOcEQMi0DC59Zaiu7QVU58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.201.0/24
                  193.34.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:33:81:27:e1:4c:49:fb:fc:c5:f6:e6:45:1a:b6:bf:7b:
         c0:ad:dd:ec:f0:e7:74:0f:ab:9b:4c:66:13:1a:ec:60:64:b2:
         4e:3c:a9:54:d5:52:02:88:fc:ae:c2:fa:a1:7f:07:bf:65:ff:
         0f:74:0d:e7:78:af:e2:d5:54:14:00:c6:80:0f:02:26:37:0a:
         43:5d:2e:3c:ba:25:d6:d2:f6:92:32:f1:61:58:cd:33:96:58:
         58:af:76:c5:0e:2e:23:55:3c:95:84:ec:7e:20:8f:24:44:3a:
         e9:75:dc:23:7c:73:b1:cd:43:d2:cb:a5:6c:6b:18:59:e5:dc:
         04:54:f0:d3:0a:8a:4e:c5:6a:79:c3:20:83:86:ce:7a:b7:a4:
         99:59:81:30:99:95:48:0b:27:9b:8c:2b:d7:3c:6c:a7:aa:9c:
         9c:1d:f0:eb:ae:e3:6b:43:91:e1:8b:40:cc:cc:50:c0:cb:0b:
         71:94:f5:38:da:2a:9a:0a:af:f3:e9:8f:b5:9f:10:ac:71:0a:
         d1:29:1b:7c:66:a1:9c:91:25:72:9a:0e:06:f4:65:7d:92:ba:
         76:88:09:68:72:14:73:52:ea:c7:35:ed:91:03:25:cd:8d:6b:
         b5:bf:af:c4:e6:b2:30:a4:0f:16:37:44:ce:ae:91:4e:b3:77:
         7e:0c:b7:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaMt1dGZomCUMpe92H7asMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzljN2Y0YzMzOWMxMTAzMjJkMDMwYjlmNTk2YTJiYmI0MTU1MzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAredMi6ae3GiMgMC8zt3dhN3c0muB
w+HPVNKYtExSqPt7OHrsT8eCD2jWjn9LLsXKfY50NSFpypzH2OKL9c36WQfOQAnp
thkrF1aCuSE86878u6ai3RFkJT8MDNffb0q/JI0w38KLEiNDNo12aHJQPrS5BRIB
/wLXs5DEy3Ybzn8PhQzlMDQNzMu+x4HbRqEllc5ImipiPG0VZYerLys9gPqVayoS
PeOZW/uaVXW0j/y7Co2BXSNKxMmO/OnZLRso6SbffqKYONNADr+0bXX+dH3TftCb
jqIP/iyqNUrtNU1LycIBjd9JvPM+bZ1LqdYJpCGmkiATDrw66/clkPAR3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFecf0wznBEDItAwufWWoru0FVOfMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvVjV4X1RET2NFUU1pMERDNTlaYWl1N1FWVTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuenJAwQA
wSLqMA0GCSqGSIb3DQEBCwUAA4IBAQA/DDOBJ+FMSfv8xfbmRRq2v3vArd3s8Od0
D6ubTGYTGuxgZLJOPKlU1VICiPyuwvqhfwe/Zf8PdA3neK/i1VQUAMaADwImNwpD
XS48uiXW0vaSMvFhWM0zllhYr3bFDi4jVTyVhOx+II8kRDrpddwjfHOxzUPSy6Vs
axhZ5dwEVPDTCopOxWp5wyCDhs56t6SZWYEwmZVICyebjCvXPGynqpycHfDrruNr
Q5Hhi0DMzFDAywtxlPU42iqaCq/z6Y+1nxCscQrRKRt8ZqGckSVymg4G9GV9krp2
iAlochRzUurHNe2RAyXNjWu1v6/E5rIwpA8WN0TOrpFOs3d+DLfn
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:41 2026 by rpki-client