Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/J6DZoTvprPfmv-eoK_and1NmilI.roa
File:                     J6DZoTvprPfmv-eoK_and1NmilI.roa (raw, json)
Hash identifier:          Wnd9Db+bmTqy773BlO6co1/N10+s7o7rZ26dAZbQxkk=
Subject key identifier:   27:A0:D9:A1:3B:E9:AC:F7:E6:BF:E7:A8:2B:F6:A7:77:53:66:8A:52
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       01A1106217AD6FA2ADDD79EFF55EBF79ECFB
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/J6DZoTvprPfmv-eoK_and1NmilI.roa
Signing time:             Tue 06 Oct 2026 08:43:46 +0000
ROA not before:           Tue 06 Oct 2026 08:43:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218496
IP address blocks:        213.166.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:62:17:ad:6f:a2:ad:dd:79:ef:f5:5e:bf:79:ec:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Oct  6 08:43:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27a0d9a13be9acf7e6bfe7a82bf6a77753668a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:bb:e7:7d:8d:a7:e4:d2:10:d1:b6:05:bc:
                    34:72:f6:83:98:53:13:23:e1:c6:20:9e:aa:c9:b1:
                    84:a2:96:aa:5f:69:f7:3c:00:59:09:a6:7b:da:79:
                    4b:ee:5b:e0:83:b3:c4:4f:af:46:e9:41:7a:af:1f:
                    4a:86:c6:fc:96:df:67:d2:1d:de:c0:47:f2:56:c5:
                    91:62:8b:8d:e5:cf:9c:20:61:7b:62:d2:cf:11:80:
                    8d:7f:ba:62:08:65:4c:1d:80:20:5e:50:df:45:a1:
                    72:da:0d:a8:0b:e1:37:52:50:31:af:61:6b:4c:b5:
                    19:62:e6:65:fa:7c:d7:5e:ad:bd:75:fe:77:66:09:
                    b9:4f:0d:5e:21:a2:8e:8b:9a:a7:54:a5:b1:d1:ee:
                    35:d2:7d:10:68:ac:6a:33:48:ca:69:8a:84:21:4c:
                    42:f1:03:f2:bb:76:b5:03:e3:01:7f:e4:00:a5:38:
                    81:7b:1e:89:50:bc:4a:79:dc:0f:10:23:da:71:0d:
                    af:1b:7b:47:31:5e:6b:f8:5e:ce:c8:ea:c6:25:9b:
                    22:f9:96:d4:65:62:06:62:99:cc:01:d7:29:2c:a0:
                    9f:0f:d6:b7:86:9d:3d:42:f9:d5:26:ed:5b:b3:23:
                    99:4b:82:52:06:b7:08:11:6b:97:ff:c4:de:34:1a:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:D9:A1:3B:E9:AC:F7:E6:BF:E7:A8:2B:F6:A7:77:53:66:8A:52
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/J6DZoTvprPfmv-eoK_and1NmilI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.166.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:68:01:8d:7c:a5:42:08:c1:74:0d:69:17:d1:00:ec:ba:dd:
         1b:58:e4:d0:5d:63:53:5f:4d:38:cf:d1:ad:d0:d2:ea:74:7f:
         ec:07:29:de:c0:78:8c:1c:51:34:2e:30:bb:9c:18:46:cc:6c:
         3b:c8:58:cf:dd:c2:bc:52:89:b6:1e:2f:00:24:9c:9a:fb:b0:
         46:9f:60:32:29:53:8c:bd:e7:10:83:d7:26:81:f8:b7:3c:29:
         72:df:42:82:cd:e2:0d:f6:2b:5e:9c:a5:21:f9:97:52:6a:62:
         1a:23:6f:e7:f3:4d:74:95:f3:64:ee:a5:23:d6:90:e4:cb:10:
         75:ec:e7:61:49:19:2d:fa:18:7f:65:57:f9:99:8b:2a:4c:d6:
         3a:d3:b4:19:28:0e:91:c8:e9:f7:eb:d9:72:1f:02:91:d8:d8:
         c0:04:00:45:70:86:9c:ac:47:0a:1e:31:6c:4c:d0:ff:0f:cd:
         07:6f:15:86:bf:24:67:e0:d8:7e:f7:9b:02:e4:8f:3b:a2:a1:
         73:f8:89:97:da:2d:31:e3:d6:6b:1c:1a:97:80:94:cc:13:32:
         0e:4c:09:96:4e:5f:d7:a1:0f:0d:26:e4:8c:c1:7d:0e:f5:86:
         45:72:f3:6e:a5:cf:a6:60:e0:50:ab:c3:79:30:7a:b2:6f:e8:
         6f:82:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:24:30 2026 by rpki-client