Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/W-m52T0Z08ZrHduyI7qeLJtkavg.roa
File:                     W-m52T0Z08ZrHduyI7qeLJtkavg.roa (raw, json)
Hash identifier:          2uTxxd+gJUWVWBJ1knmrNyKxA15WrS87ku3rDDp8keE=
Subject key identifier:   5B:E9:B9:D9:3D:19:D3:C6:6B:1D:DB:B2:23:BA:9E:2C:9B:64:6A:F8
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       019CE669F9D7FD611336DD642A427760870A
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/W-m52T0Z08ZrHduyI7qeLJtkavg.roa
Signing time:             Fri 13 Mar 2026 08:57:10 +0000
ROA not before:           Fri 13 Mar 2026 08:57:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        83.175.167.0/24 maxlen: 24
                          83.175.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:69:f9:d7:fd:61:13:36:dd:64:2a:42:77:60:87:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Mar 13 08:57:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5be9b9d93d19d3c66b1ddbb223ba9e2c9b646af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:19:f6:0b:ae:0f:d1:46:3b:54:46:08:02:
                    22:b1:79:d5:d0:9e:6a:62:fe:e6:b4:b6:af:97:b3:
                    ee:50:7e:3f:24:ea:c0:fc:a2:a8:0f:73:41:69:b9:
                    f9:c5:cf:28:05:6e:05:40:86:4f:47:a9:b2:ae:00:
                    54:a9:36:02:86:54:00:e2:06:9e:88:4e:1e:91:53:
                    01:bc:38:09:a0:7e:59:6f:76:79:12:cd:60:d4:f3:
                    e8:1f:a1:75:13:ac:47:b7:02:6a:5d:1a:31:15:a6:
                    d8:f9:eb:67:be:e6:4f:56:b0:e6:e2:cd:e9:31:51:
                    a5:84:64:e1:55:2c:09:ea:05:2d:76:4b:2c:cd:1b:
                    9a:8e:d5:bf:6c:f4:9e:39:33:c9:28:9a:70:e5:33:
                    e3:cc:80:4c:90:98:07:81:b8:76:4a:96:d0:d0:ef:
                    ea:33:29:5a:00:d0:28:74:bb:36:36:da:ee:86:8d:
                    b8:8b:99:ba:0d:5d:78:17:45:78:8d:dd:3a:7f:d9:
                    a9:fb:12:97:6e:4b:b9:6f:c8:ad:01:c9:2b:16:40:
                    1f:4f:ef:2c:a3:aa:43:ae:b6:08:26:81:99:9c:31:
                    03:03:1e:8c:43:3c:9a:84:dc:7c:aa:a8:fb:2a:99:
                    db:fe:ec:68:70:b8:d8:8c:b4:78:4e:1f:7b:67:32:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:B9:D9:3D:19:D3:C6:6B:1D:DB:B2:23:BA:9E:2C:9B:64:6A:F8
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/W-m52T0Z08ZrHduyI7qeLJtkavg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.175.167.0/24
                  83.175.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:ed:7c:20:8b:46:5a:04:cd:de:7e:e1:e4:46:9d:2e:d8:
         b3:dc:6e:e4:1a:b1:20:79:59:72:84:6d:e3:76:fe:17:4d:b1:
         1e:ef:5e:7e:59:e2:7e:c8:6e:3a:c2:20:fa:cc:3a:1c:69:3b:
         bd:4f:57:00:a5:7f:72:a2:dc:82:3b:66:16:19:5f:6d:eb:fd:
         20:49:01:c0:88:39:d1:56:b6:84:73:33:0e:f2:ec:3a:5d:7b:
         6d:c9:8e:72:3d:6a:c1:06:47:d8:03:74:b9:10:ec:da:68:e5:
         ab:78:98:76:08:78:a5:6e:be:0b:12:ea:53:50:38:ad:2a:af:
         ac:7b:2e:a2:b6:5b:c9:f3:ab:e6:6b:d8:da:6f:78:af:ef:18:
         a9:a9:2e:63:ab:a3:05:e0:3e:67:7b:fc:f0:7c:7c:e8:6b:90:
         b6:8d:c8:fe:19:9f:24:94:ba:80:12:70:e7:fa:6c:ae:e8:fa:
         21:08:de:02:17:0d:22:eb:82:e2:a3:b2:c6:ec:d4:7f:24:20:
         0f:ce:64:c8:82:a3:f4:d6:76:73:9d:b8:64:b1:f0:f9:60:3b:
         8d:01:2f:08:e4:5d:b5:68:d3:a8:f0:cb:88:74:48:74:ef:2b:
         70:09:51:b4:cd:30:69:2f:13:37:db:d0:ef:a1:36:6a:46:27:
         40:2e:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:14:10 2026 by rpki-client