Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/m0_gbn3feXvXHw_cYO_Nfm2Xxfc.roa
File:                     m0_gbn3feXvXHw_cYO_Nfm2Xxfc.roa (raw, json)
Hash identifier:          KJNXj9uAflfe61jQCgnfBrsgkg1fFmoywQfWErB1+KU=
Subject key identifier:   9B:4F:E0:6E:7D:DF:79:7B:D7:1F:0F:DC:60:EF:CD:7E:6D:97:C5:F7
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       019C75858E358CA410C95D652A7FFEA91F39
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/m0_gbn3feXvXHw_cYO_Nfm2Xxfc.roa
Signing time:             Thu 19 Feb 2026 10:50:12 +0000
ROA not before:           Thu 19 Feb 2026 10:50:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        93.177.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Feb 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:75:85:8e:35:8c:a4:10:c9:5d:65:2a:7f:fe:a9:1f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Feb 19 10:50:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b4fe06e7ddf797bd71f0fdc60efcd7e6d97c5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:8d:4d:71:d3:4d:a4:71:ae:30:4a:21:bf:
                    c0:4f:82:c4:90:fa:ec:6e:5b:74:26:2a:a2:e4:6d:
                    bd:5e:0d:bf:12:66:a6:2f:a4:f2:5c:95:4e:12:fa:
                    95:b4:44:9a:83:bb:d6:6b:7e:79:e4:32:8a:66:c0:
                    90:05:b9:48:be:43:72:af:2e:cc:4e:fe:c5:b9:82:
                    4c:3b:13:81:ff:65:b0:ab:87:55:16:f6:23:d8:7d:
                    92:98:b4:ca:a7:7b:79:48:97:70:86:2d:38:fd:41:
                    c3:89:47:23:0c:01:7c:84:8b:1d:71:be:0f:60:c1:
                    a9:f9:eb:32:0d:63:d0:71:78:bc:c5:fd:3d:72:4c:
                    55:1c:2a:18:de:98:b0:fd:fb:84:0c:f6:1e:d8:08:
                    db:1b:9a:ef:ec:ce:94:d0:2e:55:70:14:c5:36:96:
                    4c:0e:09:5e:62:5c:f1:d3:c2:5d:cf:f9:76:7f:07:
                    73:b7:83:87:8f:89:47:08:cd:1a:a5:78:13:78:45:
                    c9:ee:57:0d:1d:38:e0:93:0f:b2:d7:23:b2:73:96:
                    33:b7:35:25:7c:ce:dc:8d:d5:89:f2:02:b0:ac:44:
                    fe:31:02:48:4a:7c:6e:11:50:c3:b0:f9:57:b5:43:
                    ce:87:fd:13:c0:98:c4:a2:41:36:9a:34:61:f9:a2:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:E0:6E:7D:DF:79:7B:D7:1F:0F:DC:60:EF:CD:7E:6D:97:C5:F7
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/m0_gbn3feXvXHw_cYO_Nfm2Xxfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:7d:84:1a:79:40:ba:51:4c:20:62:8a:42:51:47:6a:09:
         b0:f1:47:7d:0f:fa:8b:05:ff:ce:f1:92:23:01:7b:d1:d4:a3:
         8d:ab:06:f2:1d:46:d2:b0:72:07:e8:96:bd:b2:9d:88:4e:70:
         26:9a:7b:1f:c6:76:1c:ae:1a:ff:a2:8b:8e:8a:65:37:aa:9e:
         63:fd:f8:65:cb:0d:1c:99:59:79:a3:72:43:42:c6:bc:f4:14:
         3c:bb:bd:01:c4:12:c4:2a:c2:1c:7e:aa:55:a1:ae:95:5b:c7:
         c0:cb:23:86:dd:b8:b4:ea:88:ad:35:05:90:e8:25:5d:92:13:
         5b:08:52:af:e6:fc:92:10:5f:2a:86:5e:b0:9b:de:9e:92:24:
         2d:74:c0:18:e2:cb:ad:83:de:32:42:ab:89:5b:34:05:87:11:
         04:5f:2f:cc:80:88:23:be:8c:43:54:8a:5e:8e:6b:91:03:e2:
         70:db:8a:c1:f3:ff:86:c4:9b:f3:06:fd:74:1d:3b:9d:b4:96:
         4f:b1:a1:31:3c:84:59:bf:c2:77:27:f6:58:e6:15:c0:9d:ac:
         40:fb:bc:4f:02:57:ae:87:84:87:81:7a:d9:1f:f4:d1:ed:11:
         16:57:c0:0f:0c:96:fc:8f:fa:58:25:6e:32:fd:ef:7e:9f:a9:
         e3:2b:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:04 2026 by rpki-client