Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fe6u7JDG48jgBf_DPc3asIDwrHA.roa
File:                     fe6u7JDG48jgBf_DPc3asIDwrHA.roa (raw, json)
Hash identifier:          CXlAGISmvgHV2CDP3YIRVXV9Y0SYEMiW/rQSbievzAc=
Subject key identifier:   7D:EE:AE:EC:90:C6:E3:C8:E0:05:FF:C3:3D:CD:DA:B0:80:F0:AC:70
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019FE0063681D7E2A4BEACF20A861C6A698B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fe6u7JDG48jgBf_DPc3asIDwrHA.roa
Signing time:             Sat 08 Aug 2026 06:18:51 +0000
ROA not before:           Sat 08 Aug 2026 06:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        176.57.48.0/24 maxlen: 24
                          176.57.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Aug 2026 03:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e0:06:36:81:d7:e2:a4:be:ac:f2:0a:86:1c:6a:69:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Aug  8 06:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7deeaeec90c6e3c8e005ffc33dcddab080f0ac70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:af:dc:43:c4:db:34:2f:e0:9e:ae:07:cd:
                    5c:66:4c:84:84:12:18:dc:58:99:50:9d:3f:60:bc:
                    85:5c:98:30:81:9a:51:4c:48:66:f6:7a:4c:26:eb:
                    44:4f:e7:76:f3:96:61:df:22:c0:f1:0a:37:54:9c:
                    b9:c7:5f:9a:52:1c:9d:33:8d:b1:f1:83:aa:8e:f7:
                    04:d1:a3:b8:91:9e:63:52:03:ea:3e:41:a9:ef:cc:
                    39:3f:cc:97:24:60:f9:86:14:a3:c7:dc:92:27:6e:
                    a6:7b:25:51:81:c1:0c:47:ba:ad:c9:27:21:a1:b4:
                    8d:c8:34:8b:11:38:c1:00:20:2e:66:5e:7c:9e:f1:
                    2b:80:b6:1e:58:55:11:18:c5:a5:44:5c:99:e4:30:
                    9c:94:6c:31:f2:96:00:03:5b:9f:b6:f2:51:b0:ae:
                    2b:00:f1:85:1d:71:15:ad:a8:81:a7:93:11:56:04:
                    3f:78:53:7d:9e:47:70:28:58:80:84:df:df:ec:b3:
                    46:93:10:e1:ce:6a:5c:80:c0:61:8d:d9:31:76:65:
                    b2:ff:77:44:23:c1:71:08:9b:bb:1a:20:58:1e:03:
                    3d:c7:ad:57:c3:66:41:ad:17:03:50:e0:ee:4c:ae:
                    3e:69:67:c2:a8:92:1f:1b:d2:9d:b7:9b:6a:f9:44:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EE:AE:EC:90:C6:E3:C8:E0:05:FF:C3:3D:CD:DA:B0:80:F0:AC:70
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fe6u7JDG48jgBf_DPc3asIDwrHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.48.0/24
                  176.57.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:27:25:fe:0b:b0:5f:f0:dc:c4:a6:56:43:a6:51:5b:1a:85:
         f0:f6:d7:20:94:5b:66:a0:2b:00:70:d8:08:d1:6d:2f:03:3c:
         d8:fa:10:77:fc:2d:6e:0a:bd:23:e2:da:61:58:d3:76:f4:e8:
         9d:99:69:05:dd:69:f9:c6:8c:10:5b:69:f2:eb:be:e7:72:d3:
         c9:1a:0e:22:8f:73:b2:a8:79:c8:20:87:67:74:8e:f9:90:cc:
         09:47:f6:1a:8d:01:c4:d6:01:81:56:98:a7:ea:78:e0:9f:ca:
         84:3c:28:90:e7:00:22:fd:f9:ea:fc:ea:ae:fd:55:ae:9e:b3:
         8c:9d:79:4e:a3:f2:e2:26:f5:65:a4:d8:40:21:7f:99:d7:52:
         04:ee:3c:90:dc:6d:6a:ec:98:6c:05:84:a1:1d:a5:45:27:87:
         25:3f:fe:de:b9:0c:9d:6b:7b:c6:1d:a9:f6:d3:5e:85:48:2d:
         a5:b7:33:7e:42:f7:e0:ac:fa:3e:7f:86:3e:6e:c9:06:5f:83:
         27:77:41:fe:09:63:b8:8c:66:fb:22:f3:84:b7:4d:93:91:4c:
         c1:33:dc:ca:47:71:a7:9a:8a:06:36:82:c6:99:a9:06:c9:e0:
         b0:33:53:81:29:22:58:ea:fe:f6:e5:5f:2f:89:ee:c4:0d:c1:
         9a:44:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 09:46:17 2026 by rpki-client