Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/JP2E_UJFi_eEzACBA8u2c0uDfb8.roa
File:                     JP2E_UJFi_eEzACBA8u2c0uDfb8.roa (raw, json)
Hash identifier:          YGH1JcJafoyWgqhD6Mi4OsdAWnJ/Ak1uDrRgAPydk/s=
Subject key identifier:   24:FD:84:FD:42:45:8B:F7:84:CC:00:81:03:CB:B6:73:4B:83:7D:BF
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       019F283891CA85CD413EEFA36B0E78507008
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/JP2E_UJFi_eEzACBA8u2c0uDfb8.roa
Signing time:             Fri 03 Jul 2026 13:43:43 +0000
ROA not before:           Fri 03 Jul 2026 13:43:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212477
IP address blocks:        82.206.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:38:91:ca:85:cd:41:3e:ef:a3:6b:0e:78:50:70:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Jul  3 13:43:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24fd84fd42458bf784cc008103cbb6734b837dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:64:7c:4d:43:5e:c7:7a:37:58:3b:12:eb:
                    ca:0c:1c:6f:b1:aa:b3:9a:c3:13:b8:67:bd:8c:5b:
                    2b:6d:a4:58:4c:e0:cf:28:2b:a2:fc:df:e5:a4:2f:
                    62:a1:b1:b6:f4:b0:89:6f:40:e4:70:47:e1:46:36:
                    d5:d1:6b:8b:f4:83:3a:0d:db:d7:f3:e1:08:f0:15:
                    3c:29:6b:6d:dc:12:de:35:90:74:08:30:aa:14:4c:
                    cc:60:a1:d3:e0:4e:04:1c:b9:5c:5b:84:62:48:b9:
                    00:61:24:1c:8a:b8:23:8a:ac:5b:aa:3f:ff:8b:c7:
                    73:07:e9:5b:4f:15:a3:60:09:cb:09:83:87:70:1e:
                    4d:c6:d3:d1:dc:8b:d2:e9:9b:d8:32:c7:70:ed:23:
                    8f:d2:bf:7c:6a:55:9a:b4:67:39:1b:02:63:dc:33:
                    d2:3e:d1:0e:64:3e:9d:a2:de:92:66:20:e7:a8:2a:
                    da:48:29:52:ef:c4:32:95:7a:17:22:dc:93:e5:34:
                    74:88:91:5a:f4:8b:a5:38:c4:ae:ae:49:b9:bf:76:
                    08:df:3b:ba:c0:10:40:41:78:2c:50:d6:da:42:2f:
                    b6:78:61:79:23:39:94:8c:7d:72:ab:a1:32:a4:95:
                    c3:48:f3:59:aa:d0:44:95:28:d8:0c:c0:c3:01:ea:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:84:FD:42:45:8B:F7:84:CC:00:81:03:CB:B6:73:4B:83:7D:BF
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/JP2E_UJFi_eEzACBA8u2c0uDfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:f7:f9:18:c2:85:ad:29:1f:65:35:c7:97:b8:39:e4:5c:
         d1:41:c8:a7:92:96:e5:fb:ac:27:0d:c2:b1:a5:b8:21:b7:16:
         d0:84:1e:f1:ed:a1:c5:d2:e8:e2:97:be:19:2b:39:27:65:dd:
         17:ce:8a:38:7c:76:af:dd:03:0d:b9:45:13:b0:5f:0f:c4:87:
         ae:84:8f:43:74:9d:40:d9:15:75:58:0f:f6:52:04:d4:a2:f2:
         43:25:c9:b2:8c:bf:16:7e:cb:e7:a9:ec:30:7e:c2:e3:b3:e4:
         6e:cb:4b:a3:21:0c:d9:88:1f:ba:a6:1d:9b:40:9f:e1:a8:d9:
         1f:82:92:5c:d1:45:50:d0:e3:d8:4a:9e:9b:8c:45:f5:ec:fa:
         58:b9:e4:38:a3:27:42:41:dc:d6:a6:bf:84:f8:38:76:d5:4f:
         fd:dc:ff:23:c0:bf:d3:b5:66:4d:bf:b5:63:d3:25:f8:d5:3f:
         7e:32:f7:bb:56:e6:55:09:bd:ef:74:3c:32:15:a3:0b:aa:3d:
         6c:25:7d:98:f2:f8:14:76:8c:d1:09:f8:ae:01:78:22:f9:37:
         9e:f9:c8:a6:5a:bf:65:61:00:97:5c:7f:86:f0:6f:58:f6:c8:
         89:7b:0c:de:7c:b7:74:07:9f:a4:c4:7c:1c:b6:b9:e5:31:50:
         6f:b6:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:52 2026 by rpki-client