Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Wyp_MsVtZn1vn2s87cwTC1gTPeQ.roa
File:                     Wyp_MsVtZn1vn2s87cwTC1gTPeQ.roa (raw, json)
Hash identifier:          fm9/sWs7sBuK3LkkTdcyfLr1zzRdcZPNRiKF4q6aA50=
Subject key identifier:   5B:2A:7F:32:C5:6D:66:7D:6F:9F:6B:3C:ED:CC:13:0B:58:13:3D:E4
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       01A0F73A2857BB33EF4C3F5F52B7F6F93E18
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Wyp_MsVtZn1vn2s87cwTC1gTPeQ.roa
Signing time:             Thu 01 Oct 2026 11:29:38 +0000
ROA not before:           Thu 01 Oct 2026 11:29:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218955
IP address blocks:        82.206.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:3a:28:57:bb:33:ef:4c:3f:5f:52:b7:f6:f9:3e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Oct  1 11:29:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b2a7f32c56d667d6f9f6b3cedcc130b58133de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:ab:67:a4:f3:aa:a0:11:44:52:83:63:10:
                    67:7e:1f:0e:cc:9d:f2:8d:ab:23:24:b9:ab:79:68:
                    60:af:df:4a:9d:40:ba:79:8e:e9:8e:1e:d7:7e:ba:
                    a6:a4:67:09:0f:2a:39:7e:93:d0:bf:a3:65:76:9b:
                    1f:fa:b8:79:2c:46:33:49:c2:6d:4d:93:e7:d0:7b:
                    17:d2:c2:ed:9b:62:97:00:83:49:2a:f2:76:bf:ff:
                    2c:6f:fa:84:19:54:9d:e5:8a:36:59:8c:69:cc:e0:
                    f1:27:5a:68:b4:f2:3a:2a:a3:b8:a1:b9:1b:ae:ae:
                    43:ad:0c:62:9a:b4:c0:68:9e:47:4c:61:15:73:e5:
                    8f:fe:6a:00:9d:e2:49:d5:e4:da:4b:15:16:1a:63:
                    2b:1d:a7:c7:26:35:49:0b:11:73:60:3c:0f:81:3d:
                    1d:70:05:65:65:4d:ba:35:e8:bc:38:3a:10:25:d6:
                    0b:f3:4a:c9:b3:a6:98:37:a3:7d:bc:d7:36:e6:49:
                    10:7a:8c:b6:f7:c1:f3:04:65:ad:ef:a0:00:c5:8d:
                    f2:d0:c1:d4:59:95:8f:d3:87:dd:1f:8c:46:04:b5:
                    98:45:cf:97:58:b6:11:15:36:68:57:60:8c:60:a4:
                    c2:78:5d:7c:96:a4:06:ad:eb:8b:78:45:26:7a:24:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:7F:32:C5:6D:66:7D:6F:9F:6B:3C:ED:CC:13:0B:58:13:3D:E4
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Wyp_MsVtZn1vn2s87cwTC1gTPeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:20:5a:aa:5d:27:83:bf:49:6d:46:9b:11:41:9f:fa:fd:fc:
         f6:ca:67:e5:78:d3:78:e4:ed:97:7a:ad:39:12:cc:b7:be:3d:
         d0:fe:a3:23:14:ba:56:16:c8:9f:69:a0:4c:54:ff:11:59:3e:
         54:5c:40:b6:61:c6:12:a9:f6:7f:e4:2d:e7:52:b7:74:ac:bf:
         84:59:b3:62:ce:d8:bb:51:1b:cf:aa:39:e3:e7:c2:39:55:64:
         2c:b7:89:ba:ac:1d:01:b4:99:3e:eb:a7:2b:f3:78:69:9f:46:
         ef:89:5c:69:69:7b:72:b8:79:d4:41:8d:25:8b:ce:49:b6:7d:
         4d:fa:6b:eb:d6:96:d5:c7:21:98:f0:8c:05:5c:4c:cf:4e:15:
         ef:78:60:b8:a3:88:29:78:e9:4a:f9:34:82:c0:cb:94:53:2b:
         2c:5c:2f:fd:7f:1a:60:1c:70:22:f4:ec:10:d5:45:59:e0:f7:
         2f:3c:d5:e8:3e:16:10:bd:d6:9b:aa:b2:72:cb:6d:22:d7:7e:
         02:20:f8:da:46:20:34:e6:06:e9:7b:38:3c:4c:7c:55:be:90:
         ec:1a:92:a0:72:fc:11:fd:9c:f7:92:20:65:a5:10:a3:bc:e0:
         69:72:1f:80:c5:3c:3d:fd:d8:4d:e5:b4:04:96:d0:04:2f:90:
         46:1c:9b:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD3OihXuzPvTD9fUrf2+T4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYxMDAxMTEyOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjJhN2YzMmM1NmQ2NjdkNmY5ZjZiM2NlZGNjMTMwYjU4MTMzZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiICrZ6TzqqARRFKDYxBnfh8OzJ3y
jasjJLmreWhgr99KnUC6eY7pjh7XfrqmpGcJDyo5fpPQv6Nldpsf+rh5LEYzScJt
TZPn0HsX0sLtm2KXAINJKvJ2v/8sb/qEGVSd5Yo2WYxpzODxJ1potPI6KqO4obkb
rq5DrQximrTAaJ5HTGEVc+WP/moAneJJ1eTaSxUWGmMrHafHJjVJCxFzYDwPgT0d
cAVlZU26Nei8ODoQJdYL80rJs6aYN6N9vNc25kkQeoy298HzBGWt76AAxY3y0MHU
WZWP04fdH4xGBLWYRc+XWLYRFTZoV2CMYKTCeF18lqQGreuLeEUmeiSXSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFsqfzLFbWZ9b59rPO3MEwtYEz3kMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvV3lwX01zVnRabjF2bjJzODdjd1RDMWdUUGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUs4DMA0G
CSqGSIb3DQEBCwUAA4IBAQA0IFqqXSeDv0ltRpsRQZ/6/fz2ymfleNN45O2Xeq05
Esy3vj3Q/qMjFLpWFsifaaBMVP8RWT5UXEC2YcYSqfZ/5C3nUrd0rL+EWbNizti7
URvPqjnj58I5VWQst4m6rB0BtJk+66cr83hpn0bviVxpaXtyuHnUQY0li85Jtn1N
+mvr1pbVxyGY8IwFXEzPThXveGC4o4gpeOlK+TSCwMuUUyssXC/9fxpgHHAi9OwQ
1UVZ4PcvPNXoPhYQvdabqrJyy20i134CIPjaRiA05gbpezg8THxVvpDsGpKgcvwR
/Zz3kiBlpRCjvOBpch+AxTw9/dhN5bQEltAEL5BGHJse
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:41:00 2026 by rpki-client