Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/1-d0EzD_xLIqzMlsEXcYUv8Qm4Fw.roa
File:                     1-d0EzD_xLIqzMlsEXcYUv8Qm4Fw.roa (raw, json)
Hash identifier:          vkYZzriyCh3MEQIztDIv+ZWHWM7RxuYQH8iuHA/eI5s=
Subject key identifier:   F9:DD:04:CC:3F:F1:2C:8A:B3:32:5B:04:5D:C6:14:BF:C4:26:E0:5C
Certificate issuer:       /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial:       019E5E57DBFDE6D0AB7D413F9D422A8B335B
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/1-d0EzD_xLIqzMlsEXcYUv8Qm4Fw.roa
Signing time:             Mon 25 May 2026 08:54:36 +0000
ROA not before:           Mon 25 May 2026 08:54:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212809
IP address blocks:        94.20.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5e:57:db:fd:e6:d0:ab:7d:41:3f:9d:42:2a:8b:33:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
        Validity
            Not Before: May 25 08:54:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f9dd04cc3ff12c8ab3325b045dc614bfc426e05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:93:c3:2a:66:d0:b2:a3:22:54:82:9f:76:
                    24:9f:8a:e4:58:0a:93:dc:65:47:13:e2:16:6d:48:
                    11:23:68:a2:b9:43:02:0a:0a:11:24:36:97:8f:07:
                    ea:fd:46:b5:3d:e6:41:26:4d:c3:b3:b8:f8:0b:c4:
                    4d:07:5a:66:c7:4f:3f:6b:89:d2:16:7b:3c:ef:d7:
                    63:09:94:c3:03:41:ff:b4:9f:44:7a:7e:fe:a4:2a:
                    16:84:44:73:93:42:12:71:85:61:e9:53:6b:53:b0:
                    45:66:6d:c1:96:b7:5a:97:9d:ad:09:ab:3c:e2:69:
                    21:92:19:02:40:1e:2e:22:35:c9:f3:9f:a3:86:7f:
                    2d:c9:f6:a2:2a:97:f0:a6:46:37:2d:20:5e:65:92:
                    38:c0:ea:6d:de:ef:98:b8:b0:48:bf:52:d7:3f:b4:
                    15:d9:9a:00:5d:9b:81:b4:06:fd:ad:af:e0:d9:9c:
                    e0:e4:44:bc:6b:8b:b9:8d:51:34:f7:19:1e:eb:bb:
                    50:6a:dc:b4:e9:ad:64:1a:73:a3:cf:36:ff:fa:cd:
                    ce:69:e7:04:bc:72:14:38:0e:62:0a:a2:d6:69:00:
                    87:21:0a:68:9a:4c:b8:a6:71:02:cf:73:61:0c:e1:
                    b4:59:c4:c2:48:5e:58:46:aa:d0:88:a6:e3:f9:be:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DD:04:CC:3F:F1:2C:8A:B3:32:5B:04:5D:C6:14:BF:C4:26:E0:5C
            X509v3 Authority Key Identifier:
                keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/1-d0EzD_xLIqzMlsEXcYUv8Qm4Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.20.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:ce:bd:93:de:d1:44:fa:83:c9:7b:21:5f:ea:28:dd:b9:
         7a:6d:00:6a:32:ed:aa:4b:c1:29:7f:8a:94:cd:0d:92:0f:40:
         b7:df:64:59:cd:6d:b8:67:98:8b:b0:da:e3:5e:9f:e1:fa:a1:
         ce:78:c2:b4:cf:61:ca:2f:f9:de:38:2f:fd:cc:b4:1c:28:3d:
         ed:e7:1a:44:fd:59:23:6a:7b:66:a1:c6:7b:52:74:e2:e0:a3:
         52:f4:18:ee:b5:3e:78:b8:c6:8f:eb:b2:b1:48:37:ae:d8:e5:
         4d:e8:17:39:7f:2a:5d:e3:ad:4d:2d:2f:51:63:16:9c:3f:bb:
         52:93:56:29:3f:82:01:92:e4:74:4a:3b:79:8e:dc:10:2a:27:
         78:43:04:69:ec:c8:c2:ee:0a:6e:9f:19:40:60:50:90:3f:19:
         36:a7:8e:ca:21:2d:d2:02:f7:6e:7e:5e:57:ce:53:91:de:ec:
         90:b3:a5:21:4a:93:bb:51:f8:52:8d:fa:9a:64:d0:62:c7:ea:
         89:da:ae:32:79:f5:4b:74:8f:dc:91:e7:8d:78:69:ff:71:f2:
         21:da:cc:4a:b2:88:31:7f:72:d7:aa:31:8a:1d:4e:2c:fe:c8:
         d9:d5:42:e2:c7:c1:55:c8:38:ea:a5:39:7e:c6:f5:32:0e:63:
         ae:5a:ee:cb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ5eV9v95tCrfUE/nUIqizNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0
NjZhOWIwHhcNMjYwNTI1MDg1NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWRkMDRjYzNmZjEyYzhhYjMzMjViMDQ1ZGM2MTRiZmM0MjZlMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkCTwypm0LKjIlSCn3Ykn4rkWAqT
3GVHE+IWbUgRI2iiuUMCCgoRJDaXjwfq/Ua1PeZBJk3Ds7j4C8RNB1pmx08/a4nS
Fns879djCZTDA0H/tJ9Een7+pCoWhERzk0IScYVh6VNrU7BFZm3Blrdal52tCas8
4mkhkhkCQB4uIjXJ85+jhn8tyfaiKpfwpkY3LSBeZZI4wOpt3u+YuLBIv1LXP7QV
2ZoAXZuBtAb9ra/g2Zzg5ES8a4u5jVE09xke67tQaty06a1kGnOjzzb/+s3OaecE
vHIUOA5iCqLWaQCHIQpomky4pnECz3NhDOG0WcTCSF5YRqrQiKbj+b7VkwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPndBMw/8SyKszJbBF3GFL/EJuBcMB8GA1UdIwQY
MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt
MTZmMTQ2YmVmOTk1LzEvMS1kMEV6RF94TElxek1sc0VYY1lVdjhRbTRGdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzEvYjEwNTYyLTI2YTEtNDY0NS04ZDJiLTE2ZjE0NmJlZjk5
NS8xL0xpVXFSM0pDLTBYeUM3Q0FJS1FEb3J0R2Fwcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF4UujAN
BgkqhkiG9w0BAQsFAAOCAQEABczOvZPe0UT6g8l7IV/qKN25em0AajLtqkvBKX+K
lM0Nkg9At99kWc1tuGeYi7Da416f4fqhznjCtM9hyi/53jgv/cy0HCg97ecaRP1Z
I2p7ZqHGe1J04uCjUvQY7rU+eLjGj+uysUg3rtjlTegXOX8qXeOtTS0vUWMWnD+7
UpNWKT+CAZLkdEo7eY7cEConeEMEaezIwu4Kbp8ZQGBQkD8ZNqeOyiEt0gL3bn5e
V85Tkd7skLOlIUqTu1H4Uo36mmTQYsfqidquMnn1S3SP3JHnjXhp/3HyIdrMSrKI
MX9y16oxih1OLP7I2dVC4sfBVcg46qU5fsb1Mg5jrlruyw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:44 2026 by rpki-client