Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Rl6pMcDwCQl5hbWorhzUoHGZA58.roa
File:                     Rl6pMcDwCQl5hbWorhzUoHGZA58.roa (raw, json)
Hash identifier:          BAU/3FwgGaYoK1l4L3FetSkzTspm4uF+M3iqppF2ods=
Subject key identifier:   46:5E:A9:31:C0:F0:09:09:79:85:B5:A8:AE:1C:D4:A0:71:99:03:9F
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       01A129EE73CD6DC114CCC1DDCC87BD5BD1BF
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Rl6pMcDwCQl5hbWorhzUoHGZA58.roa
Signing time:             Sun 11 Oct 2026 07:47:35 +0000
ROA not before:           Sun 11 Oct 2026 07:47:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395954
IP address blocks:        212.100.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:ee:73:cd:6d:c1:14:cc:c1:dd:cc:87:bd:5b:d1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Oct 11 07:47:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=465ea931c0f009097985b5a8ae1cd4a07199039f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:89:10:6b:be:91:af:7e:88:e8:98:ac:b2:
                    f6:ee:fa:ea:82:2b:a3:a4:56:b1:97:8c:be:7d:4d:
                    0c:59:eb:cc:9d:46:ab:45:b4:67:24:b2:27:25:ae:
                    84:c2:35:4c:fc:09:d3:19:65:cb:e8:f7:a0:47:57:
                    ce:ae:f1:fd:23:a3:ac:4f:f4:e7:d1:7d:a6:27:98:
                    89:d1:33:77:4e:e3:cc:ec:fa:95:9a:72:0f:7c:6d:
                    d7:2e:ff:f2:8c:28:2e:2b:dc:69:75:34:93:10:94:
                    46:eb:8c:2f:04:e1:fb:96:33:0a:b0:8f:7e:10:5b:
                    e9:0e:0d:4a:83:20:26:66:77:97:d4:09:50:1d:ac:
                    28:24:78:4b:9d:44:b6:f7:c4:c0:c8:b7:27:a3:45:
                    bf:f3:93:89:37:3b:69:f6:ab:31:c3:59:d7:e2:b6:
                    9f:06:bd:3f:1a:ee:16:fe:d1:17:00:cf:11:5f:9d:
                    be:a2:31:8c:7f:ec:c9:dc:85:0a:38:68:0e:c8:b7:
                    95:f9:14:b6:b0:7b:0c:ff:0f:af:5c:9f:a6:c6:7c:
                    fa:4c:9b:7e:71:68:e2:e1:d2:df:45:a8:18:6b:f0:
                    aa:cf:49:95:fe:a0:c7:7b:56:ce:b1:fc:d2:0c:de:
                    04:29:d2:f1:af:ac:58:39:97:8f:9d:43:5e:86:0a:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:A9:31:C0:F0:09:09:79:85:B5:A8:AE:1C:D4:A0:71:99:03:9F
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Rl6pMcDwCQl5hbWorhzUoHGZA58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:08:5e:02:fd:2a:a0:78:42:ac:d1:f9:91:e1:2b:ad:c7:
         57:e3:a1:25:8b:2d:48:15:61:d0:40:a3:dd:70:82:a7:28:e1:
         25:49:3e:2d:72:63:5f:e2:3f:eb:aa:10:4a:0e:0d:e4:2a:55:
         21:7b:97:78:9e:f6:0b:43:cd:a0:02:de:27:81:8e:f1:83:e2:
         34:2e:c7:d1:4e:75:e2:6d:98:cc:e5:0b:4a:39:0e:5a:07:d2:
         dc:f3:ce:4b:b8:19:38:c9:87:02:69:f9:de:52:09:e1:41:e3:
         84:63:58:a4:eb:4f:6c:39:3b:20:65:ef:82:07:90:29:30:be:
         19:f8:33:71:5c:79:a6:0b:ec:38:68:20:e1:45:5e:d3:64:ba:
         95:ed:12:66:9e:57:94:63:0c:5b:b3:33:2d:a4:9c:83:01:5b:
         40:e8:97:9c:f6:1e:37:ef:df:dc:63:ff:cf:2c:dd:68:96:e2:
         f1:c7:43:67:7f:1d:00:a7:e3:df:7a:c3:db:50:2f:3c:e9:40:
         21:f3:23:b1:35:53:27:6e:b5:e0:42:37:11:87:c5:72:ab:fb:
         df:67:16:9c:47:06:c5:af:cd:b8:2b:03:b7:a1:46:4f:e0:e2:
         14:ce:37:a1:ac:a0:d0:48:e0:93:0e:38:99:52:2d:df:d8:6c:
         c4:7f:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:58 2026 by rpki-client