Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6V_-OQ_gbI2iOyb6rXfUKK5sjEk.roa
File:                     6V_-OQ_gbI2iOyb6rXfUKK5sjEk.roa (raw, json)
Hash identifier:          GSNbph8uZ1jsFkiu4zknJ8jv4awHBxnSzVyJ03wxCxo=
Subject key identifier:   E9:5F:FE:39:0F:E0:6C:8D:A2:3B:26:FA:AD:77:D4:28:AE:6C:8C:49
Certificate issuer:       /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial:       01A013C76294217B12A6C828332BEE9BDB6A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6V_-OQ_gbI2iOyb6rXfUKK5sjEk.roa
Signing time:             Tue 18 Aug 2026 07:30:29 +0000
ROA not before:           Tue 18 Aug 2026 07:30:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     219051
IP address blocks:        82.152.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:13:c7:62:94:21:7b:12:a6:c8:28:33:2b:ee:9b:db:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
        Validity
            Not Before: Aug 18 07:30:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e95ffe390fe06c8da23b26faad77d428ae6c8c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:27:38:c4:b5:81:f6:ec:1e:17:e5:34:41:
                    27:53:6b:47:79:dc:4d:2c:39:db:16:d2:f3:50:f2:
                    a8:1b:5a:cf:f6:f2:21:a8:75:42:b1:9d:09:3c:d8:
                    12:ac:1a:4d:6e:8f:0a:90:1c:a4:2f:d7:43:2a:b6:
                    3f:c0:4f:85:da:95:b9:e1:da:b3:c6:d9:e9:ca:96:
                    12:c0:1b:7c:0d:8b:6b:49:7d:76:ff:d3:b9:cf:ea:
                    17:7a:5c:8f:d6:1c:f4:7f:5a:aa:31:91:36:9d:32:
                    f5:db:05:b2:76:09:93:27:5f:d4:e4:ba:63:fc:b5:
                    be:9c:f1:da:0b:c1:8e:d6:63:44:3d:3b:70:18:f0:
                    44:3d:0f:66:11:2c:05:c9:96:e0:59:6e:03:7c:f8:
                    31:a3:a3:05:90:87:f5:26:74:71:ad:fc:16:84:43:
                    83:83:b4:ea:7a:15:f4:93:c8:b8:47:be:24:f8:38:
                    30:9d:96:1f:ca:18:e5:c7:54:d5:09:a6:24:06:5c:
                    f9:a0:78:c7:11:4a:4a:35:31:66:79:1c:05:ad:6d:
                    ce:20:ed:3a:bf:2d:8c:51:b2:67:74:95:66:15:72:
                    fc:99:ab:cb:0c:bf:bd:ad:96:f7:fa:49:85:6e:e4:
                    43:0c:40:bc:ba:d8:7e:0d:fa:9e:61:c5:9a:16:c9:
                    19:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:FE:39:0F:E0:6C:8D:A2:3B:26:FA:AD:77:D4:28:AE:6C:8C:49
            X509v3 Authority Key Identifier:
                keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6V_-OQ_gbI2iOyb6rXfUKK5sjEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:74:69:e4:8f:84:91:ec:b0:6e:59:ec:d3:d0:9a:48:75:90:
         a6:76:f3:cf:a2:b4:c8:03:0a:c0:cf:7c:66:af:10:c5:68:93:
         87:71:e7:f4:ce:37:39:17:ec:c3:02:6f:ad:f5:66:18:4a:22:
         9c:5b:75:d6:63:8c:ec:1d:5f:ab:d5:ba:49:d4:39:0a:e9:17:
         06:51:67:ea:3c:e6:f5:35:95:cf:7d:4f:e6:2e:7a:31:41:8f:
         ca:fb:ce:4e:57:8c:df:cd:46:ae:00:35:1a:32:fe:d7:f7:26:
         98:7d:9a:d4:52:8a:08:a6:69:2a:9e:5d:dd:d1:22:39:1e:f7:
         15:f3:be:ce:23:92:f7:8d:d2:15:ca:39:98:80:77:b8:fb:24:
         ec:6e:9a:a0:44:8a:a4:1f:aa:cc:40:ac:8e:00:aa:ef:93:e4:
         b1:33:a1:53:0a:a6:45:e2:00:62:6c:f7:33:88:84:56:bc:ab:
         74:7c:6f:25:aa:db:31:9f:ac:c2:fe:4d:ae:4f:ed:89:81:83:
         f0:e2:b8:bb:4c:58:da:69:9e:2d:c6:95:57:49:c2:65:27:ca:
         fd:c2:c0:b6:eb:01:78:fc:be:fd:b3:18:90:17:f4:cd:cc:df:
         26:7a:57:56:8f:03:1c:c6:7e:32:ce:5a:b0:56:4c:ce:c6:97:
         99:43:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:21 2026 by rpki-client