Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/KXyGC29qrMAzOy7hPyA4y-RQuK4.roa
File:                     KXyGC29qrMAzOy7hPyA4y-RQuK4.roa (raw, json)
Hash identifier:          raUVJLpa/Uin1LtZwfZMQtZTj9i0teHFGh8Qpqgiq7s=
Subject key identifier:   29:7C:86:0B:6F:6A:AC:C0:33:3B:2E:E1:3F:20:38:CB:E4:50:B8:AE
Certificate issuer:       /CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Certificate serial:       019F2368B6EE44C8E7A85DEA7AD136DB793F
Authority key identifier: 41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/KXyGC29qrMAzOy7hPyA4y-RQuK4.roa
Signing time:             Thu 02 Jul 2026 15:18:12 +0000
ROA not before:           Thu 02 Jul 2026 15:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44712
IP address blocks:        151.249.104.0/21 maxlen: 24
                          2a01:a8c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:b6:ee:44:c8:e7:a8:5d:ea:7a:d1:36:db:79:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
        Validity
            Not Before: Jul  2 15:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=297c860b6f6aacc0333b2ee13f2038cbe450b8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:ed:01:7d:15:96:87:6f:9b:68:11:a3:e2:
                    95:21:57:48:72:f9:b4:ee:c2:02:71:0f:f1:85:ff:
                    c1:fc:a0:7e:51:a6:00:7b:a9:a4:bc:fb:a4:39:db:
                    03:4b:ff:59:35:15:07:76:3a:c4:2e:55:90:1f:cf:
                    ee:e0:79:47:1e:8a:95:df:f3:8b:44:07:d3:c3:4b:
                    c6:3d:01:e8:9c:b3:f0:bf:ea:8e:e0:1c:f4:6e:4e:
                    02:8c:54:ce:2b:4c:ea:68:5b:66:63:8a:00:a6:43:
                    19:be:9b:6d:9b:c3:f0:38:08:bc:7f:d4:57:f4:97:
                    ca:a1:6d:dc:47:18:89:63:b5:eb:e8:60:99:e7:bc:
                    f1:d9:7b:09:9d:82:73:a9:7c:68:d1:d8:c8:f4:3f:
                    cb:fa:d0:c5:b9:c3:66:48:4b:ad:b0:e3:b8:9c:79:
                    78:bb:d9:9c:a5:bd:d7:d8:07:f8:b9:f6:85:cb:55:
                    2a:8d:9c:70:7c:67:35:cf:37:33:42:44:82:ac:3e:
                    64:44:b0:e6:d8:c5:8f:5d:b2:70:bc:7d:91:b2:03:
                    43:9f:a1:a6:b5:58:b5:f1:f9:1d:b1:9e:2f:e2:03:
                    97:1c:7b:84:da:e4:0f:bd:12:92:38:ff:8a:4d:8c:
                    bd:be:ff:3b:e2:e8:f0:3e:89:23:cb:01:a2:23:0b:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:86:0B:6F:6A:AC:C0:33:3B:2E:E1:3F:20:38:CB:E4:50:B8:AE
            X509v3 Authority Key Identifier:
                keyid:41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/KXyGC29qrMAzOy7hPyA4y-RQuK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.249.104.0/21
                IPv6:
                  2a01:a8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         65:37:74:0b:47:b1:8d:c2:b3:c8:0e:e0:bd:90:f7:53:d8:10:
         17:0d:3c:af:f7:a3:37:46:48:41:02:d2:1b:d1:be:82:18:00:
         51:a8:53:a6:08:72:72:3f:49:11:0b:6c:f9:43:a0:aa:26:6e:
         0c:c8:c6:65:67:8a:c8:ad:71:04:db:ac:4b:54:b3:a5:95:9a:
         69:52:c9:04:80:2f:37:cb:4b:50:9c:ad:4a:37:82:34:fe:88:
         2a:3a:b5:e8:fa:cf:dc:2b:a5:5a:43:67:0a:46:af:2b:00:54:
         c1:7c:87:73:52:cb:5c:37:5b:17:50:d5:fb:7b:8e:0b:78:96:
         5b:54:64:c2:02:41:b1:b2:f6:62:f9:c9:aa:b5:fb:1b:1d:eb:
         48:12:99:38:67:ef:32:5d:87:ce:6e:0d:80:6f:89:1f:7a:96:
         3a:8f:00:e5:5f:05:b1:c6:81:ea:80:c9:a2:5c:d6:79:31:eb:
         65:79:09:47:01:91:9e:ac:b9:52:4d:b0:b6:8c:9a:33:8c:57:
         74:ec:a7:fb:0a:82:bb:c9:aa:b5:ee:e8:fa:4e:c3:7b:c1:4c:
         8c:41:34:e3:23:2b:2d:0c:1d:3e:52:37:64:2b:7e:3d:d9:94:
         1b:45:a8:1d:9a:f5:32:4c:7a:47:72:18:92:11:21:2c:06:8d:
         d6:77:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----