Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ww0U6jgesHWaM0sVGWPvEm1lVeE.roa
File:                     ww0U6jgesHWaM0sVGWPvEm1lVeE.roa (raw, json)
Hash identifier:          L1YM/yOMcjTnb5kp4owA4ULzc75Xca4wAGWjvievv+0=
Subject key identifier:   C3:0D:14:EA:38:1E:B0:75:9A:33:4B:15:19:63:EF:12:6D:65:55:E1
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       01A115E70E9107B38560C59EA2F15F7F8529
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ww0U6jgesHWaM0sVGWPvEm1lVeE.roa
Signing time:             Wed 07 Oct 2026 10:27:06 +0000
ROA not before:           Wed 07 Oct 2026 10:27:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214677
IP address blocks:        2a14:c380:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:e7:0e:91:07:b3:85:60:c5:9e:a2:f1:5f:7f:85:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Oct  7 10:27:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c30d14ea381eb0759a334b151963ef126d6555e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:0f:07:9f:f1:59:ff:19:26:d9:73:be:33:
                    47:f0:61:2a:94:f4:90:13:41:5e:7d:08:b1:41:1d:
                    30:f9:e1:e0:c6:ba:3e:a2:e5:a0:ed:0e:60:cd:19:
                    b5:fe:c1:71:0c:1f:a7:1e:38:4e:d2:e2:5c:d2:ec:
                    9f:eb:e1:9a:8a:e7:67:c5:1b:9b:07:7e:a6:a2:3b:
                    f9:80:78:e7:f0:43:f1:cd:61:d5:ae:fa:1e:95:e1:
                    a0:ed:94:ce:9c:24:36:a1:34:7e:ea:a4:84:8e:98:
                    fe:71:e9:bb:aa:fb:6c:6a:bb:82:cf:01:48:ce:76:
                    a5:a6:23:d0:de:e1:0a:41:16:9e:ec:23:3a:05:7b:
                    9a:01:53:8d:54:c3:1d:3b:9a:67:79:ff:5b:4b:26:
                    8e:e8:c8:e4:04:f1:e6:3a:c0:66:80:f2:c5:3c:db:
                    4c:9c:76:fa:85:f7:68:0b:bb:27:75:fd:00:3a:58:
                    91:48:1a:ab:23:83:38:d4:38:13:26:f6:12:99:84:
                    be:d2:78:d2:fa:8d:3d:10:14:6a:f8:02:99:ad:3e:
                    8f:f0:74:3b:73:53:4c:ba:a9:8d:d7:44:05:78:9f:
                    68:b2:2f:4d:c4:ab:05:df:a6:eb:d3:88:b0:a6:1f:
                    96:4e:9b:b8:cc:22:e2:d4:7e:62:fe:84:94:4a:bf:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:14:EA:38:1E:B0:75:9A:33:4B:15:19:63:EF:12:6D:65:55:E1
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/ww0U6jgesHWaM0sVGWPvEm1lVeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:74:04:70:a0:cd:7a:7d:da:37:68:9f:1f:9c:e7:6e:e1:88:
         18:5a:1c:55:b8:96:fe:fb:73:df:3e:fd:6b:cc:b1:4a:c7:bf:
         41:04:1a:e9:0e:45:11:82:31:0f:4d:ed:9e:1a:d9:e4:f8:9f:
         eb:8a:97:6f:58:35:e9:99:8e:1f:63:bb:a8:e2:29:20:2c:9c:
         2e:1b:90:d8:0e:50:6e:23:4a:dd:02:ca:95:dc:4c:3d:3c:1a:
         35:bd:8b:27:4c:28:61:dc:a2:13:28:fe:9e:b3:1d:31:4c:78:
         34:df:ed:8e:a0:46:3e:10:f3:45:e1:9f:8a:1a:93:0c:8a:aa:
         53:28:d8:b4:50:57:a5:06:6e:29:57:2f:ab:19:8b:41:f7:81:
         a3:46:54:b3:5c:a2:39:e7:3a:dc:17:17:69:ec:06:ec:6b:7e:
         6e:a9:28:93:9b:d1:2f:a5:8d:ef:68:1f:5f:83:1e:78:be:a9:
         67:c3:ec:2e:b9:91:43:d6:73:ad:77:34:32:50:3d:92:d5:72:
         ab:5f:f4:8f:e9:d2:95:aa:a7:0f:05:6e:6c:eb:93:6c:02:ba:
         b0:04:ce:0d:ae:b0:68:ae:24:5d:12:06:e9:ca:3b:2e:a0:a1:
         d7:d5:ec:78:8d:fb:0a:6a:ec:09:15:2e:73:1c:c6:1f:87:da:
         d8:e0:81:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaEV5w6RB7OFYMWeovFff4UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYxMDA3MTAyNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzBkMTRlYTM4MWViMDc1OWEzMzRiMTUxOTYzZWYxMjZkNjU1NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkAPB5/xWf8ZJtlzvjNH8GEqlPSQ
E0FefQixQR0w+eHgxro+ouWg7Q5gzRm1/sFxDB+nHjhO0uJc0uyf6+GaiudnxRub
B36mojv5gHjn8EPxzWHVrvoeleGg7ZTOnCQ2oTR+6qSEjpj+cem7qvtsaruCzwFI
znalpiPQ3uEKQRae7CM6BXuaAVONVMMdO5pnef9bSyaO6MjkBPHmOsBmgPLFPNtM
nHb6hfdoC7sndf0AOliRSBqrI4M41DgTJvYSmYS+0njS+o09EBRq+AKZrT6P8HQ7
c1NMuqmN10QFeJ9osi9NxKsF36br04iwph+WTpu4zCLi1H5i/oSUSr8t1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMMNFOo4HrB1mjNLFRlj7xJtZVXhMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvd3cwVTZqZ2VzSFdhTTBzVkdXUHZFbTFsVmVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAk
MA0GCSqGSIb3DQEBCwUAA4IBAQBDdARwoM16fdo3aJ8fnOdu4YgYWhxVuJb++3Pf
Pv1rzLFKx79BBBrpDkURgjEPTe2eGtnk+J/ripdvWDXpmY4fY7uo4ikgLJwuG5DY
DlBuI0rdAsqV3Ew9PBo1vYsnTChh3KITKP6esx0xTHg03+2OoEY+EPNF4Z+KGpMM
iqpTKNi0UFelBm4pVy+rGYtB94GjRlSzXKI55zrcFxdp7Absa35uqSiTm9EvpY3v
aB9fgx54vqlnw+wuuZFD1nOtdzQyUD2S1XKrX/SP6dKVqqcPBW5s65NsArqwBM4N
rrBoriRdEgbpyjsuoKHX1ex4jfsKauwJFS5zHMYfh9rY4IE6
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:18 2026 by rpki-client