Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rx20RCbE_VaqhHmemw_jgCwaLvM.roa
File:                     Rx20RCbE_VaqhHmemw_jgCwaLvM.roa (raw, json)
Hash identifier:          W2N6Mv+545snx1HXGgsUWMKV2n/U2R3EB824dDo8SE8=
Subject key identifier:   47:1D:B4:44:26:C4:FD:56:AA:84:79:9E:9B:0F:E3:80:2C:1A:2E:F3
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019ECB440EF58B3345A16FE2427344504A0A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rx20RCbE_VaqhHmemw_jgCwaLvM.roa
Signing time:             Mon 15 Jun 2026 12:31:35 +0000
ROA not before:           Mon 15 Jun 2026 12:31:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197974
IP address blocks:        31.56.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Jun 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cb:44:0e:f5:8b:33:45:a1:6f:e2:42:73:44:50:4a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jun 15 12:31:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=471db44426c4fd56aa84799e9b0fe3802c1a2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:8e:33:6b:45:7d:0b:46:c5:af:a9:54:ce:
                    81:c1:12:0e:e2:3d:53:3d:29:01:7b:b9:d5:0a:d7:
                    10:1b:ce:63:83:13:38:90:e1:a3:6a:a6:04:b7:e0:
                    82:9c:29:f5:5e:73:f7:5b:18:2d:07:44:0d:c5:89:
                    3b:17:bf:17:e2:65:44:9c:c4:ea:36:40:e4:41:3e:
                    4f:96:e1:59:58:07:90:b7:4f:43:7f:ab:63:d7:78:
                    93:93:26:b4:d1:41:b9:41:04:a4:e3:38:36:7d:80:
                    98:e1:73:e3:13:4a:fd:dc:26:7c:02:ad:a3:27:51:
                    9e:bc:cc:b9:fa:2a:e2:5a:e3:c8:cb:cb:e1:2a:25:
                    30:20:8e:30:bd:0d:62:30:94:39:a9:87:10:72:54:
                    a4:76:72:7e:cd:4c:db:0f:e3:f2:64:71:83:f7:74:
                    db:09:8d:ab:ca:12:8f:16:6c:36:e1:c5:8b:05:48:
                    38:c3:4c:01:32:f2:2c:ea:f3:2f:f3:d4:7a:5c:90:
                    8d:ba:8a:c6:36:f3:14:8f:fa:ee:05:62:d7:95:48:
                    33:94:24:1a:61:23:0e:1d:43:e4:b8:08:96:20:48:
                    eb:c7:82:78:58:04:10:2e:5d:0e:30:db:4d:33:90:
                    95:db:81:51:84:db:8c:b3:25:a7:05:e2:75:6f:fc:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:B4:44:26:C4:FD:56:AA:84:79:9E:9B:0F:E3:80:2C:1A:2E:F3
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rx20RCbE_VaqhHmemw_jgCwaLvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:e0:35:0d:c0:54:b2:e5:34:e8:9a:a0:ee:d0:6f:50:68:
         e9:5e:66:3e:86:fc:b5:9e:6d:c6:f8:45:4e:df:de:47:2d:46:
         be:b7:d9:f6:ec:1e:41:34:f5:c3:ea:ec:51:4c:84:b5:7c:37:
         07:98:5a:7f:1d:60:55:02:ce:26:7e:9e:69:c4:69:e7:80:b4:
         00:e1:84:bb:0f:9b:bb:07:93:35:be:bb:ac:f8:b6:1b:53:a6:
         d6:7a:43:a8:e5:e1:b2:6a:a1:f5:20:dd:af:c4:5b:98:79:84:
         07:dd:7b:dc:79:c5:36:fd:30:29:e5:16:aa:cc:4c:97:92:4a:
         3b:c5:51:aa:7e:39:e7:ca:fe:2f:79:39:65:64:8f:78:4a:d3:
         0f:36:31:e6:fa:18:cc:c9:26:11:a2:0f:ec:e5:e2:0d:57:26:
         88:3c:90:ca:fe:7c:b5:a9:59:fb:ed:88:31:db:bb:3f:68:3a:
         67:e5:b3:30:2e:e7:15:74:48:04:06:91:9f:1a:83:9b:a4:00:
         60:d8:b5:17:ba:c1:68:69:cf:6d:50:a9:b7:e2:6b:d2:5c:7a:
         7e:8d:be:d2:72:3d:5d:ba:b1:6a:2b:00:50:09:62:f6:4f:32:
         f7:97:29:c7:ec:51:ce:2b:4c:09:67:18:3a:bb:0f:04:fe:82:
         12:c5:e7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:06 2026 by rpki-client