Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vjSSEJ2G3-O2FaEjxKc0S3CZgjs.roa
File:                     vjSSEJ2G3-O2FaEjxKc0S3CZgjs.roa (raw, json)
Hash identifier:          3+AI5KgnOCRR+96Wt79IVh22M7lCng62mWQX+ujXOfE=
Subject key identifier:   BE:34:92:10:9D:86:DF:E3:B6:15:A1:23:C4:A7:34:4B:70:99:82:3B
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019EDAB49BC4E1CD3BACF3532F14D7BBB669
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vjSSEJ2G3-O2FaEjxKc0S3CZgjs.roa
Signing time:             Thu 18 Jun 2026 12:28:49 +0000
ROA not before:           Thu 18 Jun 2026 12:28:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4849
IP address blocks:        31.57.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 00:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:da:b4:9b:c4:e1:cd:3b:ac:f3:53:2f:14:d7:bb:b6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jun 18 12:28:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be3492109d86dfe3b615a123c4a7344b7099823b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:fe:6f:80:cb:89:1b:48:6b:50:4f:76:ea:
                    58:2f:e3:c3:21:2a:81:4e:66:44:62:4b:a4:7c:64:
                    98:28:41:5a:c7:c1:a6:97:2a:04:e2:93:c2:45:e4:
                    88:52:5e:9b:8c:fe:90:5a:75:38:b9:6f:b8:54:17:
                    88:ad:5d:67:09:d1:c4:a5:e5:de:72:33:db:06:33:
                    bb:87:73:88:d1:84:a5:77:aa:69:65:fa:50:b0:4e:
                    c3:ad:d2:5e:a5:e6:0c:66:70:55:93:75:89:6b:75:
                    ec:44:5e:77:b0:f7:44:01:42:2b:bc:a9:81:02:84:
                    ad:8b:1a:0b:4f:8d:4e:2b:b2:fe:21:4c:59:b8:c8:
                    f5:2a:0d:cc:46:7b:2c:5f:9c:9e:ce:88:63:69:35:
                    4c:1b:8d:02:27:ff:5c:7a:be:8e:b3:c1:6a:90:86:
                    e6:9f:b3:93:75:98:cc:4c:21:ca:28:fa:b7:8c:cc:
                    05:5d:fc:ac:da:b7:93:30:af:b8:ce:d9:c3:13:e4:
                    85:44:e2:0b:e1:4e:fa:a2:69:5a:fc:8a:0f:90:a7:
                    de:b3:7c:0c:b1:d5:80:0d:5b:f6:ce:99:6e:e6:f8:
                    13:e1:23:49:64:d6:7a:82:a4:67:8c:e4:a4:ce:98:
                    b2:aa:c3:d1:7c:b1:c5:5f:ab:43:53:15:d3:51:29:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:34:92:10:9D:86:DF:E3:B6:15:A1:23:C4:A7:34:4B:70:99:82:3B
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vjSSEJ2G3-O2FaEjxKc0S3CZgjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:66:b5:04:86:5a:cd:7b:9c:22:1a:7c:fb:84:a8:c5:92:09:
         e7:aa:55:b5:c5:c7:6c:09:c4:19:71:a8:75:3f:57:c0:f1:ec:
         74:5e:63:99:f2:4e:6d:c4:fd:82:44:c4:71:b7:53:9d:91:65:
         2e:34:28:03:da:d6:d9:04:46:1a:7b:12:87:b3:59:6a:b3:2f:
         b3:62:34:64:0f:73:55:ce:b7:ee:6d:58:6e:bc:88:15:a1:a5:
         a7:7c:ff:9e:2d:0c:3c:22:5c:9b:9a:1b:4d:87:34:22:cd:09:
         db:a4:c7:45:1a:f3:a6:25:0e:2b:61:44:2d:3c:00:34:1c:e5:
         19:8d:6a:9d:d7:33:ee:16:57:93:e6:a4:fe:77:79:af:61:28:
         13:bf:48:73:67:d2:38:b0:e4:a3:b5:0a:39:95:84:6a:29:36:
         0d:9a:7a:57:55:7c:06:62:c5:b5:e6:94:33:43:6d:c1:d1:b9:
         20:b7:f3:f2:e4:f7:84:d1:56:53:cb:c4:92:1a:f3:81:0e:3b:
         3a:b5:a4:69:61:fe:5e:3d:be:cb:d9:54:a2:59:32:a3:fb:73:
         81:99:5e:95:d0:ca:23:72:89:87:46:9a:5a:0c:a1:8f:bd:51:
         81:c2:9f:81:78:42:40:ac:4b:93:63:b7:ab:19:c8:b7:fb:cf:
         03:2c:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 10:46:10 2026 by rpki-client