Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa
File:                     EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa (raw, json)
Hash identifier:          /6Yg37rQGMw7b7aHYe0qmGSvAz6Ym3IQkqAVWCha16Y=
Subject key identifier:   11:5D:10:FB:47:33:03:65:52:58:ED:46:93:8B:DA:62:C3:09:D4:00
Certificate issuer:       /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial:       019F236896B670C74315E2325F42BC7F7AFA
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa
Signing time:             Thu 02 Jul 2026 15:18:04 +0000
ROA not before:           Thu 02 Jul 2026 15:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49338
IP address blocks:        81.4.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:96:b6:70:c7:43:15:e2:32:5f:42:bc:7f:7a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
        Validity
            Not Before: Jul  2 15:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=115d10fb473303655258ed46938bda62c309d400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:8d:00:c4:09:ac:70:65:6a:fd:47:0c:e8:
                    c4:5c:6a:d4:02:a9:f7:c1:17:3a:05:36:0c:26:43:
                    11:93:02:bc:f5:93:8a:2c:c6:fe:85:94:bf:fd:26:
                    70:7f:63:97:54:50:70:72:60:c1:32:b6:8d:63:72:
                    b9:87:c7:f7:ad:e1:28:24:4b:d3:f3:e2:8c:19:f6:
                    21:43:97:cb:f3:08:da:db:1b:e3:e4:6e:bf:69:2c:
                    6c:da:4c:0d:d9:bc:5c:f8:76:53:5e:dc:8f:cf:af:
                    7f:ee:42:3a:21:6c:ce:c3:02:83:86:45:a7:40:db:
                    ea:7a:98:e2:bd:cb:52:9a:aa:89:aa:35:22:6d:95:
                    71:88:47:c7:a8:44:3d:7d:3e:d5:aa:32:ba:48:2e:
                    1d:67:9d:5f:3a:55:08:e1:5d:84:c5:28:44:35:a4:
                    49:40:46:64:d1:7e:9b:18:3f:3c:04:2a:e9:67:67:
                    2e:f4:55:d7:1e:52:09:b6:7f:62:94:d9:fc:4d:5d:
                    d9:cb:09:11:bb:da:44:e1:60:f1:f9:d0:67:7a:b7:
                    54:8a:4a:7d:ec:6b:47:8b:69:e6:8c:96:f5:3f:13:
                    c4:34:1e:6b:9d:71:c1:19:7b:06:1f:84:d4:66:cb:
                    a9:3d:48:cc:32:52:71:e9:2b:09:a7:6d:b8:08:2b:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:10:FB:47:33:03:65:52:58:ED:46:93:8B:DA:62:C3:09:D4:00
            X509v3 Authority Key Identifier:
                keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.4.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:e2:1e:9d:e7:da:7d:3c:14:eb:0e:bc:ee:51:6d:48:a2:
         ee:49:38:c4:de:09:1d:7d:2e:6b:f0:f6:5d:6a:5e:4e:2f:dc:
         26:a0:43:9a:7a:a3:bc:94:a4:38:d9:f8:54:25:d4:9d:34:8c:
         49:2a:5a:be:8a:e4:07:48:dc:8a:cc:ce:2f:63:f8:9c:e4:4f:
         b9:9d:fc:12:c8:54:7d:5b:5f:60:de:c3:25:23:10:9b:92:28:
         61:d6:8f:cb:24:f5:c2:47:0b:7c:66:dc:6b:b6:c9:8d:14:0b:
         08:eb:51:b7:5a:56:c3:34:4b:5b:39:a8:c4:63:4e:87:91:ba:
         34:ac:91:21:3c:30:db:c4:9e:83:ad:4f:e6:3d:59:79:01:6a:
         de:c2:55:26:59:c2:07:3a:c1:56:a9:38:c6:08:c1:4c:24:27:
         04:21:75:87:54:12:6a:46:0f:0a:47:e9:9f:56:cd:9f:22:a7:
         52:99:fb:98:21:31:03:41:31:85:4d:64:12:9f:f9:17:75:14:
         5c:ab:96:c8:d4:a5:ff:fb:f0:8e:63:16:6a:97:54:32:d1:db:
         e7:74:02:0d:78:bc:4a:ba:f7:21:0a:f3:ad:1e:4a:d1:10:a8:
         c0:16:4a:91:d0:7e:90:86:31:2f:4e:48:ae:7e:00:ed:de:e8:
         25:5a:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:28 2026 by rpki-client