Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uybN8XjuaR7_GyDrHfvLIk95_f8.roa
File:                     uybN8XjuaR7_GyDrHfvLIk95_f8.roa (raw, json)
Hash identifier:          TamexhXZwR0ORnAXw/7R6+cGgQQii+1odd+58W95Efo=
Subject key identifier:   BB:26:CD:F1:78:EE:69:1E:FF:1B:20:EB:1D:FB:CB:22:4F:79:FD:FF
Certificate issuer:       /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial:       019F23689623835B540C17BFCD2E38A02CCB
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uybN8XjuaR7_GyDrHfvLIk95_f8.roa
Signing time:             Thu 02 Jul 2026 15:18:04 +0000
ROA not before:           Thu 02 Jul 2026 15:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     32787
IP address blocks:        81.4.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:96:23:83:5b:54:0c:17:bf:cd:2e:38:a0:2c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
        Validity
            Not Before: Jul  2 15:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb26cdf178ee691eff1b20eb1dfbcb224f79fdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:36:9b:6d:ee:72:4f:cf:67:0b:36:b8:8e:
                    45:05:40:68:04:35:39:3e:87:28:aa:4a:01:45:21:
                    43:2b:56:15:0b:ba:7e:ca:7b:a3:3f:88:34:5c:ad:
                    54:61:3b:4b:73:04:a5:29:7c:64:57:01:b2:a6:c7:
                    71:d6:f5:66:a7:3d:2e:4e:58:89:59:19:f7:7b:ac:
                    0b:5f:fc:7b:4e:44:b0:9d:40:ad:7a:a8:fa:6e:60:
                    fe:a6:53:b5:ad:22:19:f5:ae:3c:36:28:59:ae:79:
                    18:76:e5:d8:a2:1f:af:b4:c1:c0:9d:c7:a7:a2:b9:
                    2f:3d:4e:29:3d:9b:fe:41:a1:4f:46:d9:e5:45:8a:
                    4b:d6:9d:77:b6:2b:bc:fe:49:dd:66:50:53:22:ad:
                    44:63:c6:9c:14:00:55:27:26:bd:29:2c:86:d2:2b:
                    b5:5a:13:72:c9:9d:87:e3:6a:8a:57:d5:de:0a:43:
                    c0:b1:bf:68:56:cc:14:b3:df:5a:ab:6f:a2:23:c6:
                    4b:83:8b:de:5b:a2:b7:6e:4f:13:0c:a8:98:d0:db:
                    a1:78:a7:ea:fe:dd:f0:04:b0:e1:59:8c:5b:ef:c9:
                    b5:99:45:f4:0e:d2:92:fa:88:f6:87:5b:8a:90:7a:
                    16:3c:cd:19:76:d2:20:02:1a:36:ea:c4:32:08:db:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:26:CD:F1:78:EE:69:1E:FF:1B:20:EB:1D:FB:CB:22:4F:79:FD:FF
            X509v3 Authority Key Identifier:
                keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uybN8XjuaR7_GyDrHfvLIk95_f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.4.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:e0:bc:5c:6f:6e:fa:e9:20:f3:c1:c9:24:41:0c:06:ef:
         e5:62:c4:8d:a3:1a:b8:a2:59:8a:9a:80:dd:ed:0b:80:b6:a2:
         6c:d4:49:8d:16:bd:05:0a:30:e6:ea:76:e9:8f:6d:e6:fb:d3:
         b5:97:51:8a:67:6e:42:b4:20:fc:e8:be:1d:bb:97:b9:9e:c0:
         87:89:b3:43:71:80:20:8f:72:a5:af:93:35:02:57:29:2e:00:
         c6:35:2a:49:9f:94:db:bf:f9:55:0b:59:8b:b9:fa:8a:22:e4:
         34:6d:29:bb:e2:8b:7c:2a:84:0d:fb:8d:26:0a:4c:68:d6:19:
         e1:8e:95:2a:f2:82:a9:11:fd:8b:a8:d9:94:c8:99:dc:44:11:
         5a:bb:8c:84:11:99:22:ff:d1:55:31:f8:cc:00:b5:42:4b:3a:
         73:39:90:cd:c4:f4:8a:50:13:90:bf:60:93:d3:0b:27:71:6c:
         f2:37:bb:61:7b:df:c3:48:41:08:7c:dc:d7:bc:02:17:5d:d1:
         4d:5d:fa:8f:96:c9:76:de:ce:3a:2a:4a:e4:e8:ef:c7:37:14:
         ee:a9:6a:6d:61:f8:12:47:af:74:eb:13:b0:d6:4f:45:e4:e5:
         91:12:67:9a:49:42:b2:70:d6:57:d2:3b:6f:f1:ee:41:9e:4e:
         db:95:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:41 2026 by rpki-client