Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/OEODoy0fUF82EpmO1l9IkdQUlBw.roa
File:                     OEODoy0fUF82EpmO1l9IkdQUlBw.roa (raw, json)
Hash identifier:          lptN4VimwVH9xNwp29nOqhhrMnsVgPRD0XWR/6V33rY=
Subject key identifier:   38:43:83:A3:2D:1F:50:5F:36:12:99:8E:D6:5F:48:91:D4:14:94:1C
Certificate issuer:       /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial:       019FCC92B90CEAB084020550698204E3E940
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/OEODoy0fUF82EpmO1l9IkdQUlBw.roa
Signing time:             Tue 04 Aug 2026 11:39:55 +0000
ROA not before:           Tue 04 Aug 2026 11:39:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     27176
IP address blocks:        78.110.168.0/24 maxlen: 24
                          81.92.219.0/24 maxlen: 24
                          185.99.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:92:b9:0c:ea:b0:84:02:05:50:69:82:04:e3:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
        Validity
            Not Before: Aug  4 11:39:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=384383a32d1f505f3612998ed65f4891d414941c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:48:d9:eb:0c:48:f0:e0:55:7a:f3:15:55:
                    93:45:95:96:3e:b7:08:05:22:b9:b8:47:4c:c5:23:
                    9c:9a:83:5d:e5:ac:33:05:94:cb:af:92:35:92:ce:
                    27:d0:c7:c2:0d:d7:ba:ba:90:b7:d3:cc:f7:0c:bf:
                    7a:01:d6:38:3c:a5:06:a3:54:9e:78:aa:a6:06:07:
                    87:10:a3:d3:5b:74:52:51:c1:f4:49:c4:25:75:ed:
                    1e:f5:26:14:21:51:ed:16:2f:5a:3b:ab:7a:cd:8b:
                    3e:1f:42:1f:ee:7c:38:45:cd:ff:d9:40:1a:6c:a4:
                    f8:f2:77:a6:4b:ca:2f:ef:19:b1:f4:80:6f:08:f2:
                    ea:95:40:11:cd:88:17:89:ac:02:08:2a:63:51:04:
                    b8:44:13:91:ca:69:70:9f:8f:98:0b:3e:55:ff:27:
                    e7:b1:15:d5:b1:5b:b1:18:6e:d9:84:36:7a:de:c5:
                    a8:c7:84:b7:05:bc:57:a2:cf:52:3f:76:68:fd:ba:
                    f3:8a:80:77:f4:d2:36:fd:cc:24:c3:08:cc:81:fe:
                    80:f0:ef:08:37:2a:11:53:69:30:62:05:47:98:36:
                    c4:ee:b1:2d:49:5a:e0:78:e7:1d:5b:00:0c:7d:a5:
                    f2:0f:43:06:4d:09:70:bb:4a:e9:9f:80:45:0c:83:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:83:A3:2D:1F:50:5F:36:12:99:8E:D6:5F:48:91:D4:14:94:1C
            X509v3 Authority Key Identifier:
                keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/OEODoy0fUF82EpmO1l9IkdQUlBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.110.168.0/24
                  81.92.219.0/24
                  185.99.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:ee:4b:0c:c9:8b:85:70:15:2a:d9:be:db:d9:21:1a:60:
         b5:c4:5b:9b:d7:4e:f2:9d:db:a7:84:d0:50:71:90:8a:41:81:
         fc:7f:02:1c:85:3f:7a:24:a4:22:67:b1:7c:ae:1b:ea:08:73:
         2b:40:fe:4c:41:9f:65:c0:3f:9f:b2:30:b7:9a:d4:25:f5:72:
         f1:40:c6:77:e1:40:f8:98:5a:2e:0d:2b:58:af:31:60:78:04:
         9d:19:8d:e2:15:96:c1:e7:a9:4d:97:1c:b5:1e:db:95:e3:10:
         4d:0f:dc:93:ec:eb:a3:50:00:4a:0b:ea:ac:f9:f9:b7:4a:93:
         14:82:f3:05:c5:39:28:8b:f9:84:87:05:35:78:ba:8e:e4:43:
         aa:fa:f6:5a:68:2a:4e:5b:e9:16:82:2b:df:00:44:f1:0f:51:
         19:af:de:a0:3e:08:07:3b:d4:c2:f0:e9:7f:e4:00:2e:08:09:
         b1:92:73:76:1d:ec:d3:3a:25:d4:6a:0d:89:9c:ef:13:17:1c:
         d6:47:36:1e:7f:e7:d4:91:f9:f9:ca:1d:55:62:e7:b6:e9:b3:
         2f:27:a5:e8:bf:95:bf:fc:8c:63:fb:d2:c8:0c:d5:5e:f8:ef:
         7a:e0:21:24:ae:ce:3e:36:01:70:a0:53:b6:30:2d:ea:ee:09:
         fd:97:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:49:23 2026 by rpki-client