Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Ynt2xigtHLqXLUzQsAZpEPmTtO4.roa
File:                     Ynt2xigtHLqXLUzQsAZpEPmTtO4.roa (raw, json)
Hash identifier:          i2KqkbOF2kBrToyif2lOVM+Ne7eJ5ANDv5baiweWbnI=
Subject key identifier:   62:7B:76:C6:28:2D:1C:BA:97:2D:4C:D0:B0:06:69:10:F9:93:B4:EE
Certificate issuer:       /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial:       019FACACA96BBC484FC20D0346370682BEFC
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Ynt2xigtHLqXLUzQsAZpEPmTtO4.roa
Signing time:             Wed 29 Jul 2026 07:00:24 +0000
ROA not before:           Wed 29 Jul 2026 07:00:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212988
IP address blocks:        185.194.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:a9:6b:bc:48:4f:c2:0d:03:46:37:06:82:be:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
        Validity
            Not Before: Jul 29 07:00:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=627b76c6282d1cba972d4cd0b0066910f993b4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:4d:fa:43:35:f7:2d:bc:99:88:9d:05:11:
                    60:be:67:72:6a:79:0a:6d:fe:ec:63:d2:92:57:17:
                    c3:ad:64:f1:cc:0d:ff:a7:f0:0a:ae:eb:70:e3:08:
                    bc:ca:1d:34:b3:03:66:67:a1:10:21:1d:db:91:72:
                    83:22:ad:78:22:7f:fb:26:9c:ef:24:e3:a0:8d:49:
                    41:c8:06:47:4e:42:33:d6:dc:89:ec:81:b2:8f:ff:
                    7a:b3:9a:ff:d7:3d:10:9a:1d:6e:23:fb:2f:64:0b:
                    85:22:5e:62:d6:92:a3:f5:bf:3a:c5:20:75:19:20:
                    85:83:01:9c:b7:8e:17:9d:de:04:54:fb:8a:02:b3:
                    d3:17:65:9e:c0:76:4b:c8:0d:f6:1b:62:3c:11:1f:
                    9a:b0:64:b6:7f:f8:84:7a:44:9b:b2:c6:ee:4c:52:
                    75:b0:17:9f:8f:a7:4e:8a:61:a8:8e:ec:32:0c:16:
                    97:94:7b:18:f8:a0:0b:c2:f1:5d:4a:0d:dc:bc:34:
                    4b:73:1b:cf:e1:d7:98:d9:ab:27:34:83:35:8c:2a:
                    f0:d1:ea:c1:9f:74:d0:e8:2f:9a:9c:9c:90:57:2f:
                    2b:52:4f:6a:9d:35:69:a7:b8:3f:be:ff:4b:25:26:
                    9c:ab:38:1a:65:95:1d:62:66:f2:97:d7:cc:1a:28:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7B:76:C6:28:2D:1C:BA:97:2D:4C:D0:B0:06:69:10:F9:93:B4:EE
            X509v3 Authority Key Identifier:
                keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Ynt2xigtHLqXLUzQsAZpEPmTtO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:22:21:5b:97:98:82:51:d3:c8:14:fe:09:31:aa:a7:1e:b0:
         97:cd:39:b2:89:99:c1:42:ae:c1:3b:a3:d8:5e:23:55:4d:26:
         46:50:c9:a2:8d:ea:5d:c4:ce:38:30:72:1a:ac:dd:49:64:a6:
         34:30:93:1f:7f:08:ee:59:55:db:81:f9:09:9b:7d:ce:f4:ea:
         97:ff:fe:3e:2f:6e:78:ab:b6:5e:07:a3:df:6f:3b:bc:42:9e:
         ef:2d:84:c5:27:a0:fe:ca:6c:ee:2d:7d:99:fc:61:94:c1:67:
         30:44:c3:79:bb:f3:08:1d:8f:c3:d5:5d:e1:c9:b5:f5:9a:ed:
         b3:c2:5c:da:95:a3:85:d5:82:67:6d:0c:03:e0:0f:1b:23:eb:
         fe:25:cc:b4:91:d8:ca:68:19:9e:ed:15:6d:35:19:e6:22:a2:
         73:fc:36:15:18:1c:d3:8a:d1:ce:23:fd:db:7c:33:44:0f:a3:
         2d:67:1c:87:08:75:79:72:ea:04:e0:f7:32:74:e7:d4:28:51:
         57:ae:ea:4a:a9:1f:6c:1d:47:4e:ed:c7:70:c4:f7:48:57:98:
         b9:a1:13:bb:72:df:93:89:e0:bb:2a:cb:98:07:1a:a7:84:89:
         30:91:ad:ed:8f:4f:fe:c1:71:ce:1c:1e:18:0a:a7:b6:67:f0:
         0c:e2:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:02 2026 by rpki-client