Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_568Bv07qs94oRfl5HSRTBaXApc.roa
File:                     _568Bv07qs94oRfl5HSRTBaXApc.roa (raw, json)
Hash identifier:          /HUzpyN/u7dBqMJvcnNexCJFjBUWKi2srL2ual2kNtI=
Subject key identifier:   FF:9E:BC:06:FD:3B:AA:CF:78:A1:17:E5:E4:74:91:4C:16:97:02:97
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019F1C1C7135DC4E0E81C8A01BAD9CE429DA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_568Bv07qs94oRfl5HSRTBaXApc.roa
Signing time:             Wed 01 Jul 2026 05:17:33 +0000
ROA not before:           Wed 01 Jul 2026 05:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132776
IP address blocks:        93.113.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1c:1c:71:35:dc:4e:0e:81:c8:a0:1b:ad:9c:e4:29:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jul  1 05:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff9ebc06fd3baacf78a117e5e474914c16970297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:49:8a:10:78:b0:9f:d2:29:3f:59:b3:b8:
                    dd:3d:74:b6:97:80:9c:b8:de:06:31:d0:24:68:4b:
                    69:06:fc:8e:e8:c6:29:c4:91:7c:30:82:58:84:22:
                    c2:e6:15:cb:b1:f9:b7:9c:1d:a9:59:78:89:0f:c8:
                    7b:68:06:f4:2d:05:8e:b2:7b:85:1f:66:a0:21:9c:
                    1c:79:2e:18:8d:99:bc:36:e6:91:03:be:47:48:0e:
                    50:73:ab:97:6c:66:23:29:1f:6d:c5:14:fd:60:fe:
                    85:f4:c7:9c:6e:9d:71:31:f8:71:47:72:f9:63:b5:
                    df:b0:d8:bb:ee:0e:80:41:50:98:bc:9a:0a:c3:b9:
                    73:9b:df:56:63:78:a3:71:30:5a:fc:2a:1c:b8:e2:
                    9b:2e:71:ac:1f:ba:9d:95:f8:e7:ba:e6:2d:29:31:
                    7a:14:b2:cf:7a:d5:ad:37:56:10:6b:bb:09:49:de:
                    43:6d:60:fe:8c:dd:88:ce:9e:fb:a5:b1:e8:1b:c0:
                    d6:9e:e3:65:2e:25:99:4d:57:b3:2c:43:82:d9:b6:
                    37:ae:6e:ac:07:70:55:4e:7a:5f:12:d6:76:27:cd:
                    fb:f0:7b:88:4a:f8:5a:91:4f:cf:3b:97:a8:8c:d2:
                    84:0e:9b:88:30:af:40:3c:e5:f3:1d:ca:02:70:7f:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:BC:06:FD:3B:AA:CF:78:A1:17:E5:E4:74:91:4C:16:97:02:97
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_568Bv07qs94oRfl5HSRTBaXApc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:81:bb:81:4b:7b:55:28:a9:97:47:5e:ea:c8:14:4e:b9:
         a5:e0:d1:d0:70:09:f1:96:21:92:27:e9:28:15:8d:e5:5d:8c:
         52:a1:a1:82:fb:21:44:0b:5c:8e:49:dc:84:8c:bd:aa:75:19:
         11:7a:03:35:61:d8:1b:e7:15:0c:d6:ed:3e:58:5d:83:a2:ea:
         c7:fa:41:f8:aa:eb:6a:34:a9:21:ad:74:ab:5e:f6:e0:37:e1:
         a7:ff:80:2c:71:c8:56:19:59:a5:90:26:84:1c:83:43:15:76:
         81:a6:b3:48:3a:33:3d:ab:28:df:cf:8b:c1:f1:da:d7:0b:23:
         e8:82:a5:8e:ab:55:43:a3:03:1d:6c:cf:8a:e7:9c:df:f4:27:
         77:fc:e6:28:87:7d:7e:3e:3c:4b:c1:d3:d9:19:ce:b4:f2:db:
         8e:16:45:32:2e:be:f1:17:47:85:21:33:4d:d4:78:68:f2:91:
         83:3a:68:d9:d9:35:3a:0d:aa:63:19:e6:14:00:80:76:dc:a3:
         a4:fd:2f:ec:db:41:a3:c8:42:ef:4b:f7:1c:0e:9b:67:a4:ae:
         66:c6:d7:3c:49:52:6d:ad:09:25:05:79:50:60:2b:14:7f:d0:
         12:4f:74:27:83:dd:c4:b1:14:ee:22:eb:50:a6:54:bc:7e:dd:
         94:21:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client