Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eRK44pjdKP0UEi4SNbXBJx4wEKc.roa
File:                     eRK44pjdKP0UEi4SNbXBJx4wEKc.roa (raw, json)
Hash identifier:          t5pozxfHft3pzY1ofiWXiZrMUo1o/8jd9z5pfxj2Ydo=
Subject key identifier:   79:12:B8:E2:98:DD:28:FD:14:12:2E:12:35:B5:C1:27:1E:30:10:A7
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01A19D8C5CBF1C029CC929BEA2FF658B177D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eRK44pjdKP0UEi4SNbXBJx4wEKc.roa
Signing time:             Mon 02 Nov 2026 18:36:24 +0000
ROA not before:           Mon 02 Nov 2026 18:36:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        5.180.22.0/24 maxlen: 24
                          45.15.129.0/24 maxlen: 24
                          45.15.145.0/24 maxlen: 24
                          45.15.146.0/24 maxlen: 24
                          45.15.154.0/24 maxlen: 24
                          45.15.155.0/24 maxlen: 24
                          45.15.164.0/24 maxlen: 24
                          45.15.179.0/24 maxlen: 24
                          45.15.186.0/24 maxlen: 24
                          45.82.248.0/24 maxlen: 24
                          45.83.128.0/24 maxlen: 24
                          45.83.149.0/24 maxlen: 24
                          45.88.183.0/24 maxlen: 24
                          45.89.105.0/24 maxlen: 24
                          45.89.106.0/24 maxlen: 24
                          45.92.140.0/22 maxlen: 24
                          45.92.160.0/24 maxlen: 24
                          45.92.161.0/24 maxlen: 24
                          45.92.163.0/24 maxlen: 24
                          45.92.164.0/22 maxlen: 24
                          45.92.192.0/24 maxlen: 24
                          45.92.193.0/24 maxlen: 24
                          45.92.194.0/24 maxlen: 24
                          45.128.51.0/24 maxlen: 24
                          45.128.57.0/24 maxlen: 24
                          45.128.58.0/24 maxlen: 24
                          92.118.236.0/22 maxlen: 24
                          95.214.249.0/24 maxlen: 24
                          95.214.250.0/24 maxlen: 24
                          171.22.115.0/24 maxlen: 24
                          213.59.119.0/24 maxlen: 24
                          213.59.120.0/24 maxlen: 24
                          213.59.126.0/24 maxlen: 24
                          213.59.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 15:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9d:8c:5c:bf:1c:02:9c:c9:29:be:a2:ff:65:8b:17:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Nov  2 18:36:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7912b8e298dd28fd14122e1235b5c1271e3010a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:bd:13:7f:cd:79:1f:1a:3b:a5:c9:2d:03:
                    89:08:89:a9:5a:ba:4a:e6:a2:f5:d6:55:48:ad:ad:
                    25:ef:d8:ad:ae:4c:17:a4:48:ef:4a:85:7a:38:9a:
                    6d:25:e9:7f:06:5c:a2:1d:06:9a:d3:b0:c3:cc:43:
                    57:59:3a:5a:af:cb:59:83:f0:ec:11:6a:17:4b:bf:
                    38:71:30:7e:33:41:2a:4e:da:5b:7d:33:39:f8:e7:
                    a1:c7:92:fb:10:34:84:35:41:05:c5:21:78:98:73:
                    29:e2:a2:92:05:cf:7a:ea:5f:02:2b:32:45:54:a2:
                    59:6e:c8:ef:8f:a1:64:f2:7f:2f:71:84:ce:4d:ef:
                    f3:70:47:0a:39:42:19:2a:b7:ad:9d:36:dd:e0:36:
                    41:fb:ec:45:0b:2e:d5:97:80:c7:37:e7:11:e7:2c:
                    04:c8:96:c8:31:33:4b:4a:97:86:07:19:1f:1f:22:
                    e8:21:c2:c0:be:10:c9:ee:eb:66:c0:4a:ea:a0:67:
                    24:f7:31:3b:0f:44:4e:ba:2d:27:26:4b:01:8d:68:
                    97:e0:46:cb:25:d4:49:bf:ee:09:8b:23:fd:20:2d:
                    5a:df:41:87:80:88:ab:6d:64:c8:76:7c:ac:dd:d5:
                    8b:5f:f3:79:1b:8f:33:32:d7:11:dc:be:d0:74:c6:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:B8:E2:98:DD:28:FD:14:12:2E:12:35:B5:C1:27:1E:30:10:A7
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eRK44pjdKP0UEi4SNbXBJx4wEKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.22.0/24
                  45.15.129.0/24
                  45.15.145.0-45.15.146.255
                  45.15.154.0/23
                  45.15.164.0/24
                  45.15.179.0/24
                  45.15.186.0/24
                  45.82.248.0/24
                  45.83.128.0/24
                  45.83.149.0/24
                  45.88.183.0/24
                  45.89.105.0-45.89.106.255
                  45.92.140.0/22
                  45.92.160.0/23
                  45.92.163.0-45.92.167.255
                  45.92.192.0-45.92.194.255
                  45.128.51.0/24
                  45.128.57.0-45.128.58.255
                  92.118.236.0/22
                  95.214.249.0-95.214.250.255
                  171.22.115.0/24
                  213.59.119.0-213.59.120.255
                  213.59.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:cd:29:bd:c4:79:25:77:b3:2d:df:e5:04:1c:f3:02:5e:
         7b:e1:ba:b2:f5:1c:c2:60:88:c2:03:37:cf:d1:68:af:42:d0:
         bd:a1:96:4d:12:97:2b:38:9b:a7:a4:38:42:e5:32:5a:0a:98:
         f7:15:8a:77:95:25:de:41:ec:e6:2f:7f:d0:54:7c:08:4a:ae:
         35:b3:44:6c:ab:1b:e9:36:64:a3:9b:eb:6b:c9:7d:f4:41:b2:
         2e:8e:7f:af:44:4c:65:52:24:8d:aa:84:0c:2d:01:48:27:a7:
         8e:b9:f3:58:57:e3:a3:b4:a2:02:c5:d1:1d:47:f0:c7:49:25:
         a2:06:4e:e5:60:06:72:c9:4d:c0:85:ef:c4:cf:fe:85:75:9b:
         2a:9d:37:5e:ee:5a:bd:47:46:80:7c:1d:66:f3:42:90:86:be:
         14:34:e6:d1:68:d9:43:97:9b:5c:85:08:75:e9:7b:e9:4e:bf:
         42:ff:de:ea:fb:97:50:f5:8d:8f:61:28:04:50:51:07:a6:29:
         c5:8e:64:23:24:52:25:30:5a:af:7c:66:6d:e1:89:c6:97:cb:
         98:58:4e:0c:8f:f1:e6:23:31:0b:1d:c7:04:f7:5c:90:1e:ed:
         55:b9:58:c6:b4:e2:af:b3:4f:52:ba:1d:17:3d:36:37:92:ff:
         40:37:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:18:56 2026 by rpki-client