Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/V4uDC_dBHybovP9sGVwKnya_tDc.roa
File:                     V4uDC_dBHybovP9sGVwKnya_tDc.roa (raw, json)
Hash identifier:          OlXYmUXFzncv3Qk4o0OpqMU+Lky+GvuMzkvrdHhsydc=
Subject key identifier:   57:8B:83:0B:F7:41:1F:26:E8:BC:FF:6C:19:5C:0A:9F:26:BF:B4:37
Certificate issuer:       /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial:       01A1505648D83F37BD77B689684C91C4C561
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/V4uDC_dBHybovP9sGVwKnya_tDc.roa
Signing time:             Sun 18 Oct 2026 18:46:34 +0000
ROA not before:           Sun 18 Oct 2026 18:46:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218650
IP address blocks:        46.32.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:56:48:d8:3f:37:bd:77:b6:89:68:4c:91:c4:c5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
        Validity
            Not Before: Oct 18 18:46:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=578b830bf7411f26e8bcff6c195c0a9f26bfb437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:49:00:b4:52:7a:55:fc:30:f3:50:99:f2:
                    e6:55:6a:f2:36:85:10:9a:9e:30:48:2f:91:93:21:
                    ee:88:08:ba:65:5c:83:01:09:fb:9c:a4:17:66:8a:
                    87:94:22:68:b3:69:ae:93:04:d2:bd:ac:cc:d3:ea:
                    19:b3:cb:23:3d:61:e7:c3:8c:c9:5f:cf:fe:ce:b6:
                    69:e3:32:2c:3f:df:08:0d:74:ba:21:ed:f0:d7:3f:
                    f2:52:16:b6:31:2a:d8:69:08:d5:44:59:a1:38:c5:
                    ab:42:90:08:a3:17:35:3f:8d:10:1a:5d:6c:41:d9:
                    b6:ea:da:71:b7:be:15:cf:16:27:64:b1:76:ec:cd:
                    db:14:e0:98:55:ed:ac:5d:9f:05:21:02:b8:7f:55:
                    a8:92:72:eb:4e:7f:6d:ea:22:59:e5:2a:fd:3a:16:
                    70:8e:7b:82:06:41:8b:74:08:89:90:48:39:c0:d6:
                    98:5a:99:9e:e0:d4:32:ba:27:d8:06:03:23:90:38:
                    0a:d5:b2:25:66:c3:48:59:06:a2:89:7b:97:a9:8e:
                    88:a4:56:b6:04:26:ed:d5:e6:5b:fe:32:f8:17:65:
                    8a:ac:fb:70:85:63:89:82:c9:82:4d:23:77:79:6f:
                    1f:4a:98:d0:c1:1a:13:16:81:e9:aa:3b:08:49:f5:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8B:83:0B:F7:41:1F:26:E8:BC:FF:6C:19:5C:0A:9F:26:BF:B4:37
            X509v3 Authority Key Identifier:
                keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/V4uDC_dBHybovP9sGVwKnya_tDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.32.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:6d:a5:a5:5a:fd:ed:d1:8f:df:4c:40:8a:f6:12:ac:cd:
         8a:ac:1b:2c:c7:38:5c:d6:ee:e5:cb:79:9e:6e:31:bb:8a:ec:
         89:53:d3:05:44:1b:cd:5a:d0:1c:35:3e:8a:6a:0c:8e:53:05:
         bc:60:c6:9b:45:ac:cc:ec:c2:08:e7:42:b9:57:15:82:76:02:
         1f:ca:e9:10:6b:cb:a7:55:51:e6:04:cb:08:b8:05:a4:70:c6:
         d5:a2:4a:22:fa:51:0e:34:2f:e0:66:d4:8b:6a:43:b9:c3:c0:
         1a:38:c5:81:49:c0:91:10:a3:77:b3:e5:5d:d2:e6:0c:67:ec:
         c2:dd:3b:69:2f:bd:10:fa:d5:c5:69:dd:cf:25:a4:c1:1c:f7:
         01:9e:27:6e:f3:e2:0c:3b:09:8d:6a:a4:81:72:2a:1d:7e:cb:
         63:dc:42:d9:cd:9c:61:8e:d9:f3:8b:51:30:17:0a:12:51:9d:
         05:cb:94:a1:96:6e:9e:c1:a9:03:c0:fd:bb:62:e7:95:e5:0f:
         69:c2:08:17:24:61:b1:1d:5a:77:d9:03:48:2e:7f:f1:25:34:
         a6:d1:1f:4d:06:97:cc:ea:c5:6e:71:d1:f4:a4:91:31:3c:3d:
         4b:5c:e3:90:be:90:f3:dc:9a:06:64:28:c4:4f:e2:e7:96:89:
         2d:a7:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:59:41 2026 by rpki-client