Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/_F1eWaJ-dbNg8wQ1jE2D1tCkxFE.roa
File:                     _F1eWaJ-dbNg8wQ1jE2D1tCkxFE.roa (raw, json)
Hash identifier:          x9gKszmOHMUnrtWJ1jTYJqpOJjokg9sEN68expebzTM=
Subject key identifier:   FC:5D:5E:59:A2:7E:75:B3:60:F3:04:35:8C:4D:83:D6:D0:A4:C4:51
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       019FE604A2270E2DD755FA24E775C3FAD65B
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/_F1eWaJ-dbNg8wQ1jE2D1tCkxFE.roa
Signing time:             Sun 09 Aug 2026 10:14:51 +0000
ROA not before:           Sun 09 Aug 2026 10:14:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215323
IP address blocks:        2a10:fa80:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:04:a2:27:0e:2d:d7:55:fa:24:e7:75:c3:fa:d6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Aug  9 10:14:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc5d5e59a27e75b360f304358c4d83d6d0a4c451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:50:87:9c:94:d9:10:ee:14:a7:2f:df:53:
                    02:3a:89:2b:f4:1e:12:d4:98:d1:f1:ec:db:26:62:
                    99:e6:69:b7:a2:8d:3b:23:62:bf:16:fa:ea:2a:32:
                    a4:98:c7:c1:f3:62:75:ef:c9:b6:39:79:98:06:b7:
                    b8:83:b0:c6:44:8d:99:8f:e9:15:59:a1:f2:99:a2:
                    23:dc:fa:17:63:02:a6:f5:dc:d7:e1:2f:9f:c4:a6:
                    0a:a3:1c:fc:d0:dd:e6:68:27:5c:fc:9f:cb:0f:3e:
                    74:1b:05:bf:96:40:d8:3f:68:92:0e:33:74:d4:46:
                    2c:d1:ff:4d:a7:af:3f:93:00:f6:dc:3b:1b:f8:fe:
                    c0:62:ea:09:2d:94:e1:1d:b1:a4:fc:7e:65:ae:0e:
                    3f:cc:4e:b2:4c:b3:c8:4c:42:94:8a:2f:37:44:56:
                    e4:f7:34:57:69:9d:3d:17:25:c9:e5:22:d1:a0:b7:
                    06:83:83:ff:86:67:67:20:11:c1:7b:64:3f:cb:6a:
                    8d:c5:5a:f1:fd:d8:2d:76:ee:0b:c8:ab:86:32:9d:
                    f4:10:53:95:1a:6e:87:c9:46:b3:f8:85:d4:6c:93:
                    23:23:ed:18:98:c7:34:b2:d9:b5:3c:bc:b1:da:6a:
                    7c:20:28:63:22:44:91:24:d0:f6:79:52:00:94:b4:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:5E:59:A2:7E:75:B3:60:F3:04:35:8C:4D:83:D6:D0:A4:C4:51
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/_F1eWaJ-dbNg8wQ1jE2D1tCkxFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:fa80:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:bb:ed:9d:96:da:98:fc:83:05:ff:8b:34:54:ba:01:6b:
         d1:d3:17:07:97:3a:96:8a:89:d5:14:83:96:dd:02:61:c0:4b:
         f3:c7:37:39:9c:21:9e:7b:4e:48:5e:2d:af:b4:a2:9f:52:b2:
         ea:60:cb:50:23:1f:38:64:45:dc:45:45:60:a9:10:b3:ef:b0:
         65:d7:e6:0b:25:ae:a2:93:52:a9:3f:37:b1:2c:70:01:02:d0:
         e8:47:ca:e7:88:6d:3d:f9:11:5c:f5:ee:6a:55:c4:cb:58:a4:
         12:09:e9:13:cd:e0:41:70:3a:fb:71:03:fb:67:6f:59:f9:c3:
         7b:f0:31:02:4a:2f:12:42:04:4c:3b:04:ee:66:a6:22:37:5e:
         f2:9b:18:4d:8b:da:17:19:75:90:89:3a:27:95:da:04:f3:cc:
         bc:06:ee:60:59:1c:17:a1:d2:e9:db:9d:52:3d:f0:d3:7d:95:
         7b:81:bf:59:f6:48:d6:9e:b0:e5:2e:de:aa:de:db:6b:d7:b0:
         21:76:b3:f6:e6:b3:8a:de:e6:08:db:f2:3b:de:26:37:93:2c:
         8d:10:10:8f:de:2a:94:da:36:4f:d7:c0:c8:3f:82:03:9b:b6:
         fa:95:4c:11:a4:4f:75:6a:24:cf:b6:0e:68:96:d6:12:73:61:
         2c:20:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:45 2026 by rpki-client