Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/eegluwWjNdY4ClWImCsHglLNDb4.roa
File:                     eegluwWjNdY4ClWImCsHglLNDb4.roa (raw, json)
Hash identifier:          qiAdAc6/nyywis2R3iQ+AJ7Tl4/oTPbnVGzuXIPYdGU=
Subject key identifier:   79:E8:25:BB:05:A3:35:D6:38:0A:55:88:98:2B:07:82:52:CD:0D:BE
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       019FE7D9CEA4365CEB85075B14175A429286
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/eegluwWjNdY4ClWImCsHglLNDb4.roa
Signing time:             Sun 09 Aug 2026 18:47:18 +0000
ROA not before:           Sun 09 Aug 2026 18:47:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19318
IP address blocks:        2a10:fa80:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e7:d9:ce:a4:36:5c:eb:85:07:5b:14:17:5a:42:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Aug  9 18:47:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79e825bb05a335d6380a5588982b078252cd0dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:69:83:b2:ff:13:ba:b0:34:0a:11:bc:8d:
                    da:57:5c:50:21:00:cc:c2:25:06:ca:41:95:ea:18:
                    67:48:0b:1b:09:27:93:d2:98:3c:ee:4b:ce:83:f6:
                    fd:10:15:09:8d:8e:b3:ad:62:f5:9b:12:5b:2e:df:
                    f8:b4:04:48:81:8b:44:58:7e:e5:eb:5d:b6:9e:22:
                    bc:3d:d8:81:5a:fb:1d:92:a5:9e:bb:c9:40:71:28:
                    d2:f3:9d:3b:07:07:73:5a:02:5c:3f:4f:47:f4:7b:
                    78:94:6f:09:76:8d:21:df:12:9a:c1:32:22:8c:60:
                    20:64:d6:06:e5:d7:dd:54:05:78:53:ff:e0:0a:4e:
                    49:7a:ef:1d:1c:32:59:c8:b4:fb:46:b0:fc:a1:1e:
                    5b:7a:40:45:07:97:e7:c2:cb:12:dc:61:7c:ed:ed:
                    34:63:10:15:a4:cf:cd:24:78:30:06:30:21:20:cd:
                    a4:d5:72:aa:73:9f:15:36:09:4d:89:5d:33:ea:c7:
                    65:0c:4d:8a:b6:ed:b4:fb:4d:1d:e9:ba:cc:10:bb:
                    f2:b8:b4:ed:80:b0:bd:63:86:d1:4b:a3:10:46:68:
                    d3:bd:90:2e:9a:af:11:68:55:c3:0f:d0:9f:0e:01:
                    5d:dd:e3:de:99:82:1f:ba:2c:70:5b:c7:fc:69:07:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:25:BB:05:A3:35:D6:38:0A:55:88:98:2B:07:82:52:CD:0D:BE
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/eegluwWjNdY4ClWImCsHglLNDb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:fa80:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:fa:e1:27:7a:79:6a:3f:17:d7:ca:7e:fc:f5:e4:1f:02:
         2c:e8:47:8e:da:1d:c5:99:de:a4:76:e7:3e:e6:98:d3:75:ba:
         df:b0:b5:47:36:8a:63:f2:0a:f9:3c:2d:46:5f:1d:92:71:36:
         83:c9:25:7a:e1:38:b1:6c:50:e5:40:57:0e:5b:8f:f7:2e:6d:
         f7:51:5b:70:25:81:1a:17:c3:44:fa:69:44:ea:0f:ff:6e:94:
         d0:99:f3:b3:69:25:a4:14:59:06:78:ae:52:71:ac:66:19:8c:
         cb:61:df:57:6b:1c:d5:c8:83:d1:a6:e6:fe:86:fb:7c:9e:8a:
         69:b5:f4:45:7d:f2:b2:7c:aa:20:02:d2:62:10:71:bf:91:ad:
         3f:84:67:14:22:30:06:10:35:ad:0b:8f:43:03:fd:8c:61:42:
         20:a1:80:78:ea:74:6b:c5:16:86:97:95:5c:70:22:04:2b:96:
         10:d4:a9:2d:1a:16:be:fa:ad:dd:d4:f6:1f:e5:0a:b2:bf:00:
         d2:58:98:f9:36:60:75:2c:87:3d:a2:3d:88:f3:26:96:ac:d3:
         9e:04:95:ed:b5:c3:14:90:ca:45:7f:c8:e8:e4:1a:22:9b:50:
         78:c1:a0:6f:06:9a:cb:d5:af:92:88:19:41:d4:fc:65:4b:c3:
         e6:d0:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:08 2026 by rpki-client