Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6ig5w-erpFIiIb2ayyctSoB3Jm4.roa
File:                     6ig5w-erpFIiIb2ayyctSoB3Jm4.roa (raw, json)
Hash identifier:          1vAFPD+IbDQGZaWqo1FokW6KGjbeO6FYawg10kESvH8=
Subject key identifier:   EA:28:39:C3:E7:AB:A4:52:22:21:BD:9A:CB:27:2D:4A:80:77:26:6E
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       01A162B0F7BE8CD520CE4016D848347841A6
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6ig5w-erpFIiIb2ayyctSoB3Jm4.roa
Signing time:             Thu 22 Oct 2026 08:18:47 +0000
ROA not before:           Thu 22 Oct 2026 08:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59916
IP address blocks:        109.233.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:b0:f7:be:8c:d5:20:ce:40:16:d8:48:34:78:41:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Oct 22 08:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea2839c3e7aba4522221bd9acb272d4a8077266e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:0f:69:9e:e0:d3:18:dc:a1:4d:5c:79:a1:
                    da:a9:2b:5f:00:3c:8e:90:61:17:27:f9:a7:9d:05:
                    9d:d6:b1:77:40:67:f5:0c:da:f9:46:1b:00:7a:c1:
                    2b:14:9c:65:e0:e4:81:50:39:76:a3:19:8a:aa:7a:
                    4d:7d:bd:0e:b4:4e:f2:91:56:a2:3d:94:73:2f:8c:
                    24:ca:b4:b1:c2:46:43:db:e3:d9:74:0b:fb:2c:8b:
                    c4:1f:d9:03:81:e9:8a:9d:ac:b7:9c:50:54:b2:32:
                    93:fc:5c:b3:df:bd:c6:79:5e:76:98:d0:fe:20:d9:
                    f9:84:ed:95:2f:da:d4:3e:12:fb:f1:da:06:84:f1:
                    33:f3:3a:d4:a7:1d:1f:1d:ef:32:45:ef:00:a9:75:
                    48:ac:ee:72:72:c1:16:31:08:91:c4:75:14:14:68:
                    2a:03:ca:0c:b9:e0:1b:21:68:7e:ea:63:78:43:65:
                    92:37:44:29:b3:21:7f:52:11:15:15:4d:c5:4a:d6:
                    fa:93:98:ac:9c:82:8f:92:84:52:58:a6:5c:64:aa:
                    b0:b5:11:69:bf:9b:5d:ab:f0:6e:13:f1:0c:c2:9b:
                    4b:f0:15:69:f6:a5:c8:ba:0c:17:5a:a7:fe:b2:e8:
                    fd:d2:4e:95:81:f7:6b:ff:b1:b3:7c:3e:95:3c:17:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:28:39:C3:E7:AB:A4:52:22:21:BD:9A:CB:27:2D:4A:80:77:26:6E
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6ig5w-erpFIiIb2ayyctSoB3Jm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.233.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:46:7f:42:5a:6c:2d:08:11:24:0d:68:0c:33:e1:63:f0:
         a7:6f:c1:3e:e7:b6:fe:da:c9:4f:9e:eb:d5:a2:87:23:33:05:
         0f:57:16:44:d9:b3:1a:15:8c:4b:86:09:97:16:85:34:33:f3:
         1b:73:0d:3b:50:4e:7c:1c:f2:90:31:84:92:e5:bf:34:bf:07:
         b6:57:99:c7:1e:3c:09:7e:b3:95:e6:37:3e:b5:71:93:45:a8:
         91:1d:f9:b3:98:e4:ef:36:ad:4a:5f:64:4c:a5:ee:7c:12:9d:
         e5:9c:25:30:21:16:08:1c:96:cf:e3:2c:99:25:08:0f:2d:63:
         a7:16:88:52:cc:d3:fb:3a:0b:85:9e:c3:e4:c3:21:a6:30:c3:
         94:a6:ef:67:14:7a:45:ed:77:e8:4c:bc:d8:46:06:01:ec:22:
         b9:32:57:e9:88:39:1b:62:5e:8a:3b:b0:13:29:ce:bc:ac:85:
         38:e7:bb:ef:a7:6b:1c:81:be:b5:ff:99:34:4b:a5:51:c9:19:
         32:b3:f4:64:86:a3:96:d5:b1:84:aa:88:45:4b:3c:af:48:5d:
         62:31:ab:88:a9:7a:5c:c5:16:23:c3:4d:1b:de:fa:bb:b6:00:
         d7:2b:9a:ea:17:48:bb:72:93:e2:50:23:55:94:b1:a5:64:da:
         fb:56:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:27 2026 by rpki-client