Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vumts-e53zgfL0_b4Bt66ctqdjc.roa
File:                     Vumts-e53zgfL0_b4Bt66ctqdjc.roa (raw, json)
Hash identifier:          BrBc8hDOiMnPQJCXPHF8e68I/UxBTqYLPEsXw3QXmGI=
Subject key identifier:   56:E9:AD:B3:E7:B9:DF:38:1F:2F:4F:DB:E0:1B:7A:E9:CB:6A:76:37
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019E83D8DBD2A7871A7FB3A1F5D8882E38CE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vumts-e53zgfL0_b4Bt66ctqdjc.roa
Signing time:             Mon 01 Jun 2026 15:41:27 +0000
ROA not before:           Mon 01 Jun 2026 15:41:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6079
IP address blocks:        2a05:b300::/29 maxlen: 32
                          2a06:1184:11::/48 maxlen: 48
                          2a06:35c3:100::/48 maxlen: 48
                          2a09:17c1:4a::/48 maxlen: 48
                          2a0a:2d06:66::/48 maxlen: 48
                          2a0c:7882:2::/48 maxlen: 48
                          2a0e:15c7:101::/48 maxlen: 48
                          2a0e:1a83:99::/48 maxlen: 48
                          2a0e:c786:122::/48 maxlen: 48
                          2a0e:c787:1000::/48 maxlen: 48
                          2a0e:f600:2a::/48 maxlen: 48
                          2a0f:1200:10::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:1584:6::/48 maxlen: 48
                          2a0f:18c0::/29 maxlen: 32
                          2a0f:1e07::/32 maxlen: 32
                          2a0f:1e80:1986::/48 maxlen: 48
                          2a0f:1fc0::/29 maxlen: 32
                          2a0f:3046:85::/48 maxlen: 48
                          2a0f:3047:fe48::/48 maxlen: 48
                          2a0f:31c7::/32 maxlen: 32
                          2a0f:3d80:1312::/48 maxlen: 48
                          2a0f:3e80::/29 maxlen: 29
                          2a0f:7d00:100::/48 maxlen: 48
                          2a0f:bc04:1004::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 32
                          2a0f:de40::/29 maxlen: 32
                          2a0f:e1c0:1312::/48 maxlen: 48
                          2a0f:e1c7:77::/48 maxlen: 48
                          2a0f:e207:fd38::/48 maxlen: 48
                          2a0f:e740::/29 maxlen: 32
                          2a0f:e7c7:b4::/48 maxlen: 48
                          2a0f:ea44:55::/48 maxlen: 48
                          2a0f:ea44:acab::/48 maxlen: 48
                          2a0f:ec00::/29 maxlen: 29
                          2a10:4e00::/29 maxlen: 32
                          2a10:5400::/29 maxlen: 29
                          2a10:67c2:d6::/48 maxlen: 48
                          2a10:67c5:2::/48 maxlen: 48
                          2a10:6f00::/29 maxlen: 32
                          2a10:7700::/29 maxlen: 32
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ac46:99::/48 maxlen: 48
                          2a12:ecc0:11::/48 maxlen: 48
                          2a12:ecc0:3e2::/48 maxlen: 48
                          2a13:18c5:11::/48 maxlen: 48
                          2a13:18c6:101::/48 maxlen: 48
                          2a13:18c6:8512::/48 maxlen: 48
                          2a13:2c40::/29 maxlen: 32
                          2a13:3080::/29 maxlen: 29
                          2a13:8100::/29 maxlen: 32
                          2a13:8c86:88::/48 maxlen: 48
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:9180::/29 maxlen: 32
                          2a13:9285:100::/48 maxlen: 48
                          2a13:c900:120::/48 maxlen: 48
                          2a13:e100:323::/48 maxlen: 48
                          2a13:e102:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:83:d8:db:d2:a7:87:1a:7f:b3:a1:f5:d8:88:2e:38:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun  1 15:41:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56e9adb3e7b9df381f2f4fdbe01b7ae9cb6a7637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:f0:c2:4b:44:ac:1f:91:da:b5:6b:04:87:
                    d8:b6:6e:7b:99:6a:56:9d:22:88:69:cc:66:a3:d8:
                    c1:44:4d:72:35:cc:fe:7d:88:d1:82:30:4d:6a:a9:
                    50:68:93:fd:32:32:56:d5:d8:47:44:34:81:3f:fa:
                    03:be:37:e0:ff:1a:c6:fd:2a:f2:26:56:cb:4e:a2:
                    b1:fc:25:63:d2:3a:24:22:e3:5d:fe:45:88:cb:50:
                    13:12:59:05:ba:ee:ca:30:f8:45:20:61:a2:64:b8:
                    86:ce:c6:8d:8b:2f:b9:a9:87:84:88:01:de:ee:07:
                    16:65:0c:bf:e6:35:0e:02:01:66:37:bc:f5:e4:66:
                    b1:35:08:69:cd:38:bc:ab:c1:8d:85:c5:c4:a9:d9:
                    23:4f:40:c7:60:de:6a:66:6b:93:de:ac:42:08:5a:
                    43:77:ba:bf:51:7b:d7:bb:9d:29:f9:91:28:89:98:
                    d5:a5:8b:7d:90:a3:43:86:a3:4c:7f:e5:a4:bf:43:
                    35:86:1f:ca:c5:6c:84:5d:67:d5:87:81:7b:81:cd:
                    27:de:8f:ff:7d:6b:a3:3d:eb:b7:09:0f:18:8a:b7:
                    c9:93:ab:43:fe:94:ed:2b:89:8d:0f:d3:3b:05:ec:
                    fe:d3:a7:84:bf:33:2d:bd:f4:8e:99:4f:4e:03:08:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:AD:B3:E7:B9:DF:38:1F:2F:4F:DB:E0:1B:7A:E9:CB:6A:76:37
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vumts-e53zgfL0_b4Bt66ctqdjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:b300::/29
                  2a06:1184:11::/48
                  2a06:35c3:100::/48
                  2a09:17c1:4a::/48
                  2a0a:2d06:66::/48
                  2a0c:7882:2::/48
                  2a0e:15c7:101::/48
                  2a0e:1a83:99::/48
                  2a0e:c786:122::/48
                  2a0e:c787:1000::/48
                  2a0e:f600:2a::/48
                  2a0f:1200:10::/48
                  2a0f:1206:66::/48
                  2a0f:1584:6::/48
                  2a0f:18c0::/29
                  2a0f:1e07::/32
                  2a0f:1e80:1986::/48
                  2a0f:1fc0::/29
                  2a0f:3046:85::/48
                  2a0f:3047:fe48::/48
                  2a0f:31c7::/32
                  2a0f:3d80:1312::/48
                  2a0f:3e80::/29
                  2a0f:7d00:100::/48
                  2a0f:bc04:1004::/48
                  2a0f:da40::/29
                  2a0f:de40::/29
                  2a0f:e1c0:1312::/48
                  2a0f:e1c7:77::/48
                  2a0f:e207:fd38::/48
                  2a0f:e740::/29
                  2a0f:e7c7:b4::/48
                  2a0f:ea44:55::/48
                  2a0f:ea44:acab::/48
                  2a0f:ec00::/29
                  2a10:4e00::/29
                  2a10:5400::/29
                  2a10:67c2:d6::/48
                  2a10:67c5:2::/48
                  2a10:6f00::/29
                  2a10:7700::/29
                  2a12:ac46:77::/48
                  2a12:ac46:99::/48
                  2a12:ecc0:11::/48
                  2a12:ecc0:3e2::/48
                  2a13:18c5:11::/48
                  2a13:18c6:101::/48
                  2a13:18c6:8512::/48
                  2a13:2c40::/29
                  2a13:3080::/29
                  2a13:8100::/29
                  2a13:8c86:88::/48
                  2a13:8c86:10a::/48
                  2a13:9180::/29
                  2a13:9285:100::/48
                  2a13:c900:120::/48
                  2a13:e100:323::/48
                  2a13:e102:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:bc:28:ea:fe:de:44:4a:30:87:57:50:09:38:97:d3:a0:65:
         be:32:ca:00:9a:ad:4b:da:0e:51:c7:9e:4e:70:49:f7:e2:3a:
         09:5a:09:d5:cd:be:24:59:e5:26:4c:b2:97:86:8e:2b:2b:31:
         9d:2a:78:e4:88:ab:a7:4a:20:09:3c:2f:04:8d:65:61:a0:f1:
         55:cf:7c:1f:73:c0:9b:a0:86:b3:1a:07:d2:71:74:ae:6b:55:
         1a:60:7d:be:7d:b6:a2:b1:77:6a:89:a4:75:d2:60:92:78:2e:
         78:79:81:38:8a:11:db:60:68:9c:5d:de:6a:1f:46:8d:fe:f2:
         53:6f:3e:ca:e7:bc:da:a9:2e:3c:ec:fa:0d:3f:7d:88:75:79:
         ee:44:dc:ca:41:40:db:4a:44:24:8b:e1:05:d3:82:8b:65:93:
         e2:2f:e2:d2:ce:0b:e2:02:25:3b:73:4c:ca:64:a3:56:7d:5a:
         98:62:5d:b2:59:5b:b1:4d:24:b4:18:b2:c1:8e:56:a9:e4:9a:
         4d:30:b3:d5:2a:21:7f:a1:a2:72:81:0c:96:50:64:c0:3f:c8:
         a7:ae:f0:4d:ab:9b:73:80:28:e8:10:de:a0:1e:f4:97:9f:e3:
         dd:11:8b:df:d9:9a:2b:29:29:0c:b7:da:fe:44:95:53:4d:67:
         e6:11:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:56 2026 by rpki-client