Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eyQAOtJ76YyAMLLYCvbUwwBmzAU.roa
File:                     eyQAOtJ76YyAMLLYCvbUwwBmzAU.roa (raw, json)
Hash identifier:          13cMF3wNzv9OAa3LOPtXK4Vq+jVKWldvLD65mXJynK4=
Subject key identifier:   7B:24:00:3A:D2:7B:E9:8C:80:30:B2:D8:0A:F6:D4:C3:00:66:CC:05
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019FD1554C88AF1B337C21538A5B2304FFB3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eyQAOtJ76YyAMLLYCvbUwwBmzAU.roa
Signing time:             Wed 05 Aug 2026 09:50:56 +0000
ROA not before:           Wed 05 Aug 2026 09:50:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197789
IP address blocks:        193.41.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:55:4c:88:af:1b:33:7c:21:53:8a:5b:23:04:ff:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Aug  5 09:50:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b24003ad27be98c8030b2d80af6d4c30066cc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:cb:6b:ae:c6:0d:b3:bf:c6:c4:3f:4a:6c:
                    d4:63:7e:77:34:fa:90:da:c9:60:7d:ac:6a:14:87:
                    7e:7c:86:d1:fe:f7:b6:7c:79:8d:aa:28:b4:b9:31:
                    fe:9a:06:99:19:12:64:99:5d:9b:1c:23:9d:65:4d:
                    b6:1e:7d:9b:47:0d:d6:93:5c:18:d0:a1:3f:d3:ca:
                    65:ae:18:b2:0e:2f:a4:ee:06:27:dd:f8:f3:e3:ae:
                    2b:85:97:4a:30:36:2c:73:22:bc:fb:eb:26:f2:7c:
                    79:66:ce:87:97:df:36:e1:27:f2:cb:33:42:40:01:
                    40:77:3a:b9:9b:e1:0a:0f:17:cb:35:d0:d1:c9:92:
                    af:65:ff:b6:0e:63:60:38:33:03:0e:43:85:a7:55:
                    0e:53:46:e6:6a:b7:bf:3c:ec:df:a7:16:75:51:80:
                    6e:96:63:2a:bd:b1:ab:a3:84:f2:e6:57:64:e5:43:
                    0f:d1:f1:2e:a2:48:c0:53:03:4b:f7:90:10:42:c5:
                    cf:74:f2:b4:58:55:98:25:71:8f:2e:da:88:f9:e7:
                    8b:f4:dc:1b:df:eb:9d:88:81:8f:0d:e7:d1:03:3d:
                    ab:6e:e5:41:92:26:4a:75:e7:fb:ae:22:d6:9a:ce:
                    cb:b8:6a:2c:80:0b:7c:dc:db:8b:cf:76:e1:4b:b7:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:00:3A:D2:7B:E9:8C:80:30:B2:D8:0A:F6:D4:C3:00:66:CC:05
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eyQAOtJ76YyAMLLYCvbUwwBmzAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:4d:b8:aa:60:21:08:65:78:40:48:9a:7f:10:ba:b6:83:
         99:9d:59:b5:e9:f9:0a:80:42:8c:0c:b4:b5:bd:7a:5b:e1:6f:
         65:d3:34:a1:88:69:ef:9c:d5:8e:09:d5:d2:5b:6c:42:eb:12:
         ef:2c:86:bb:43:3f:ce:a0:48:d5:c9:12:95:72:c4:f8:d4:54:
         09:43:e4:d5:62:00:6d:69:b8:be:66:93:c8:63:6c:79:3e:ff:
         99:37:77:d3:35:fb:a4:5b:59:50:97:9b:87:ab:af:99:3f:75:
         70:7d:44:2d:64:26:75:42:e2:ba:8e:96:1c:f1:ed:50:9a:75:
         4d:44:d1:e7:f8:61:67:b1:5a:6d:c4:4c:e3:27:95:c9:90:27:
         92:62:c1:59:34:57:e7:66:8a:73:b0:65:01:31:12:3f:f7:29:
         48:62:9b:83:de:79:d9:bd:27:b6:20:b1:6c:50:52:d9:81:d4:
         05:64:b4:53:33:cc:8d:83:32:87:17:e5:f6:cb:25:77:63:7c:
         50:dd:ce:d2:9d:4c:57:70:21:ea:e1:29:97:ef:36:88:91:fa:
         bc:29:73:a5:06:f9:b3:4b:93:13:42:6b:cf:e4:2a:2e:82:3a:
         36:e4:44:55:a2:a8:ad:5a:97:bd:db:8a:6e:f5:c6:ac:3e:c6:
         d4:3f:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:57:12 2026 by rpki-client