Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/546UWvWGhdpJ8v98hderCrojdtA.roa
File:                     546UWvWGhdpJ8v98hderCrojdtA.roa (raw, json)
Hash identifier:          6DzrGXudmyoXg8jTIJPljYFkr7htCLIXi2BjYcFDJmE=
Subject key identifier:   E7:8E:94:5A:F5:86:85:DA:49:F2:FF:7C:85:D7:AB:0A:BA:23:76:D0
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019FC913568240E304EBAAB7D576FE9EFE49
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/546UWvWGhdpJ8v98hderCrojdtA.roa
Signing time:             Mon 03 Aug 2026 19:21:55 +0000
ROA not before:           Mon 03 Aug 2026 19:21:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6079
IP address blocks:        194.179.160.0/19 maxlen: 24
                          194.179.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c9:13:56:82:40:e3:04:eb:aa:b7:d5:76:fe:9e:fe:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Aug  3 19:21:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e78e945af58685da49f2ff7c85d7ab0aba2376d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:bd:2e:8f:9b:35:75:75:99:fa:90:ae:df:
                    68:04:75:03:6f:47:71:d2:70:9e:be:51:59:6c:c8:
                    06:6f:d9:0e:74:ed:00:ca:cb:92:a0:21:be:fa:f5:
                    b3:3e:5a:55:35:c1:e4:b7:da:d0:e6:e7:06:17:f8:
                    97:c5:7d:cf:55:91:84:1e:67:52:43:2a:ba:b7:09:
                    cb:b0:f5:00:67:19:0a:82:f2:44:37:91:23:4c:0f:
                    33:e2:82:71:e4:41:7e:56:94:55:9d:62:09:4c:8f:
                    e7:69:80:94:ac:6e:a2:bb:d3:fe:40:e4:59:3b:bd:
                    4e:a6:96:54:20:42:d2:b7:d6:f0:ce:06:4d:42:66:
                    16:b8:d5:25:8f:fc:62:70:06:95:1e:ad:c6:09:82:
                    18:10:df:3c:1c:cf:8d:e1:5e:de:5a:89:62:2d:6e:
                    2c:95:49:ad:53:71:0a:ba:1a:13:51:e5:68:66:cd:
                    11:ce:8a:2a:f9:2c:f8:33:d9:b3:e3:ad:7c:e1:84:
                    f3:9a:39:52:56:bd:f7:20:67:08:30:b2:1b:83:67:
                    7a:a1:da:86:2a:f7:3e:62:7f:85:05:43:4e:ff:7a:
                    6c:da:c9:df:75:0c:ec:e7:7b:f2:08:24:3c:2b:4b:
                    22:ad:c2:b3:ba:21:e8:19:43:38:fe:90:3c:fe:46:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8E:94:5A:F5:86:85:DA:49:F2:FF:7C:85:D7:AB:0A:BA:23:76:D0
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/546UWvWGhdpJ8v98hderCrojdtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.160.0/19
                  194.179.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:45:61:ab:0c:9b:24:b1:e1:55:a5:86:f1:23:d3:6b:10:4e:
         f8:eb:6c:2a:6a:d8:44:e2:cb:47:7a:90:a7:49:d3:47:02:31:
         cf:f3:05:3b:c1:c0:1c:98:1a:76:58:7a:49:fa:18:a6:4d:90:
         d3:db:66:27:1c:be:7d:f6:1e:78:15:ec:1f:bb:53:e9:34:aa:
         59:77:4a:0d:bf:a8:66:1b:80:e2:fd:e8:6b:be:71:43:2c:a3:
         8b:44:4b:98:bb:56:e9:9a:48:2d:b3:01:1c:3d:3d:38:ca:a3:
         1d:c8:40:91:89:71:87:14:8d:aa:63:d8:9b:89:ae:74:be:0e:
         a4:e5:5f:24:c7:85:6a:32:80:41:73:42:db:dd:d0:e2:04:89:
         0b:4d:bc:f1:51:23:c1:0c:d3:c3:9f:35:ef:99:df:51:ca:07:
         85:71:5a:b2:e6:e6:14:44:62:13:cd:23:50:52:e8:30:0e:3d:
         66:6a:2c:fe:fd:78:06:cb:eb:59:94:85:26:99:c0:b9:09:c7:
         2c:c6:7e:59:07:8a:56:82:e7:03:29:43:fb:9c:ca:2e:87:27:
         e8:32:75:d8:30:93:4f:f8:19:71:c2:ef:c5:25:49:e9:8f:98:
         40:1e:53:dc:77:46:91:77:61:70:66:b9:c5:0b:c8:35:16:78:
         89:35:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:50:05 2026 by rpki-client