Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/ME3cETnapLDHP6DWdBAQQoKbaeM.roa
File:                     ME3cETnapLDHP6DWdBAQQoKbaeM.roa (raw, json)
Hash identifier:          W28I+8J7qnVyHnps7J0q4RxiUOdB6ciorvAbvq4SRpY=
Subject key identifier:   30:4D:DC:11:39:DA:A4:B0:C7:3F:A0:D6:74:10:10:42:82:9B:69:E3
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019FC9135723662590C8F0D45DCF4FD4B877
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/ME3cETnapLDHP6DWdBAQQoKbaeM.roa
Signing time:             Mon 03 Aug 2026 19:21:55 +0000
ROA not before:           Mon 03 Aug 2026 19:21:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6762
IP address blocks:        194.179.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c9:13:57:23:66:25:90:c8:f0:d4:5d:cf:4f:d4:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Aug  3 19:21:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=304ddc1139daa4b0c73fa0d674101042829b69e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:f8:7b:d0:86:e0:7a:37:cf:6b:93:c0:de:
                    1b:d2:0d:ad:1f:19:07:2e:a5:a1:c6:6e:80:53:19:
                    39:df:bf:b6:26:fc:1a:8f:74:1b:ef:37:9b:a6:2f:
                    e0:77:a3:62:19:02:eb:1a:a7:d1:54:f5:bb:bb:ff:
                    f3:32:b9:c3:70:9a:2d:fc:1b:69:9a:1a:26:02:25:
                    76:17:dd:92:02:02:4e:d2:aa:7e:05:b2:4b:d6:62:
                    ad:63:79:d3:9c:51:ae:12:c6:96:b4:9a:5a:6e:09:
                    ae:62:6a:63:ff:be:6d:00:ab:99:69:9d:e9:a2:e3:
                    9f:eb:5d:7f:48:88:c5:72:26:fe:45:30:be:a4:b4:
                    61:6a:67:eb:a6:25:30:47:be:1d:7a:bb:d5:dc:7e:
                    4d:b1:01:7a:46:24:4c:fc:d1:1c:1b:bf:33:29:01:
                    0b:bd:3e:b5:dc:48:9d:0a:73:5c:a7:a6:b4:aa:81:
                    e3:ee:51:d6:6d:41:42:8e:46:66:68:79:95:f6:ea:
                    a5:ba:79:6a:41:14:5e:57:6d:03:e4:47:f6:1f:4e:
                    6a:21:4e:30:62:2f:38:29:5a:54:f7:be:5d:68:f9:
                    71:f6:17:f7:ec:c0:7d:ad:1d:01:7b:ee:04:25:fb:
                    a1:ab:c4:fb:c5:76:e1:80:89:64:3a:60:b7:14:a0:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4D:DC:11:39:DA:A4:B0:C7:3F:A0:D6:74:10:10:42:82:9B:69:E3
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/ME3cETnapLDHP6DWdBAQQoKbaeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:ec:bd:27:bc:e8:e3:95:5c:82:a6:1d:3b:b3:a9:65:05:
         db:18:6a:94:cf:b0:0b:9b:67:0d:94:0f:b2:28:0c:dc:b7:4d:
         a6:3c:ac:a6:3a:92:c5:82:28:00:08:0b:20:d6:b5:ad:9e:aa:
         ff:46:2b:cb:cc:5f:78:ea:20:d6:0b:6c:6f:84:e9:a8:13:27:
         bb:18:a5:60:b9:f3:36:53:9c:ef:e8:1c:73:5f:0c:11:0b:93:
         67:25:5c:a3:2c:a1:ee:d7:d6:22:83:bc:a7:ca:ec:8c:fe:fd:
         11:0b:21:c5:30:2c:37:cc:6d:44:a8:39:6e:a2:33:30:c4:5d:
         c1:bf:01:b6:d8:fd:6d:bf:ba:97:4e:d8:40:ed:8a:16:4e:94:
         88:dd:e4:79:06:79:80:39:e7:1a:6e:b2:88:04:34:6f:cc:a7:
         a6:c0:d8:94:2f:93:2f:3b:c4:d7:f4:59:b4:cb:6a:1b:36:14:
         52:e6:1d:c4:5a:b2:7e:84:26:1f:09:6c:30:10:7b:56:1c:34:
         0c:2b:30:c3:96:e1:dc:cd:f5:d4:a6:39:f3:e9:c6:ba:dd:58:
         8e:e8:d7:05:61:5a:13:62:00:4b:cc:a4:6e:c7:19:f1:bc:89:
         9b:c6:cf:c8:67:e6:6d:d6:06:d9:66:02:4d:f2:48:33:fe:ab:
         42:5f:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:49:22 2026 by rpki-client