Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/i536I-ayrDn5uau328WAcV3xqS0.roa
File:                     i536I-ayrDn5uau328WAcV3xqS0.roa (raw, json)
Hash identifier:          OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=
Subject key identifier:   8B:9D:FA:23:E6:B2:AC:39:F9:B9:AB:B7:DB:C5:80:71:5D:F1:A9:2D
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       019FFF23DC0EAABFDF5D843C9BC381E77DB9
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/i536I-ayrDn5uau328WAcV3xqS0.roa
Signing time:             Fri 14 Aug 2026 07:19:27 +0000
ROA not before:           Fri 14 Aug 2026 07:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401362
IP address blocks:        80.93.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ff:23:dc:0e:aa:bf:df:5d:84:3c:9b:c3:81:e7:7d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Aug 14 07:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b9dfa23e6b2ac39f9b9abb7dbc580715df1a92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:2d:b7:f2:74:cd:a2:16:45:28:a7:d3:e6:
                    9b:87:62:8b:ab:27:ed:ad:8a:03:f5:c8:61:1a:7c:
                    ff:8d:89:3e:e8:7e:21:d3:b0:74:5e:a6:f8:2a:e4:
                    ea:bf:03:d6:11:28:c1:7d:24:13:65:99:c9:77:9b:
                    fc:f7:df:65:8e:de:e8:01:0b:cc:90:03:24:c4:e8:
                    5d:b4:d8:94:fd:d5:2f:8a:22:8b:f9:e9:b4:b2:e3:
                    60:2d:26:9c:17:7e:2d:01:44:71:a6:b9:65:10:bc:
                    78:79:55:a4:96:5f:7c:88:43:93:10:b4:69:2b:73:
                    d2:f7:8b:9d:fa:cb:c6:c5:69:ce:99:70:f6:35:2a:
                    2d:fb:db:a7:24:ef:16:6f:be:09:a8:55:5a:83:fc:
                    cf:94:27:cf:45:e4:03:16:b6:1a:0c:c8:c1:80:04:
                    36:1d:d0:7a:4c:e9:20:42:89:66:a2:5c:87:4f:b5:
                    9c:d2:56:06:49:ed:de:2b:3a:bd:e1:49:53:54:1e:
                    51:3c:39:88:95:c5:1e:40:4b:bc:a7:ea:a4:e9:f5:
                    39:31:56:9a:3f:3f:d7:94:a0:f5:35:be:f0:ef:85:
                    ee:5b:7e:38:5c:79:a5:ee:d2:6e:3b:87:cb:cf:48:
                    a4:64:16:d6:7d:75:b5:0c:8f:0a:35:ff:02:ce:e2:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:FA:23:E6:B2:AC:39:F9:B9:AB:B7:DB:C5:80:71:5D:F1:A9:2D
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/i536I-ayrDn5uau328WAcV3xqS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:a4:68:1d:ac:66:0b:6f:b6:b6:ba:9c:90:c5:ff:7b:aa:
         77:96:3e:b1:bf:79:c9:fe:ca:c2:2b:89:48:c1:30:66:98:25:
         73:73:a1:53:d2:40:28:9d:af:f2:3b:0d:79:03:38:a0:c5:3d:
         0b:17:3f:d9:3d:cb:2f:54:08:49:5c:32:8a:94:2b:c9:5f:66:
         fb:4b:a5:a0:de:99:42:40:e2:47:44:e9:00:61:23:65:38:96:
         77:2a:9b:d4:c1:70:1f:43:e9:5b:1b:6b:ba:1f:68:1d:f5:c0:
         59:58:a4:aa:cb:06:90:c6:db:44:37:10:42:7c:db:8b:4d:21:
         1e:b0:0d:a2:2c:cc:20:f0:3b:3e:46:25:b6:ce:33:d4:41:c2:
         12:30:9c:2f:0b:11:20:87:f3:e2:78:10:cd:d0:d1:97:a1:15:
         f1:0b:ff:b3:fe:8a:58:70:ba:a4:37:2f:6a:0c:c2:9e:50:e1:
         a0:d3:40:cb:6b:fb:97:26:15:60:4f:f3:fc:b4:41:02:20:dc:
         cc:31:b2:e7:2b:bd:1b:a8:cb:f8:36:12:4b:74:54:ca:8f:56:
         24:19:c7:68:d9:df:29:98:02:22:63:df:99:88:3a:3b:76:60:
         c5:99:68:22:9b:34:dc:50:ff:15:ea:38:1f:86:0c:ce:21:e0:
         9b:5f:3b:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ//I9wOqr/fXYQ8m8OB5325MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwODE0MDcxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjlkZmEyM2U2YjJhYzM5ZjliOWFiYjdkYmM1ODA3MTVkZjFhOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D8tt/J0zaIWRSin0+abh2KLqyft
rYoD9chhGnz/jYk+6H4h07B0Xqb4KuTqvwPWESjBfSQTZZnJd5v8999ljt7oAQvM
kAMkxOhdtNiU/dUviiKL+em0suNgLSacF34tAURxprllELx4eVWkll98iEOTELRp
K3PS94ud+svGxWnOmXD2NSot+9unJO8Wb74JqFVag/zPlCfPReQDFrYaDMjBgAQ2
HdB6TOkgQolmolyHT7Wc0lYGSe3eKzq94UlTVB5RPDmIlcUeQEu8p+qk6fU5MVaa
Pz/XlKD1Nb7w74XuW344XHml7tJuO4fLz0ikZBbWfXW1DI8KNf8CzuKQpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIud+iPmsqw5+bmrt9vFgHFd8aktMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvaTUzNkktYXlyRG41dWF1MzI4V0FjVjN4cVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3BMA0G
CSqGSIb3DQEBCwUAA4IBAQAG6aRoHaxmC2+2trqckMX/e6p3lj6xv3nJ/srCK4lI
wTBmmCVzc6FT0kAona/yOw15AzigxT0LFz/ZPcsvVAhJXDKKlCvJX2b7S6Wg3plC
QOJHROkAYSNlOJZ3KpvUwXAfQ+lbG2u6H2gd9cBZWKSqywaQxttENxBCfNuLTSEe
sA2iLMwg8Ds+RiW2zjPUQcISMJwvCxEgh/PieBDN0NGXoRXxC/+z/opYcLqkNy9q
DMKeUOGg00DLa/uXJhVgT/P8tEECINzMMbLnK70bqMv4NhJLdFTKj1YkGcdo2d8p
mAIiY9+ZiDo7dmDFmWgimzTcUP8V6jgfhgzOIeCbXzs7
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:51:48 2026 by rpki-client