Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/44UAkumtR6SiPV7J0MrvNe023fw.roa
File:                     44UAkumtR6SiPV7J0MrvNe023fw.roa (raw, json)
Hash identifier:          dlNYslujKCke6f4H3z2ky1MyUDwLRYBr3XNLSzbHDRk=
Subject key identifier:   E3:85:00:92:E9:AD:47:A4:A2:3D:5E:C9:D0:CA:EF:35:ED:36:DD:FC
Certificate issuer:       /CN=7d1805c9c3d097da8604e57736915ab1eb21fbe1
Certificate serial:       019FC6D8F5F0DD131FC7D7EB60BF73DFC50B
Authority key identifier: 7D:18:05:C9:C3:D0:97:DA:86:04:E5:77:36:91:5A:B1:EB:21:FB:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/44UAkumtR6SiPV7J0MrvNe023fw.roa
Signing time:             Mon 03 Aug 2026 08:58:55 +0000
ROA not before:           Mon 03 Aug 2026 08:58:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7270
IP address blocks:        213.166.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:d8:f5:f0:dd:13:1f:c7:d7:eb:60:bf:73:df:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d1805c9c3d097da8604e57736915ab1eb21fbe1
        Validity
            Not Before: Aug  3 08:58:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3850092e9ad47a4a23d5ec9d0caef35ed36ddfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:b5:53:86:27:a9:3e:5a:26:aa:55:ea:b9:
                    5a:2d:2e:94:8c:0a:aa:c5:11:13:50:69:83:4a:76:
                    f7:77:6f:22:c8:e9:84:59:5e:9a:56:5b:4b:91:99:
                    a5:46:f9:2d:98:39:f9:91:57:29:92:4e:a5:c7:2d:
                    78:50:ac:64:c4:a5:99:35:e0:bd:2f:97:fb:41:af:
                    3c:17:93:15:84:3e:2e:c2:97:11:38:b2:31:62:cb:
                    6e:05:46:c7:c8:37:16:dd:77:76:bd:cc:d1:61:e8:
                    c5:9e:f9:1a:46:9d:08:2e:85:47:6a:8f:fe:51:85:
                    ca:c8:6c:1e:ac:5c:4f:9c:1e:65:bc:32:89:a7:82:
                    9e:42:e0:89:5b:97:c5:28:02:d2:2c:3f:86:20:87:
                    da:ab:79:cf:ad:f4:22:e8:8a:58:e0:e4:5e:bd:99:
                    7d:df:85:11:ed:b4:16:44:1d:0e:03:39:d8:74:1c:
                    5a:00:d4:a9:bd:38:d4:fc:7f:fa:57:b8:ff:ae:82:
                    22:dd:2e:16:d8:fe:63:16:d4:30:2b:96:d2:07:d0:
                    1c:cd:96:3d:c0:a2:f3:6e:53:38:f2:7e:ea:05:89:
                    65:0f:4a:9e:4b:29:2b:20:e0:6e:12:e7:0a:cd:0c:
                    b9:1c:6b:d9:0a:83:85:f9:e2:2f:94:38:71:14:bc:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:00:92:E9:AD:47:A4:A2:3D:5E:C9:D0:CA:EF:35:ED:36:DD:FC
            X509v3 Authority Key Identifier:
                keyid:7D:18:05:C9:C3:D0:97:DA:86:04:E5:77:36:91:5A:B1:EB:21:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/44UAkumtR6SiPV7J0MrvNe023fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.166.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:26:84:f8:c8:a9:7b:58:05:75:6d:21:27:f0:e2:ef:60:
         07:30:46:6a:eb:63:a2:c8:b4:cc:68:9d:b2:d4:f5:89:c3:00:
         e8:08:8e:55:0d:bb:f4:c6:02:df:3a:a5:ce:d7:69:31:6a:08:
         8e:27:71:aa:3f:89:cd:25:e0:f8:61:ef:18:e9:99:73:e6:a2:
         97:7e:63:46:ae:42:5e:78:64:cd:cc:81:6b:45:3e:dd:1c:43:
         7c:ac:73:7f:16:ae:9e:bd:78:ee:63:3a:9a:e9:a8:da:de:f7:
         ea:3e:c9:97:84:2e:7c:ed:9a:e4:cd:0c:c3:6a:ed:3b:a6:a7:
         bf:4f:5d:56:3e:ec:97:9b:ec:f2:01:45:40:dd:9b:21:af:ca:
         d6:79:6e:b7:4e:0a:57:19:6b:9e:01:35:32:d1:54:80:03:24:
         0b:cc:46:54:48:4d:57:f7:d1:c6:b4:21:74:98:cf:f4:4b:9b:
         da:ae:e5:d0:8f:a9:44:c1:6a:1e:d7:9a:99:39:3b:63:3f:99:
         a0:ae:bc:6b:a4:32:fc:f6:10:96:f7:e8:c7:47:e2:47:84:41:
         9e:a5:63:70:b1:50:8a:5f:ad:b0:4a:44:27:e2:e4:43:4b:e9:
         33:ab:63:e6:4a:b3:ba:64:62:05:62:ef:ff:59:35:fd:e0:94:
         64:28:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:13 2026 by rpki-client