Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EtxOD5OHQM2gTNtZU60CrLsYLGA.roa
File:                     EtxOD5OHQM2gTNtZU60CrLsYLGA.roa (raw, json)
Hash identifier:          jTTNqfJFZvwcTBo4B4BSXQQ2cKeRFY8KA9efSmh46fA=
Subject key identifier:   12:DC:4E:0F:93:87:40:CD:A0:4C:DB:59:53:AD:02:AC:BB:18:2C:60
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019FEF3B095FBF9DD0E99D47A26F804E0C6E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EtxOD5OHQM2gTNtZU60CrLsYLGA.roa
Signing time:             Tue 11 Aug 2026 05:10:51 +0000
ROA not before:           Tue 11 Aug 2026 05:10:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402315
IP address blocks:        83.147.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ef:3b:09:5f:bf:9d:d0:e9:9d:47:a2:6f:80:4e:0c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Aug 11 05:10:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12dc4e0f938740cda04cdb5953ad02acbb182c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d1:55:ba:f0:20:81:28:a6:41:dc:b0:79:ef:
                    9d:e9:ad:12:11:b4:9f:ec:69:f9:26:07:cb:74:cb:
                    83:24:9c:cc:61:39:95:bf:4a:df:d1:64:0f:56:02:
                    7c:9c:bd:95:b9:06:c5:7b:a9:27:28:84:a0:6e:48:
                    2b:36:ae:99:27:e9:36:e3:92:88:60:99:4d:6b:af:
                    40:f7:17:37:92:75:22:60:6e:10:3d:83:80:3f:d1:
                    b1:3d:23:6f:9e:3b:87:26:8c:f2:df:2d:a0:f4:ef:
                    95:29:b1:50:dc:af:55:47:48:cf:aa:f0:ae:31:14:
                    31:19:5f:69:e3:0b:43:35:11:9f:4c:b9:9e:b6:c6:
                    0f:ba:63:98:f4:68:98:10:6e:16:dd:1c:b2:2b:18:
                    48:ff:5f:07:f4:a9:53:b4:8a:32:7b:12:46:a2:59:
                    16:df:65:2f:e4:b7:6c:80:7e:e4:ac:ac:84:4c:32:
                    a1:0e:47:1b:f9:dd:bc:09:63:66:25:59:c8:98:8e:
                    f8:00:99:9b:18:eb:a6:65:95:17:15:c2:fa:80:f6:
                    14:ee:28:b2:7f:31:3c:2f:5d:e4:7e:51:78:72:45:
                    31:16:8c:24:f0:ba:e3:07:cc:c2:91:76:75:f6:00:
                    a3:42:b9:5a:48:62:3c:35:56:b3:6e:31:1b:de:e2:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DC:4E:0F:93:87:40:CD:A0:4C:DB:59:53:AD:02:AC:BB:18:2C:60
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/EtxOD5OHQM2gTNtZU60CrLsYLGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:81:42:79:9d:a6:ad:77:f3:32:a2:9d:11:f4:e2:1a:85:5d:
         51:59:cf:94:a5:4b:1c:0a:34:7a:ae:99:22:c7:a1:c6:95:2f:
         e3:d6:ae:2f:f1:07:06:9a:70:d9:91:96:96:2e:af:ae:ce:79:
         76:0a:52:c6:4d:a7:0b:3f:f0:2f:7c:c5:bf:74:f2:7e:fb:27:
         5d:75:2c:25:64:50:71:93:44:b3:bf:28:f8:4a:8b:3a:07:6b:
         15:0e:54:6c:95:73:20:ff:99:5c:f8:1f:98:6a:a6:5d:11:12:
         8b:3d:1a:ca:b1:3e:bd:1d:5b:32:92:9a:55:f2:c1:39:0f:a5:
         9f:83:24:56:81:fd:50:69:72:5a:b3:8f:96:8f:33:b2:da:e0:
         8e:a1:83:8a:43:5e:d9:66:37:e2:3f:85:7f:05:77:80:ea:66:
         c7:f5:cd:4f:a9:cd:3b:5e:50:5a:42:f5:20:7f:4a:03:f0:43:
         67:01:82:97:49:7e:50:3a:75:00:a6:55:38:04:79:9b:d8:af:
         24:ab:21:1f:63:73:99:9c:a0:c9:c5:1e:c7:7c:fd:3f:57:2a:
         91:a8:ce:6f:2c:89:07:ad:18:a7:01:d1:2e:8a:20:25:de:70:
         cb:1f:c6:bf:ca:73:21:77:1f:bc:06:ae:c9:6a:1b:9b:94:30:
         7f:f6:4d:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/vOwlfv53Q6Z1Hom+ATgxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwODExMDUxMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmRjNGUwZjkzODc0MGNkYTA0Y2RiNTk1M2FkMDJhY2JiMTgyYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NFVuvAggSimQdywee+d6a0SEbSf
7Gn5JgfLdMuDJJzMYTmVv0rf0WQPVgJ8nL2VuQbFe6knKISgbkgrNq6ZJ+k245KI
YJlNa69A9xc3knUiYG4QPYOAP9GxPSNvnjuHJozy3y2g9O+VKbFQ3K9VR0jPqvCu
MRQxGV9p4wtDNRGfTLmetsYPumOY9GiYEG4W3RyyKxhI/18H9KlTtIoyexJGolkW
32Uv5LdsgH7krKyETDKhDkcb+d28CWNmJVnImI74AJmbGOumZZUXFcL6gPYU7iiy
fzE8L13kflF4ckUxFowk8LrjB8zCkXZ19gCjQrlaSGI8NVazbjEb3uL/8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLcTg+Th0DNoEzbWVOtAqy7GCxgMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvRXR4T0Q1T0hRTTJnVE50WlU2MENyTHNZTEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MaMA0G
CSqGSIb3DQEBCwUAA4IBAQAXgUJ5naatd/Myop0R9OIahV1RWc+UpUscCjR6rpki
x6HGlS/j1q4v8QcGmnDZkZaWLq+uznl2ClLGTacLP/AvfMW/dPJ++ydddSwlZFBx
k0Szvyj4Sos6B2sVDlRslXMg/5lc+B+YaqZdERKLPRrKsT69HVsykppV8sE5D6Wf
gyRWgf1QaXJas4+WjzOy2uCOoYOKQ17ZZjfiP4V/BXeA6mbH9c1Pqc07XlBaQvUg
f0oD8ENnAYKXSX5QOnUAplU4BHmb2K8kqyEfY3OZnKDJxR7HfP0/VyqRqM5vLIkH
rRinAdEuiiAl3nDLH8a/ynMhdx+8Bq7JahublDB/9k1P
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:24 2026 by rpki-client