Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7bys01NbFUaw48OMhGHHQ-81-dI.roa
File:                     7bys01NbFUaw48OMhGHHQ-81-dI.roa (raw, json)
Hash identifier:          V15Jb0favvV2xW09kTYhbIirFVVNya4B0MsRsLfSuuk=
Subject key identifier:   ED:BC:AC:D3:53:5B:15:46:B0:E3:C3:8C:84:61:C7:43:EF:35:F9:D2
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       01A1945B7C98F00D50AA8F7E9FA7BC17C99F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7bys01NbFUaw48OMhGHHQ-81-dI.roa
Signing time:             Sat 31 Oct 2026 23:46:25 +0000
ROA not before:           Sat 31 Oct 2026 23:46:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154408
IP address blocks:        191.219.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:94:5b:7c:98:f0:0d:50:aa:8f:7e:9f:a7:bc:17:c9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Oct 31 23:46:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edbcacd3535b1546b0e3c38c8461c743ef35f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:ee:9f:b3:54:37:bb:9e:1d:60:38:fd:29:
                    17:1d:e2:e3:92:9a:0e:de:60:19:63:6d:49:d5:30:
                    23:26:e3:76:73:98:17:fc:26:19:3c:b2:db:63:bb:
                    61:17:f9:c8:e6:50:fc:b7:28:18:53:c7:09:7e:77:
                    f1:2d:9e:5c:22:fd:a6:71:72:51:56:0e:74:91:59:
                    71:be:e7:e0:38:cd:db:30:bf:2b:22:de:a0:15:c1:
                    98:09:27:e8:5e:a8:b3:b7:fa:1b:4c:c9:3b:a6:f4:
                    00:20:6c:3b:84:34:0d:b8:6d:2a:84:a0:13:04:ae:
                    61:8f:71:b8:ac:0c:50:8d:20:05:4f:4e:60:8d:45:
                    41:f0:60:7c:d1:55:86:a1:ce:f8:56:ff:3e:5c:79:
                    a7:c5:0b:c9:4b:bf:8a:ea:84:b8:6c:9f:b2:5c:c8:
                    88:c8:37:a3:fc:94:04:8a:08:ba:87:2f:09:ff:aa:
                    f5:aa:9d:23:d6:b0:c8:6a:23:af:4a:38:62:4c:92:
                    d4:c2:5d:ae:92:b2:8c:dd:c2:43:03:c7:a8:8b:30:
                    48:87:a3:11:ee:cd:79:39:2a:26:80:24:e4:ef:0c:
                    ef:2d:63:62:ca:09:8e:0a:6e:1b:94:3a:a6:df:a3:
                    d2:96:4a:b9:da:a3:28:71:80:0c:c9:c8:43:73:9d:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BC:AC:D3:53:5B:15:46:B0:E3:C3:8C:84:61:C7:43:EF:35:F9:D2
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7bys01NbFUaw48OMhGHHQ-81-dI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.219.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:df:09:fb:9c:0d:8b:4e:df:a4:21:77:69:b4:5f:06:4c:46:
         13:61:7d:f1:d3:b3:2f:f1:c5:06:76:d0:46:89:9b:41:20:9e:
         e4:81:9e:18:bf:97:f2:da:6e:4b:ee:77:91:a6:28:23:da:65:
         26:1c:25:de:c7:15:8f:a0:65:43:6c:9a:b9:6b:a1:40:a5:1a:
         ac:60:09:00:b3:a6:b3:fe:f8:ea:e2:c2:d4:f7:45:7c:91:54:
         7a:de:c8:9d:74:e5:27:16:04:19:41:71:0c:bb:66:a6:19:03:
         3a:98:ce:c2:39:21:4e:9d:92:27:3c:7e:25:24:d0:a6:f8:86:
         fd:a4:62:51:62:04:5b:0b:30:d3:2b:7b:2f:17:75:af:48:f1:
         be:ae:e6:13:7b:13:65:ed:4c:44:57:bb:d8:91:ac:b0:7b:7a:
         da:d2:1c:5e:1d:bd:48:25:4b:c3:42:c4:6c:90:84:61:a2:01:
         e8:e6:31:d4:88:21:83:47:06:fc:73:f7:2b:59:f8:85:72:78:
         1f:87:4e:5c:3b:fe:dd:71:cd:b6:01:26:da:72:a9:1e:6d:4b:
         6b:e6:f4:f6:27:49:e5:26:6b:c8:f6:95:c4:a7:d5:9a:cd:b1:
         35:30:38:8c:f7:7c:b7:4d:2c:d2:4c:f4:86:15:58:10:d8:ed:
         d1:f6:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:36 2026 by rpki-client