Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/s57x92Ej_96SNXA0zjzeysdQA3k.roa
File:                     s57x92Ej_96SNXA0zjzeysdQA3k.roa (raw, json)
Hash identifier:          2URtcbZKXPnotoYAst5fublzS75JHzTKvsHH3PUpxYY=
Subject key identifier:   B3:9E:F1:F7:61:23:FF:DE:92:35:70:34:CE:3C:DE:CA:C7:50:03:79
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       019F54D0471CB13C87B3B42A4E1EBC04CDD0
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/s57x92Ej_96SNXA0zjzeysdQA3k.roa
Signing time:             Sun 12 Jul 2026 05:32:43 +0000
ROA not before:           Sun 12 Jul 2026 05:32:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203
IP address blocks:        45.94.14.0/24 maxlen: 24
                          45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/22 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.26.0/23 maxlen: 24
                          212.26.28.0/23 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 25
                          212.26.37.0/24 maxlen: 25
                          212.26.38.0/24 maxlen: 24
                          212.26.39.0/24 maxlen: 24
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/23 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/23 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 25
                          212.26.76.0/24 maxlen: 24
                          212.26.78.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/23 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/21 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 24
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.132.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.147.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 25
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 24
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 24
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.192.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.210.0/24 maxlen: 24
                          212.138.210.0/28 maxlen: 28
                          212.138.250.0/24 maxlen: 24
                          212.138.251.0/24 maxlen: 24
                          212.138.252.0/24 maxlen: 24
                          212.138.253.0/24 maxlen: 24
                          2001:1490::/48 maxlen: 48
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:100::/48 maxlen: 48
                          2001:1490:101::/48 maxlen: 48
                          2001:1490:102::/48 maxlen: 48
                          2001:1490:103::/48 maxlen: 49
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:108::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48
                          2001:1490:113::/48 maxlen: 48
                          2001:1490:114::/48 maxlen: 48
                          2001:1490:115::/48 maxlen: 50
                          2001:1490:116::/48 maxlen: 48
                          2001:1490:117::/48 maxlen: 49
                          2001:1490:118::/48 maxlen: 49
                          2001:1497:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:54:d0:47:1c:b1:3c:87:b3:b4:2a:4e:1e:bc:04:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jul 12 05:32:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b39ef1f76123ffde92357034ce3cdecac7500379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:fa:eb:cf:8b:2f:7c:f0:9b:61:1a:05:b8:
                    78:f5:62:21:cb:ec:1f:d6:30:47:e1:dd:f5:1c:1f:
                    66:ac:4e:09:2f:d0:a9:87:d9:30:31:6e:8c:eb:54:
                    b1:8d:2f:2b:f5:26:20:22:a6:ac:95:54:ba:bd:f8:
                    03:8a:e3:f9:6e:93:9d:29:9b:ea:0d:a9:ab:26:98:
                    40:d8:3b:ac:c4:a8:4c:24:62:80:6f:07:8c:62:e1:
                    63:26:b0:a0:68:5b:bd:22:8a:8e:7f:b2:24:9d:6b:
                    80:e2:f2:f5:10:2c:88:19:d2:d6:48:24:5d:49:29:
                    27:94:22:1c:0f:a3:9a:07:5b:71:a6:84:e8:f8:0d:
                    70:84:dc:fb:0f:28:5e:16:18:0a:6c:ec:2d:a7:cd:
                    7a:bc:23:3c:1d:d9:e8:a5:ca:2a:c1:8a:c2:77:04:
                    cb:9a:a2:ca:be:65:46:fd:3e:48:2c:5f:f9:9e:c3:
                    02:42:f7:3d:6d:57:37:25:a3:fe:be:5b:90:48:3c:
                    45:d4:5b:9f:82:87:09:8b:ca:8c:ff:4b:33:40:9d:
                    00:47:27:43:4d:0b:6e:59:7c:00:be:52:1b:c6:63:
                    0b:7d:94:0e:1a:dc:3c:6a:06:a4:90:cf:4a:74:b0:
                    31:0a:16:e7:c7:23:05:30:53:18:17:db:1d:db:f0:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9E:F1:F7:61:23:FF:DE:92:35:70:34:CE:3C:DE:CA:C7:50:03:79
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/s57x92Ej_96SNXA0zjzeysdQA3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.14.0/23
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/47
                  2001:1490:100::/46
                  2001:1490:106::/48
                  2001:1490:108::/48
                  2001:1490:110::-2001:1490:118:ffff:ffff:ffff:ffff:ffff
                  2001:1497:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:52:dc:18:72:1e:53:65:6a:01:8d:99:a1:c2:51:86:1f:f8:
         d6:52:74:c2:39:4e:f8:ce:32:af:e2:ab:3a:4f:9d:dc:b7:43:
         49:4b:2a:a4:af:d4:cc:ea:60:68:75:e7:5f:ae:66:f2:79:45:
         49:9e:0a:54:fc:a7:77:8a:c8:10:bb:bb:f0:6a:6e:73:8e:d9:
         d5:a4:16:97:88:85:4a:4c:6a:69:44:8f:be:e1:fb:7b:ef:51:
         a9:45:50:6e:94:94:40:34:c1:57:4d:82:b8:3a:30:9d:c0:2c:
         1d:f3:19:64:2b:99:6b:28:d4:aa:3c:71:46:36:99:79:2a:6a:
         43:e7:d8:cb:e3:31:2e:2d:3a:21:84:1f:91:13:72:a6:15:01:
         13:c1:0d:f2:80:4f:d0:e9:84:1f:95:f3:6a:1b:0d:0b:d3:46:
         4b:29:16:19:f8:44:8b:06:5b:ef:9b:45:89:4a:56:b9:54:ba:
         ab:72:9c:dd:1a:9c:ae:1b:a7:bc:5d:8c:e8:6c:52:f1:84:48:
         b3:e3:32:21:83:01:27:1e:9e:b3:ea:56:a9:c1:d2:29:a2:99:
         e0:4d:ae:34:1e:32:c6:71:09:de:92:93:e9:a9:cc:ef:05:c5:
         de:cf:e2:e8:fb:5e:73:da:00:e0:ae:38:99:34:e7:50:7b:8c:
         82:f4:27:71
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZ9U0EccsTyHs7QqTh68BM3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjYwNzEyMDUzMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzllZjFmNzYxMjNmZmRlOTIzNTcwMzRjZTNjZGVjYWM3NTAwMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzX668+LL3zwm2EaBbh49WIhy+wf
1jBH4d31HB9mrE4JL9Cph9kwMW6M61SxjS8r9SYgIqaslVS6vfgDiuP5bpOdKZvq
DamrJphA2DusxKhMJGKAbweMYuFjJrCgaFu9IoqOf7IknWuA4vL1ECyIGdLWSCRd
SSknlCIcD6OaB1txpoTo+A1whNz7DyheFhgKbOwtp816vCM8HdnopcoqwYrCdwTL
mqLKvmVG/T5ILF/5nsMCQvc9bVc3JaP+vluQSDxF1FufgocJi8qM/0szQJ0ARydD
TQtuWXwAvlIbxmMLfZQOGtw8agakkM9KdLAxChbnxyMFMFMYF9sd2/C7tQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFLOe8fdhI//ekjVwNM483srHUAN5MB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvczU3eDkyRWpfOTZTTlhBMHpqemV5c2RRQTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDAdBAIAATAXAwQBLV4OAwQC
W+U0AwQH1BoAAwMA1IowRwQCAAIwQQMHASABFJAAAAMHAiABFJABAAMHACABFJAB
BgMHACABFJABCDASAwcEIAEUkAEQAwcAIAEUkAEYAwcAIAEUlwACMA0GCSqGSIb3
DQEBCwUAA4IBAQCAUtwYch5TZWoBjZmhwlGGH/jWUnTCOU74zjKv4qs6T53ct0NJ
Syqkr9TM6mBodedfrmbyeUVJngpU/Kd3isgQu7vwam5zjtnVpBaXiIVKTGppRI++
4ft771GpRVBulJRANMFXTYK4OjCdwCwd8xlkK5lrKNSqPHFGNpl5KmpD59jL4zEu
LTohhB+RE3KmFQETwQ3ygE/Q6YQflfNqGw0L00ZLKRYZ+ESLBlvvm0WJSla5VLqr
cpzdGpyuG6e8XYzobFLxhEiz4zIhgwEnHp6z6lapwdIpopngTa40HjLGcQnekpPp
qczvBcXez+Lo+15z2gDgrjiZNOdQe4yC9Cdx
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:12:08 2026 by rpki-client