Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RgseeIpcPuu__XA079h6hikR6s0.roa
File:                     RgseeIpcPuu__XA079h6hikR6s0.roa (raw, json)
Hash identifier:          v9SjINGpZi96ilEWGFtxlyefdB0q6L8VI2kgYL34wzM=
Subject key identifier:   46:0B:1E:78:8A:5C:3E:EB:BF:FD:70:34:EF:D8:7A:86:29:11:EA:CD
Certificate issuer:       /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial:       01A0A4E68C1007A2E4EC55A7148995E1B9B3
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RgseeIpcPuu__XA079h6hikR6s0.roa
Signing time:             Tue 15 Sep 2026 11:49:27 +0000
ROA not before:           Tue 15 Sep 2026 11:49:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218687
IP address blocks:        93.190.8.0/24 maxlen: 24
                          93.190.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a4:e6:8c:10:07:a2:e4:ec:55:a7:14:89:95:e1:b9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
        Validity
            Not Before: Sep 15 11:49:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=460b1e788a5c3eebbffd7034efd87a862911eacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:10:2a:27:a5:35:9d:20:d6:cd:3d:8e:bd:
                    87:3e:c9:98:0a:98:e5:a7:cc:57:84:b8:ba:d0:ac:
                    50:b1:e2:c0:fa:c9:67:00:b7:bd:9d:3b:05:97:ab:
                    c6:5b:ba:56:95:7e:71:cd:3f:1e:b2:3b:c9:73:b4:
                    42:80:7b:16:92:4e:87:5d:d1:1c:86:91:98:53:81:
                    18:cb:cd:46:27:e7:27:85:ed:35:ec:40:1e:54:01:
                    24:6c:66:32:63:8a:8a:1e:11:ff:ee:5f:28:50:74:
                    4f:1d:78:bb:f8:a0:26:e8:b2:ce:d9:0c:40:50:12:
                    d6:2a:18:1e:5b:7a:9c:92:13:44:e5:8c:d8:05:50:
                    3f:d3:51:b1:a7:a2:94:54:ae:81:5e:11:af:1f:ce:
                    4c:c0:49:52:6c:e2:cd:70:63:f3:bb:e1:5d:95:7e:
                    5f:49:e1:74:7a:3b:c6:9e:19:6e:07:a4:df:cc:e4:
                    3d:13:16:8f:df:78:3f:65:ac:c1:0f:6e:02:a1:6d:
                    c7:7e:dd:47:fc:ec:35:2c:3b:c9:5a:4f:a0:8f:ff:
                    90:d1:fc:ad:7c:ea:9b:13:46:70:78:9e:de:87:d2:
                    04:b4:84:b9:13:ad:b1:50:4d:9f:30:9a:6d:bb:8a:
                    4b:63:a8:9e:df:b4:28:2b:9c:87:55:d0:3e:68:25:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0B:1E:78:8A:5C:3E:EB:BF:FD:70:34:EF:D8:7A:86:29:11:EA:CD
            X509v3 Authority Key Identifier:
                keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/RgseeIpcPuu__XA079h6hikR6s0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:04:09:c2:1d:fd:6a:6a:1f:b2:97:18:0a:aa:b6:8b:8d:
         71:40:12:1f:4d:b5:a2:d6:cf:81:09:f0:cc:86:43:d8:1c:44:
         84:9c:08:e7:30:9e:f3:8d:12:9b:c5:04:22:be:e6:a9:99:56:
         a8:c5:a0:e1:da:cd:b4:19:83:6f:de:a9:fc:73:1a:c6:30:6f:
         4e:12:7f:43:b5:23:5d:57:33:48:24:9f:d8:92:03:95:7e:92:
         c7:d6:00:99:7c:c0:2f:5b:cb:b1:bf:bb:d0:12:1a:21:05:5d:
         c6:e9:fa:ca:81:1e:57:d9:71:c6:ba:35:a1:49:e6:89:0a:89:
         6f:e3:2a:1a:2d:a8:2d:d7:a3:e3:f4:be:4d:d2:15:55:61:59:
         cf:da:ab:08:21:2c:4a:9b:b3:a8:27:88:28:14:20:eb:7e:ea:
         6b:46:73:3b:d5:81:22:30:cb:18:19:f5:d4:17:01:1f:64:b0:
         4c:fd:a2:9f:2b:76:7c:d1:92:88:08:2f:8c:06:7e:75:63:64:
         1f:ce:55:df:1c:34:16:c5:8e:d5:03:41:ab:e1:81:34:0f:93:
         67:49:25:92:f0:ea:0c:5d:c8:9e:e7:5f:42:8d:8f:a1:73:82:
         df:9a:3c:fd:bb:96:da:b5:14:66:86:24:51:39:e2:48:1d:83:
         6b:d4:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:07 2026 by rpki-client