Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/iCDvku3m5w_U1YbhR5731sLz3Jk.roa
File:                     iCDvku3m5w_U1YbhR5731sLz3Jk.roa (raw, json)
Hash identifier:          HSMFpcX3vFuZLy6ku/T5MzZVValf2apsDIQyRtjYsiM=
Subject key identifier:   88:20:EF:92:ED:E6:E7:0F:D4:D5:86:E1:47:9E:F7:D6:C2:F3:DC:99
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       0198554E82D4E128FE9A1340DB40572ED440
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/iCDvku3m5w_U1YbhR5731sLz3Jk.roa
Signing time:             Tue 29 Jul 2025 08:31:05 +0000
ROA not before:           Tue 29 Jul 2025 08:31:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34766
IP address blocks:        95.142.110.0/24 maxlen: 24
                          193.202.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:4e:82:d4:e1:28:fe:9a:13:40:db:40:57:2e:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Jul 29 08:31:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8820ef92ede6e70fd4d586e1479ef7d6c2f3dc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:97:52:63:ee:40:d1:ad:4e:9b:4d:e3:94:
                    c0:66:a9:e0:32:34:3a:ee:16:92:df:eb:a5:df:b9:
                    77:79:8e:08:c0:8c:90:9a:35:1d:66:aa:6f:c9:3d:
                    13:0c:9d:51:c3:c0:91:04:55:96:2a:98:8c:6c:f5:
                    0f:f9:c8:2f:2c:88:da:76:bf:98:91:9a:23:a4:83:
                    09:d0:2c:5a:b0:40:07:59:1d:ee:1b:1b:13:18:d6:
                    f6:7c:17:57:f8:3c:de:c2:c7:30:57:6b:63:ef:9b:
                    51:3d:0b:42:92:63:d1:fc:08:51:6f:42:14:26:3f:
                    24:e1:cd:ad:a6:4b:fa:11:6c:03:fe:1b:64:2a:29:
                    9f:ae:29:2e:6c:94:1c:ec:b8:33:de:43:d2:04:bd:
                    fd:bb:8c:76:71:8c:a6:72:82:03:f5:9c:de:f7:81:
                    b9:28:99:f1:d1:ff:14:33:44:ab:15:87:b9:2c:20:
                    f4:bc:5d:d0:a5:e6:4b:3f:e7:6f:df:f0:c8:14:1f:
                    5e:46:ed:8b:f4:e1:89:df:cd:c2:7d:2e:be:94:2f:
                    6f:86:56:9e:da:09:d1:df:53:50:4a:62:17:98:4b:
                    fb:f9:ae:17:84:84:66:b5:5f:eb:fe:3a:6f:ba:2c:
                    4f:b0:36:9c:0b:97:50:39:af:0f:ed:3a:14:45:4d:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:20:EF:92:ED:E6:E7:0F:D4:D5:86:E1:47:9E:F7:D6:C2:F3:DC:99
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/iCDvku3m5w_U1YbhR5731sLz3Jk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.142.110.0/24
                  193.202.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:01:89:d6:f8:a1:f9:0f:60:89:22:6d:68:b2:10:ba:48:23:
         a7:0d:92:2a:5c:7c:5b:d3:98:f6:34:38:07:73:08:0a:a6:5c:
         b8:39:e5:30:f4:6c:a7:17:8b:64:53:66:21:c9:d3:ee:e7:86:
         17:2c:ed:8f:ff:23:86:ca:2d:c2:e0:6b:61:96:b7:bb:87:85:
         b9:e2:a9:f0:79:f4:94:01:a3:76:7f:e9:c2:10:09:4c:17:5b:
         9d:1c:fb:13:74:99:b1:eb:96:bc:37:4f:05:91:32:ad:75:af:
         af:cb:49:ec:b6:7e:d1:89:38:04:11:6c:de:5d:14:44:45:40:
         82:a2:a6:83:53:57:0f:44:9f:f4:37:a2:ce:4d:a7:53:ef:2b:
         fb:8c:ff:7c:96:b8:0f:5c:20:32:85:ac:2c:d1:4b:5f:88:85:
         81:67:e2:77:24:39:1d:66:54:f9:9a:c8:00:af:e6:4b:d0:ec:
         45:95:aa:61:e2:d8:7f:eb:35:cd:f0:e1:5f:02:89:ff:e9:ab:
         8b:b0:37:fa:d1:d7:6e:92:11:05:70:32:16:8b:40:0d:c5:35:
         94:5a:63:57:bb:ac:a9:26:4c:49:45:44:eb:8d:2c:d0:43:40:
         4c:9b:22:77:45:47:e3:e1:bc:89:22:0e:bf:ae:7b:48:5e:0d:
         0f:1a:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:42 2025 by rpki-client